Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
File: CEl1fj41qqtdV8UYYkOkNxc-TTY.mft (raw, json)
Hash identifier: aDT5MGCTOoCQbGjqOOLNZRgq8ka+w1IQ3oJTmQzbobc=
Subject key identifier: 4F:27:63:64:FD:41:43:80:76:C1:FE:83:8C:91:6E:B3:3E:A9:2A:EC
Authority key identifier: 08:49:75:7E:3E:35:AA:AB:5D:57:C5:18:62:43:A4:37:17:3E:4D:36
Certificate issuer: /CN=0849757e3e35aaab5d57c5186243a437173e4d36
Certificate serial: 019F18304EE4B3E150CA77EC086E299102F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
Manifest number: 16C1
Signing time: Tue 30 Jun 2026 11:00:46 +0000
Manifest this update: Tue 30 Jun 2026 11:00:46 +0000
Manifest next update: Wed 01 Jul 2026 11:00:46 +0000
Files and hashes: 1: CEl1fj41qqtdV8UYYkOkNxc-TTY.crl (hash: /LLe0i54FZt/uJ3HBDUJVhgmBiMD3fjl7oa1Eg+2yGE=)
2: LChGuhkA0gjqQw0ADj2C4E66PrY.roa (hash: yikgcRChSKL+1ugFP9oI4DkOVsuw2tP1bpSv262Uskc=)
3: Xvor6sHffWDb_gSNM1nS_zNqIlk.roa (hash: FYSQWRIi2pReCA7SOIEtCKhDaRDp0KJNqlBByNN1x3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 11:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:30:4e:e4:b3:e1:50:ca:77:ec:08:6e:29:91:02:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0849757e3e35aaab5d57c5186243a437173e4d36
Validity
Not Before: Jun 30 11:00:46 2026 GMT
Not After : Jul 1 11:00:46 2026 GMT
Subject: CN=4f276364fd41438076c1fe838c916eb33ea92aec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1a:b8:9e:3f:2d:95:4a:de:a4:4b:50:cd:d6:
72:7a:cf:4f:b9:f1:43:fa:f7:67:21:de:35:61:b0:
a0:59:04:fd:81:66:5b:44:c9:18:cc:16:1e:21:82:
5e:76:65:cb:79:e0:18:1e:2c:3b:6f:02:57:9a:55:
89:be:8d:6c:31:8b:3d:03:85:f8:68:49:6a:7b:85:
10:af:74:8c:94:89:25:e5:28:04:26:a1:2b:1c:fd:
69:49:3e:76:99:ab:9a:8a:ff:d6:fe:46:15:d7:75:
9c:93:35:97:c4:4b:88:bf:3d:bc:14:dc:29:2b:84:
c5:d3:40:ae:9a:b2:8c:c4:aa:ce:0d:63:34:71:08:
3e:ca:ff:44:13:93:00:c1:46:4f:fe:f4:3c:c4:29:
97:5f:11:13:36:f4:be:d3:bb:29:7e:47:82:33:f2:
6f:e1:53:27:43:7e:31:7e:ab:90:ae:a8:9e:c3:c2:
8e:da:ef:ee:29:92:b9:62:a1:1f:04:9b:5e:2e:29:
53:8f:df:5a:15:1c:a5:7a:db:c1:42:a2:ef:4c:aa:
98:cd:9a:ad:d2:4f:08:2e:2d:8d:44:b8:7c:26:ab:
01:2e:26:ca:17:41:d2:b2:29:1b:e4:92:a7:0a:a3:
8b:a4:64:fc:9c:9e:83:28:1f:27:50:43:77:3a:fd:
5f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:27:63:64:FD:41:43:80:76:C1:FE:83:8C:91:6E:B3:3E:A9:2A:EC
X509v3 Authority Key Identifier:
keyid:08:49:75:7E:3E:35:AA:AB:5D:57:C5:18:62:43:A4:37:17:3E:4D:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:69:10:cc:6d:34:90:6d:81:1b:5e:05:56:92:d0:98:3f:66:
5d:f2:fd:17:7e:ec:a3:5f:1f:ee:5d:34:96:36:4e:aa:71:1a:
8c:f1:bf:49:fc:90:c9:3a:15:97:c4:ea:ee:a2:22:bc:15:7b:
e6:bf:05:ed:6b:d3:3a:a5:1a:3d:47:22:4d:85:ec:a0:2d:dc:
cf:a1:ba:66:90:9c:d0:14:8e:2c:dd:19:c0:c2:a0:8f:f7:d7:
1b:e5:5f:c5:76:3b:22:43:e3:8a:df:69:05:b7:e8:92:18:9f:
e4:cf:42:b9:18:0b:d9:7a:fd:37:2b:ad:1e:9d:bb:29:85:fa:
47:5d:a0:97:b2:13:72:6b:96:79:90:9b:35:6a:17:1e:a4:7d:
3a:c3:b7:c9:94:dc:97:8d:c1:a1:9e:8f:c2:2f:d2:82:20:7f:
29:21:28:2a:66:4e:79:c6:a4:56:d7:87:93:29:64:2c:6d:66:
ba:cc:cd:48:df:b6:ca:bc:18:43:9d:37:80:6f:ab:31:93:33:
4b:44:78:8e:6f:58:ba:4a:78:03:87:f1:f8:97:17:b0:e5:2d:
d5:0b:4e:c9:00:ca:fc:ef:fb:16:57:3f:ec:1e:62:48:1b:cb:
13:8f:48:83:76:eb:31:21:84:b3:82:1b:57:c1:80:16:2b:d7:
47:98:b8:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:03 2026 by rpki-client