Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
File: CEl1fj41qqtdV8UYYkOkNxc-TTY.mft (raw, json)
Hash identifier: /ch2v1ty6bdFmAFJPkYWN2uZcp4KMPTx4SkMAYGxHDg=
Subject key identifier: 58:5D:6F:8A:85:08:F8:50:9E:0C:BC:46:B5:C2:2C:62:F7:77:5D:AC
Authority key identifier: 08:49:75:7E:3E:35:AA:AB:5D:57:C5:18:62:43:A4:37:17:3E:4D:36
Certificate issuer: /CN=0849757e3e35aaab5d57c5186243a437173e4d36
Certificate serial: 019E1D231211DD395BD80146B9FAB9C70B3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
Manifest number: 163F
Signing time: Tue 12 May 2026 17:01:38 +0000
Manifest this update: Tue 12 May 2026 17:01:38 +0000
Manifest next update: Wed 13 May 2026 17:01:38 +0000
Files and hashes: 1: CEl1fj41qqtdV8UYYkOkNxc-TTY.crl (hash: A4JPJiBOyGMryrVovGoLencQ2xaoQqDHNm2+e1c+xVQ=)
2: LChGuhkA0gjqQw0ADj2C4E66PrY.roa (hash: yikgcRChSKL+1ugFP9oI4DkOVsuw2tP1bpSv262Uskc=)
3: Xvor6sHffWDb_gSNM1nS_zNqIlk.roa (hash: FYSQWRIi2pReCA7SOIEtCKhDaRDp0KJNqlBByNN1x3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:23:12:11:dd:39:5b:d8:01:46:b9:fa:b9:c7:0b:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0849757e3e35aaab5d57c5186243a437173e4d36
Validity
Not Before: May 12 17:01:38 2026 GMT
Not After : May 13 17:01:38 2026 GMT
Subject: CN=585d6f8a8508f8509e0cbc46b5c22c62f7775dac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:09:2f:dc:0c:28:af:93:fa:d5:e5:ed:44:bb:
95:86:e9:b6:7c:92:d0:a9:dd:41:de:51:6c:38:d4:
ab:98:27:78:11:c3:5f:10:aa:fb:8e:05:2f:17:18:
16:e4:80:e4:66:05:e9:15:49:08:cf:0b:cb:8c:84:
c2:45:41:6d:03:74:3f:35:98:75:32:33:27:b7:de:
5f:0c:d3:b8:be:57:a9:16:b6:ee:49:d7:5b:a8:3b:
76:01:52:8b:ef:9b:a1:0c:22:06:15:dc:8e:18:ad:
1c:cb:2b:1c:ad:c6:c9:ef:b1:d3:3d:d2:06:02:7a:
a4:b6:61:cd:fe:6f:b6:a6:f3:a4:88:1a:92:1d:78:
85:25:5c:cb:54:e2:40:82:0b:a6:3b:bd:f5:cb:7e:
8e:ae:75:29:4b:f8:ca:cd:f2:86:6d:07:61:db:c3:
28:68:66:32:30:72:ec:d3:f8:43:ea:e6:99:4b:e6:
11:17:4d:2e:21:75:8b:fd:02:f1:16:2b:ba:1a:af:
f8:a8:76:52:f7:05:16:95:d7:15:49:b6:e4:80:72:
5a:c8:46:4d:b3:8f:41:67:ec:3f:50:7e:9d:53:61:
f7:14:26:20:86:3c:08:9c:74:fc:6d:67:e2:fa:5f:
98:bb:15:2e:67:f7:0c:9d:05:47:90:ca:5c:1b:b9:
7f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:5D:6F:8A:85:08:F8:50:9E:0C:BC:46:B5:C2:2C:62:F7:77:5D:AC
X509v3 Authority Key Identifier:
keyid:08:49:75:7E:3E:35:AA:AB:5D:57:C5:18:62:43:A4:37:17:3E:4D:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:ef:35:10:42:49:fe:00:77:5e:7f:c9:9e:d4:00:7e:b8:28:
49:4b:ce:db:d9:95:7f:8d:9b:29:aa:ac:a6:f7:80:55:29:45:
14:4b:e2:1a:fc:8b:ce:af:40:59:58:bd:e8:1b:a5:b0:d2:9f:
ec:75:c1:22:3d:18:f0:b7:0b:22:c0:89:9d:53:49:aa:5e:26:
c5:ff:00:ea:3f:5b:dd:a5:5e:64:b0:16:eb:8f:40:73:84:c7:
2e:25:79:fc:a8:2f:be:3a:e2:2a:7b:ea:56:5a:d6:f0:2e:fd:
83:c0:5f:07:8a:9a:23:db:d4:6b:4c:69:46:5f:21:2d:c6:62:
54:3e:ce:d3:d4:c9:5b:9c:27:22:c6:fb:e6:68:2c:00:7b:af:
47:46:35:dc:9b:63:be:8d:98:f2:98:81:42:be:e5:2a:71:1d:
ef:12:e0:e5:c1:aa:a4:34:b4:08:30:50:1d:b3:8d:6c:1c:d3:
26:ce:a8:75:e1:84:b4:d5:24:2b:54:5b:ff:ec:08:d3:34:a3:
cd:6d:eb:5e:cf:2e:1f:c3:7c:db:4e:d2:19:f4:24:99:67:7a:
10:76:ef:4c:5d:57:5a:29:c9:22:e2:ce:35:43:32:67:11:2e:
58:5f:17:3e:60:64:6e:68:da:36:4c:f2:7c:6e:57:65:8f:29:
44:28:72:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:26:39 2026 by rpki-client