Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
File: CEl1fj41qqtdV8UYYkOkNxc-TTY.mft (raw, json)
Hash identifier: vGWQ9YQ1re2OErcN8LewZPGLOx4FKuPfMoJcpka39/s=
Subject key identifier: 17:C7:81:1C:E1:71:FC:68:1F:80:8A:CF:94:08:72:64:0F:4A:8B:11
Authority key identifier: 08:49:75:7E:3E:35:AA:AB:5D:57:C5:18:62:43:A4:37:17:3E:4D:36
Certificate issuer: /CN=0849757e3e35aaab5d57c5186243a437173e4d36
Certificate serial: 019D3940B4B159086A778AA7ED5B8C5848A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
Manifest number: 15C9
Signing time: Sun 29 Mar 2026 11:00:34 +0000
Manifest this update: Sun 29 Mar 2026 11:00:34 +0000
Manifest next update: Mon 30 Mar 2026 11:00:34 +0000
Files and hashes: 1: CEl1fj41qqtdV8UYYkOkNxc-TTY.crl (hash: nz0rTXfIEAlt0QmArADK/36cIe417g2tdMtzzjbx2Xs=)
2: LChGuhkA0gjqQw0ADj2C4E66PrY.roa (hash: yikgcRChSKL+1ugFP9oI4DkOVsuw2tP1bpSv262Uskc=)
3: Xvor6sHffWDb_gSNM1nS_zNqIlk.roa (hash: FYSQWRIi2pReCA7SOIEtCKhDaRDp0KJNqlBByNN1x3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:b4:b1:59:08:6a:77:8a:a7:ed:5b:8c:58:48:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0849757e3e35aaab5d57c5186243a437173e4d36
Validity
Not Before: Mar 29 11:00:34 2026 GMT
Not After : Mar 30 11:00:34 2026 GMT
Subject: CN=17c7811ce171fc681f808acf940872640f4a8b11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:18:27:65:92:49:74:e0:90:e2:23:76:6e:59:
66:2f:1d:b8:3d:4b:fe:de:83:90:a2:96:bc:c2:e5:
f0:14:6a:35:6a:2d:7b:3e:8b:c5:94:91:b3:fe:a8:
a7:3c:fe:cb:c2:35:72:6d:36:30:d6:52:04:a4:6b:
95:4c:de:c0:01:ae:30:ff:32:3a:f0:d5:97:d1:4c:
78:8e:66:7a:c9:39:e4:5d:a8:db:9b:b2:5a:23:cc:
35:21:26:1a:18:83:52:c6:ed:81:58:f2:48:5e:45:
0c:ac:30:74:80:70:96:47:45:64:00:09:35:97:e5:
da:6a:93:2f:33:58:2d:62:e0:91:09:12:73:bb:d7:
06:f7:b4:09:40:67:05:d1:5d:fc:16:37:6c:1a:f3:
dc:38:23:27:ec:09:3b:77:75:03:65:65:2c:69:be:
a3:b2:34:94:f6:fd:27:56:93:d9:df:73:f8:d8:33:
14:37:05:b8:25:7f:1c:43:11:50:95:09:de:04:4e:
56:c6:da:bf:ae:64:45:43:d7:63:69:47:ee:10:53:
e4:19:f2:54:e7:c6:9b:c8:40:1a:6e:ca:26:2f:d2:
06:34:8a:6b:5d:f1:4b:0a:d7:10:95:1a:82:20:aa:
8c:b0:35:0a:38:9a:0b:6a:80:64:72:e7:c9:b5:17:
c5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C7:81:1C:E1:71:FC:68:1F:80:8A:CF:94:08:72:64:0F:4A:8B:11
X509v3 Authority Key Identifier:
keyid:08:49:75:7E:3E:35:AA:AB:5D:57:C5:18:62:43:A4:37:17:3E:4D:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:e9:79:e8:b2:19:7d:c7:cf:2d:a1:1e:72:5e:3d:c7:8f:5a:
ab:e0:9a:5f:5a:ba:91:6c:9d:31:f7:93:b1:31:84:77:34:3c:
87:0e:1e:b2:f0:4b:bb:ab:24:3a:56:7f:59:d3:0c:90:fd:61:
2f:89:19:bc:8c:4e:1d:d8:07:6b:bc:ed:0c:7c:55:8e:6a:92:
27:df:32:47:4b:be:4a:ea:4b:9b:42:8e:fb:2d:d3:88:68:d5:
9a:11:94:5f:3b:92:18:09:e6:1d:6f:1c:0f:ae:0a:64:46:a1:
7d:3c:ac:cf:9b:1a:69:8b:dc:4c:fb:90:67:8e:cd:df:3d:19:
6a:4c:03:55:68:04:36:6c:39:2c:e2:10:90:8d:01:41:54:05:
f6:88:c9:af:c4:ed:77:b7:3e:66:ef:e2:96:d5:0d:e9:57:51:
0e:e1:c5:4e:1f:40:7f:59:4d:ef:6d:42:cd:6d:c7:28:50:ed:
f8:f3:f1:90:e6:34:33:63:f2:b8:cc:02:08:cb:ce:b5:5d:6a:
e0:23:df:03:8a:67:5b:b4:1b:7f:03:51:34:ff:63:f4:ff:63:
1c:c1:e5:8c:97:42:cb:8d:fc:d5:d5:fb:c5:e0:0d:55:a1:40:
92:89:f2:46:bd:fc:ac:d5:18:09:fe:d7:ad:ae:86:b0:11:1c:
f9:93:57:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:09 2026 by rpki-client