Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
File: CEl1fj41qqtdV8UYYkOkNxc-TTY.mft (raw, json)
Hash identifier: /Yo2VC+wkcE9K5OXOzgxBXNO2yJEeFVl7WP3dOUPvbU=
Subject key identifier: 3C:5A:FD:2B:CF:A2:A8:6E:13:BE:24:2A:4D:22:96:AE:07:6A:D8:4A
Authority key identifier: 08:49:75:7E:3E:35:AA:AB:5D:57:C5:18:62:43:A4:37:17:3E:4D:36
Certificate issuer: /CN=0849757e3e35aaab5d57c5186243a437173e4d36
Certificate serial: 019E307267AFD31BD71A93E1E3D490BB2D5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
Manifest number: 1649
Signing time: Sat 16 May 2026 11:01:04 +0000
Manifest this update: Sat 16 May 2026 11:01:04 +0000
Manifest next update: Sun 17 May 2026 11:01:04 +0000
Files and hashes: 1: CEl1fj41qqtdV8UYYkOkNxc-TTY.crl (hash: PTG461eGwN/+hjEVFTFN3RyExt6qzabv5BbfEVXHV5o=)
2: LChGuhkA0gjqQw0ADj2C4E66PrY.roa (hash: yikgcRChSKL+1ugFP9oI4DkOVsuw2tP1bpSv262Uskc=)
3: Xvor6sHffWDb_gSNM1nS_zNqIlk.roa (hash: FYSQWRIi2pReCA7SOIEtCKhDaRDp0KJNqlBByNN1x3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:72:67:af:d3:1b:d7:1a:93:e1:e3:d4:90:bb:2d:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0849757e3e35aaab5d57c5186243a437173e4d36
Validity
Not Before: May 16 11:01:04 2026 GMT
Not After : May 17 11:01:04 2026 GMT
Subject: CN=3c5afd2bcfa2a86e13be242a4d2296ae076ad84a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:dd:f0:3f:e6:2d:b0:ca:60:97:42:99:82:1f:
91:57:56:9f:d9:d1:a1:ba:80:42:f4:98:71:e8:b0:
07:08:86:ca:3c:bb:b0:b3:a1:e1:4b:04:bb:86:fd:
81:87:66:f9:33:0c:b9:da:b8:2f:a4:ec:63:c5:3c:
bb:16:7e:b7:7c:c4:9e:da:76:21:3d:9c:d1:db:fd:
d4:68:a1:b7:3f:64:4f:11:6f:fc:00:5d:b0:ef:e6:
fb:07:72:16:24:c9:98:95:c8:b5:3e:9a:12:1c:fa:
b9:9d:4b:28:82:2b:4a:cb:71:30:c1:a5:51:c9:02:
f0:fb:ef:ab:a2:36:25:75:d9:66:9f:19:bf:61:07:
48:a0:1d:07:98:26:b2:da:ee:82:95:04:88:7a:82:
d0:95:43:55:57:91:44:c8:d9:34:b5:83:02:98:82:
51:e0:c9:ae:db:6e:7e:b6:1b:73:30:cb:cc:50:24:
c4:ef:a5:4a:b8:84:ca:a3:73:0a:f8:91:31:a4:93:
23:0d:d7:98:27:56:9c:77:84:ad:e1:9f:cb:13:7f:
36:08:37:06:df:03:8c:68:3b:65:82:3b:cf:9c:da:
2f:25:32:7f:11:33:07:a9:61:3b:d1:36:0b:4b:1e:
9e:e3:df:a4:1c:ea:4e:d1:ec:d5:6f:95:02:14:ea:
b6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:5A:FD:2B:CF:A2:A8:6E:13:BE:24:2A:4D:22:96:AE:07:6A:D8:4A
X509v3 Authority Key Identifier:
keyid:08:49:75:7E:3E:35:AA:AB:5D:57:C5:18:62:43:A4:37:17:3E:4D:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:4f:87:66:54:65:15:50:6a:c1:de:c5:e4:99:9c:86:6c:79:
c8:05:b4:7b:ed:75:4d:02:89:dc:5e:7a:68:a4:ae:48:1e:c1:
9f:b9:a9:49:2c:ed:c9:f9:6f:a2:94:52:7f:87:c6:94:d3:0d:
2e:b6:ae:05:b1:bb:6e:e1:55:71:ef:13:9e:42:8c:25:7d:47:
11:dc:03:9c:b4:b0:07:5c:8d:d7:02:a5:a8:f2:3f:6c:96:91:
f0:d7:44:f7:43:9f:62:12:92:0b:68:01:71:a7:73:f6:bd:4e:
58:21:01:e5:81:c2:9d:7a:22:a7:da:e4:4a:c2:ad:fa:e2:36:
a3:5b:27:1e:58:9a:1d:09:4b:70:20:51:73:c9:40:71:05:10:
35:71:1f:0f:50:44:4a:82:0d:73:6f:de:ba:11:71:96:9f:c2:
f2:a2:c1:fd:b9:92:42:d3:96:1a:2a:de:26:3e:94:63:b8:77:
85:ba:e9:22:ef:fb:66:ce:ae:d7:0d:ec:5c:94:a5:15:92:8e:
1e:be:b7:a6:22:d2:53:74:b3:e5:fc:9c:56:3f:1b:06:ed:47:
e1:24:91:9f:a2:58:17:77:ad:6d:95:53:fe:dd:31:41:5f:42:
50:92:15:ff:9e:29:6e:c7:8a:40:d1:3b:5e:1c:67:5d:6e:5d:
23:94:26:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:16 2026 by rpki-client