Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
File: CEl1fj41qqtdV8UYYkOkNxc-TTY.mft (raw, json)
Hash identifier: u/p/iwPWD4Hc+JC+8g9iwdpqvyJ4rKWQ1Unf51Xfem8=
Subject key identifier: 03:63:BC:22:BE:86:B2:A2:71:2F:D5:DC:73:32:E7:20:AE:59:15:AA
Authority key identifier: 08:49:75:7E:3E:35:AA:AB:5D:57:C5:18:62:43:A4:37:17:3E:4D:36
Certificate issuer: /CN=0849757e3e35aaab5d57c5186243a437173e4d36
Certificate serial: 01A001DD62DFB49778FB22AF2BFD635282B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
Manifest number: 173A
Signing time: Fri 14 Aug 2026 20:01:20 +0000
Manifest this update: Fri 14 Aug 2026 20:01:20 +0000
Manifest next update: Sat 15 Aug 2026 20:01:20 +0000
Files and hashes: 1: CEl1fj41qqtdV8UYYkOkNxc-TTY.crl (hash: Cnr89LboulZWDtCd8kPSRVDSU076R+AH99fbM+dIvGU=)
2: LChGuhkA0gjqQw0ADj2C4E66PrY.roa (hash: yikgcRChSKL+1ugFP9oI4DkOVsuw2tP1bpSv262Uskc=)
3: Xvor6sHffWDb_gSNM1nS_zNqIlk.roa (hash: FYSQWRIi2pReCA7SOIEtCKhDaRDp0KJNqlBByNN1x3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:62:df:b4:97:78:fb:22:af:2b:fd:63:52:82:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0849757e3e35aaab5d57c5186243a437173e4d36
Validity
Not Before: Aug 14 20:01:20 2026 GMT
Not After : Aug 15 20:01:20 2026 GMT
Subject: CN=0363bc22be86b2a2712fd5dc7332e720ae5915aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3c:2e:61:e4:b5:27:76:25:83:cd:34:22:76:
5a:e8:4b:92:94:4d:5f:ef:6f:50:fd:c3:ab:bd:79:
a8:bf:36:14:9a:a9:d6:0f:16:0e:4f:71:94:3f:96:
e4:1d:32:15:c0:bc:51:61:f4:c7:25:31:1d:3f:3c:
e0:3e:e2:4d:67:3d:17:43:a2:9b:f2:dd:17:db:33:
cc:a6:14:78:bb:c1:b6:2a:ca:99:f3:b6:5d:b5:57:
8a:63:c7:4c:e7:b1:4c:65:59:84:2b:79:72:6a:80:
c5:0f:e9:0a:5a:10:13:25:0e:2a:7c:36:86:bf:9c:
ef:6e:c9:64:c0:9c:ed:3a:a2:fa:41:bf:88:b8:e9:
e5:2a:16:0d:36:93:d9:70:0b:6d:19:58:66:80:aa:
fb:66:54:88:1d:8b:0c:f2:53:f6:6c:2c:3d:fa:35:
8b:fb:28:f5:66:f6:61:c9:ac:4e:06:89:2e:5e:56:
8a:43:ba:57:00:75:a7:44:ae:d7:8e:1d:2e:39:90:
6b:52:c4:01:a0:59:d1:3a:64:9b:4e:d8:f7:44:17:
c2:1d:be:13:b9:4c:23:d0:35:10:8d:16:bb:ef:f5:
6c:3a:3d:91:06:79:98:a1:74:90:a9:c2:9d:65:e3:
cf:dd:bf:a6:cf:fa:01:64:ff:8f:f9:87:cd:36:ca:
33:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:63:BC:22:BE:86:B2:A2:71:2F:D5:DC:73:32:E7:20:AE:59:15:AA
X509v3 Authority Key Identifier:
keyid:08:49:75:7E:3E:35:AA:AB:5D:57:C5:18:62:43:A4:37:17:3E:4D:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:8d:a9:df:73:34:bf:eb:50:58:8c:a2:68:3b:0d:de:20:2d:
1a:82:d8:b3:c8:e7:ee:d1:4d:8b:89:b8:ac:6e:5f:8e:fa:8c:
d1:71:94:15:e5:8f:22:4e:c5:ea:9a:c8:d8:2c:73:48:40:95:
5f:77:6d:28:a1:1e:cf:5a:db:a2:b1:7d:5d:3e:c3:24:4e:0b:
77:e6:e6:1d:f4:74:bf:b5:b7:07:dd:a1:6c:5a:09:23:a7:85:
c7:13:e3:46:fb:a6:18:9d:dc:a3:67:38:26:49:f3:d8:b3:32:
00:82:21:bb:80:29:db:0b:b4:55:63:43:d6:6e:1f:5e:b0:4b:
ad:16:69:4e:ea:6f:b4:ec:62:c3:a3:6e:4f:89:53:95:ab:c9:
61:d4:24:88:87:f6:b9:c6:01:3a:85:19:74:da:f7:72:52:90:
4c:48:cc:0d:32:01:67:8a:4e:87:49:43:5f:82:3e:95:0e:16:
dc:43:c6:fd:83:bb:08:ca:08:5d:04:e5:3c:9d:c1:f9:41:ca:
3e:ec:e7:5a:36:cc:13:70:7f:32:b6:70:98:48:46:ee:f2:fa:
19:5b:5c:74:b6:ba:06:38:03:ea:35:21:4e:43:1a:58:6b:43:
f7:01:1f:66:a9:84:7b:99:de:1f:73:4d:ef:eb:ed:8b:5d:db:
f0:ee:bc:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAB3WLftJd4+yKvK/1jUoKzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4NDk3NTdlM2UzNWFhYWI1ZDU3YzUxODYyNDNhNDM3MTcz
ZTRkMzYwHhcNMjYwODE0MjAwMTIwWhcNMjYwODE1MjAwMTIwWjAzMTEwLwYDVQQD
EygwMzYzYmMyMmJlODZiMmEyNzEyZmQ1ZGM3MzMyZTcyMGFlNTkxNWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojwuYeS1J3Ylg800InZa6EuSlE1f
729Q/cOrvXmovzYUmqnWDxYOT3GUP5bkHTIVwLxRYfTHJTEdPzzgPuJNZz0XQ6Kb
8t0X2zPMphR4u8G2KsqZ87ZdtVeKY8dM57FMZVmEK3lyaoDFD+kKWhATJQ4qfDaG
v5zvbslkwJztOqL6Qb+IuOnlKhYNNpPZcAttGVhmgKr7ZlSIHYsM8lP2bCw9+jWL
+yj1ZvZhyaxOBokuXlaKQ7pXAHWnRK7Xjh0uOZBrUsQBoFnROmSbTtj3RBfCHb4T
uUwj0DUQjRa77/VsOj2RBnmYoXSQqcKdZePP3b+mz/oBZP+P+YfNNsoz4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFANjvCK+hrKicS/V3HMy5yCuWRWqMB8GA1UdIwQY
MBaAFAhJdX4+NaqrXVfFGGJDpDcXPk02MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0VsMWZqNDFxcXRkVjhVWVlrT2tOeGMtVFRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9mYjI0MDEtZTQ3MC00YzA1LTk5Yjgt
ZjhlZWNiNDI1MDg3LzEvQ0VsMWZqNDFxcXRkVjhVWVlrT2tOeGMtVFRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9mYjI0MDEtZTQ3MC00YzA1LTk5YjgtZjhlZWNiNDI1MDg3
LzEvQ0VsMWZqNDFxcXRkVjhVWVlrT2tOeGMtVFRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeo2p33M0
v+tQWIyiaDsN3iAtGoLYs8jn7tFNi4m4rG5fjvqM0XGUFeWPIk7F6prI2CxzSECV
X3dtKKEez1rborF9XT7DJE4Ld+bmHfR0v7W3B92hbFoJI6eFxxPjRvumGJ3co2c4
Jknz2LMyAIIhu4Ap2wu0VWND1m4fXrBLrRZpTupvtOxiw6NuT4lTlavJYdQkiIf2
ucYBOoUZdNr3clKQTEjMDTIBZ4pOh0lDX4I+lQ4W3EPG/YO7CMoIXQTlPJ3B+UHK
PuznWjbME3B/MrZwmEhG7vL6GVtcdLa6BjgD6jUhTkMaWGtD9wEfZqmEe5neH3NN
7+vti13b8O68mA==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:04 2026 by rpki-client