Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
File: CEl1fj41qqtdV8UYYkOkNxc-TTY.mft (raw, json)
Hash identifier: Xhl4hbK9cTJ1TDrHxdvJmHKXTY+iAXoo+pZ9ehDRC0s=
Subject key identifier: 8B:F8:B2:F9:B8:2A:18:09:00:D4:2C:9B:0D:57:FA:55:BA:AA:9E:53
Authority key identifier: 08:49:75:7E:3E:35:AA:AB:5D:57:C5:18:62:43:A4:37:17:3E:4D:36
Certificate issuer: /CN=0849757e3e35aaab5d57c5186243a437173e4d36
Certificate serial: 019D25F1274CA9C66FCB28A70CE938859EAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
Manifest number: 15BF
Signing time: Wed 25 Mar 2026 17:00:54 +0000
Manifest this update: Wed 25 Mar 2026 17:00:54 +0000
Manifest next update: Thu 26 Mar 2026 17:00:54 +0000
Files and hashes: 1: CEl1fj41qqtdV8UYYkOkNxc-TTY.crl (hash: 2LoTj4RhZT4mxW3kU19O4O6mQ2dCRIj4an9dCY9Ch7g=)
2: LChGuhkA0gjqQw0ADj2C4E66PrY.roa (hash: yikgcRChSKL+1ugFP9oI4DkOVsuw2tP1bpSv262Uskc=)
3: Xvor6sHffWDb_gSNM1nS_zNqIlk.roa (hash: FYSQWRIi2pReCA7SOIEtCKhDaRDp0KJNqlBByNN1x3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:27:4c:a9:c6:6f:cb:28:a7:0c:e9:38:85:9e:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0849757e3e35aaab5d57c5186243a437173e4d36
Validity
Not Before: Mar 25 17:00:54 2026 GMT
Not After : Mar 26 17:00:54 2026 GMT
Subject: CN=8bf8b2f9b82a180900d42c9b0d57fa55baaa9e53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0b:1b:bb:b1:e6:7a:dd:a3:e6:28:d9:74:26:
a7:aa:87:57:33:b0:63:49:2a:e2:1c:9a:04:01:4b:
33:3a:ee:4d:3a:c2:88:fb:f3:f1:df:b1:55:53:04:
fb:ac:ed:4a:56:b0:36:7c:c2:15:82:59:6a:2e:41:
35:92:79:45:52:8a:af:c5:11:35:62:08:33:85:66:
0f:22:91:1e:d0:5b:18:0d:d4:0c:cd:78:46:5c:3f:
91:b0:20:ca:e7:31:eb:a0:99:22:17:bb:ac:58:41:
18:8e:2e:5b:5e:f5:93:4b:8d:6a:e3:ad:36:1a:58:
a0:23:b2:ef:26:0e:ae:7d:92:09:c0:f0:bc:a3:7a:
25:bb:ba:32:22:61:3d:ab:98:37:60:58:a6:20:87:
cf:3c:1e:f0:7f:15:86:7f:15:dd:e3:f9:95:65:f3:
da:b7:64:e2:64:b9:95:87:a0:57:ec:5a:79:4d:8b:
e3:9e:d6:a4:a3:84:d9:19:b3:28:7a:e3:4d:e8:9a:
c1:1f:10:8c:a9:4d:84:24:1d:1e:b8:12:29:05:dd:
a1:42:b3:ee:35:9f:78:1d:7a:70:5f:9e:19:21:8d:
fc:ff:3f:a8:20:ae:de:9f:93:27:79:de:b9:72:4f:
cf:5a:89:38:91:c2:e7:48:26:dc:36:ba:09:4b:30:
62:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:F8:B2:F9:B8:2A:18:09:00:D4:2C:9B:0D:57:FA:55:BA:AA:9E:53
X509v3 Authority Key Identifier:
keyid:08:49:75:7E:3E:35:AA:AB:5D:57:C5:18:62:43:A4:37:17:3E:4D:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:76:7a:6a:c9:44:22:90:89:54:6e:d7:15:01:a1:e3:16:ca:
bc:0a:ad:83:a3:0b:08:ba:36:85:20:06:fd:9f:d6:82:ee:91:
15:1c:f1:92:34:49:41:49:d8:f5:70:b8:63:56:cb:8e:44:c7:
fc:ca:7f:bf:22:dd:db:4f:b0:2c:ac:1f:1d:d7:3e:6f:65:f1:
94:ac:a2:75:95:f2:7a:bf:6e:73:40:21:60:02:0f:fe:8e:94:
38:02:b0:2f:f8:4f:53:9d:ac:c2:8d:78:15:9a:77:cf:e8:7d:
d3:fe:8e:43:23:f8:20:ad:52:c0:9b:80:b6:80:69:26:f5:69:
9e:26:70:81:66:7d:52:ed:47:1a:22:3d:8e:bf:e6:a5:29:de:
17:73:7f:39:2a:ef:ff:a8:fd:f2:e8:9f:bd:6c:53:dc:fd:60:
fe:58:45:d8:1a:7f:38:85:bf:e7:2d:ee:f0:07:b7:c7:83:6f:
a6:6f:49:8a:a6:c8:7f:b8:82:4e:dc:54:3b:bc:2c:50:e5:0a:
89:79:9b:72:41:be:54:18:94:b2:9a:6a:0b:6f:50:42:2e:0e:
1f:e7:0a:99:a0:1e:c7:b5:7c:58:c5:7b:f6:5d:a6:9c:de:55:
fa:76:01:dc:6b:51:07:dc:82:0f:8d:ce:a6:f2:54:e0:63:e8:
10:d8:09:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:34:52 2026 by rpki-client