Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c01148-0a92-468e-93f3-ada1b5db0df5/1/CR_17YOpg_iNWfDD5kja4LtSeJw.mft
File: CR_17YOpg_iNWfDD5kja4LtSeJw.mft (raw, json)
Hash identifier: BDapyf5awtq5a6OjElM098wjX1h1K0j8xDqmG1Ugr70=
Subject key identifier: CE:EC:DE:BF:A2:64:74:17:B7:1A:BC:70:B2:C7:76:DB:FA:09:1C:9B
Authority key identifier: 09:1F:F5:ED:83:A9:83:F8:8D:59:F0:C3:E6:48:DA:E0:BB:52:78:9C
Certificate issuer: /CN=091ff5ed83a983f88d59f0c3e648dae0bb52789c
Certificate serial: 019F41D1A815931BBDDEBE0D859F00DDCACF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR_17YOpg_iNWfDD5kja4LtSeJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c01148-0a92-468e-93f3-ada1b5db0df5/1/CR_17YOpg_iNWfDD5kja4LtSeJw.mft
Manifest number: 5A
Signing time: Wed 08 Jul 2026 13:01:26 +0000
Manifest this update: Wed 08 Jul 2026 13:01:26 +0000
Manifest next update: Thu 09 Jul 2026 13:01:26 +0000
Files and hashes: 1: CR_17YOpg_iNWfDD5kja4LtSeJw.crl (hash: IL0IpSqOeuygUYn4c4mcJw806fViBqWBOP3f/S4dcWM=)
2: RTOXX5ZwDhxuOuF0QnPVEy5mY-E.roa (hash: jrK0N7c1cbcDYn7LYluZvhpwTISFdtPphVGCy6lVvQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/c01148-0a92-468e-93f3-ada1b5db0df5/1/CR_17YOpg_iNWfDD5kja4LtSeJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/c01148-0a92-468e-93f3-ada1b5db0df5/1/CR_17YOpg_iNWfDD5kja4LtSeJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CR_17YOpg_iNWfDD5kja4LtSeJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 13:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:41:d1:a8:15:93:1b:bd:de:be:0d:85:9f:00:dd:ca:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091ff5ed83a983f88d59f0c3e648dae0bb52789c
Validity
Not Before: Jul 8 13:01:26 2026 GMT
Not After : Jul 9 13:01:26 2026 GMT
Subject: CN=ceecdebfa2647417b71abc70b2c776dbfa091c9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0e:ef:e4:31:7c:2a:92:9d:94:14:c7:57:c6:
eb:72:85:25:f3:a4:0c:b8:b4:9c:e7:2e:47:6a:cd:
2f:08:4d:46:65:bd:bf:b4:46:d6:69:cf:98:64:b6:
80:f0:64:22:2b:e6:c9:f4:b0:da:55:38:e7:6b:96:
ce:a0:3b:0b:4d:8f:71:cf:89:69:a3:c6:81:19:84:
f3:67:c9:26:39:60:10:f8:f3:fb:0e:48:c5:a0:9a:
d5:50:5e:d9:1c:0d:dd:a6:8c:85:bf:57:a7:bf:45:
51:8e:9d:b5:b5:bd:0b:b3:51:21:f6:ab:21:ba:d7:
1e:fc:00:c0:c4:2c:34:c4:39:d5:e9:f0:ec:bd:64:
22:b4:2b:10:26:fe:53:23:12:37:37:f8:ad:63:cb:
2c:42:d9:d9:f6:1c:95:c7:e2:d7:ab:87:37:91:23:
0c:b1:80:23:4d:9e:48:61:97:04:f8:77:0b:f9:59:
d4:26:a1:6e:3a:04:6e:b9:22:45:fa:05:6f:f9:9a:
f7:6a:7d:8d:cb:b8:2a:03:ac:33:c2:e4:e8:b6:3a:
bd:cb:d3:39:ef:55:c6:22:a1:bb:da:bd:03:b0:f7:
a7:97:d0:fa:30:9c:6d:b6:36:51:8e:41:7e:3c:79:
e3:8a:0b:e5:18:34:b5:d6:50:12:ec:a9:9c:7c:9c:
b1:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:EC:DE:BF:A2:64:74:17:B7:1A:BC:70:B2:C7:76:DB:FA:09:1C:9B
X509v3 Authority Key Identifier:
keyid:09:1F:F5:ED:83:A9:83:F8:8D:59:F0:C3:E6:48:DA:E0:BB:52:78:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR_17YOpg_iNWfDD5kja4LtSeJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c01148-0a92-468e-93f3-ada1b5db0df5/1/CR_17YOpg_iNWfDD5kja4LtSeJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c01148-0a92-468e-93f3-ada1b5db0df5/1/CR_17YOpg_iNWfDD5kja4LtSeJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:ea:b8:6f:33:92:0b:3b:61:06:32:3c:ed:bb:39:a9:66:92:
a4:c6:59:e2:f9:61:41:c9:83:06:5e:57:dd:56:17:e2:09:7d:
5a:0a:32:c0:79:ac:fe:4d:2f:8f:5d:cc:79:b2:15:7c:1f:f9:
c4:c6:83:dc:f7:ba:cd:53:43:9c:13:89:26:c4:26:d2:d1:17:
11:ac:ad:0f:a0:33:90:cf:65:2b:c6:19:50:c3:f7:e4:79:2b:
6b:30:85:70:f1:2c:04:33:94:52:4b:a7:dc:60:c7:98:47:c4:
71:86:2e:35:f9:6a:39:9b:ce:c0:1f:4d:8b:17:87:da:6e:25:
75:1b:0f:53:c5:0f:db:03:b4:0d:54:c7:cd:cb:68:3c:2e:2d:
6c:01:11:ba:51:bc:dd:bc:5b:7a:1a:cc:05:62:a6:94:82:e6:
1d:c6:da:d2:97:ae:ad:31:03:d6:3e:23:51:ac:43:bb:bb:ee:
7f:03:fc:69:14:5f:69:eb:b8:89:39:5c:06:f5:44:13:b4:60:
68:d2:1b:c6:ca:6f:07:ec:ba:c9:9e:d8:3c:c3:49:51:a3:14:
71:cb:1d:46:c3:95:ac:44:b4:43:ac:87:c7:db:41:46:b0:50:
3d:4b:97:a3:cf:26:92:de:1a:f2:9d:38:2b:10:8e:83:21:b5:
c6:f1:09:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:26:54 2026 by rpki-client