Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/c01148-0a92-468e-93f3-ada1b5db0df5/1/CR_17YOpg_iNWfDD5kja4LtSeJw.mft
File: CR_17YOpg_iNWfDD5kja4LtSeJw.mft (raw, json)
Hash identifier: g+PeDNdpuchxueoSa5puXrZKJmpBFpJjpLBQ+76AgaM=
Subject key identifier: 9D:5A:2E:E9:03:D6:DA:1C:57:1C:EA:73:81:93:67:34:D5:03:A7:1E
Authority key identifier: 09:1F:F5:ED:83:A9:83:F8:8D:59:F0:C3:E6:48:DA:E0:BB:52:78:9C
Certificate issuer: /CN=091ff5ed83a983f88d59f0c3e648dae0bb52789c
Certificate serial: 01A1DE03123AAD88466CAFD5B0B395F7E2B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR_17YOpg_iNWfDD5kja4LtSeJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c01148-0a92-468e-93f3-ada1b5db0df5/1/CR_17YOpg_iNWfDD5kja4LtSeJw.mft
Manifest number: 01B4
Signing time: Sun 15 Nov 2026 07:01:45 +0000
Manifest this update: Sun 15 Nov 2026 07:01:45 +0000
Manifest next update: Mon 16 Nov 2026 07:01:45 +0000
Files and hashes: 1: CR_17YOpg_iNWfDD5kja4LtSeJw.crl (hash: 1DUnpVd/gujy6H1rtqDYNwQpV9wESdBTTZFaGvikD4U=)
2: RTOXX5ZwDhxuOuF0QnPVEy5mY-E.roa (hash: jrK0N7c1cbcDYn7LYluZvhpwTISFdtPphVGCy6lVvQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/c01148-0a92-468e-93f3-ada1b5db0df5/1/CR_17YOpg_iNWfDD5kja4LtSeJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/c01148-0a92-468e-93f3-ada1b5db0df5/1/CR_17YOpg_iNWfDD5kja4LtSeJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CR_17YOpg_iNWfDD5kja4LtSeJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 07:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:03:12:3a:ad:88:46:6c:af:d5:b0:b3:95:f7:e2:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091ff5ed83a983f88d59f0c3e648dae0bb52789c
Validity
Not Before: Nov 15 07:01:45 2026 GMT
Not After : Nov 16 07:01:45 2026 GMT
Subject: CN=9d5a2ee903d6da1c571cea7381936734d503a71e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:25:6b:d1:58:d6:f7:64:e5:39:07:e4:0a:d1:
8e:d6:cd:b1:88:29:06:a0:82:b2:05:c5:54:1a:85:
a8:35:bd:b6:b5:1c:eb:38:9c:42:5e:c7:d1:8d:98:
a8:2d:8f:f4:8b:2c:93:bc:d8:d7:7a:79:28:8e:b3:
39:24:c8:b2:9e:91:1d:3d:a4:f6:c0:2e:e0:eb:92:
00:bb:3f:01:d1:c8:8e:a2:95:67:3a:23:1b:f2:49:
96:47:ee:0c:99:24:4d:db:2e:e7:95:5b:51:b1:43:
a0:77:af:74:71:2e:53:48:cb:85:8f:a1:65:60:e7:
44:32:95:35:b5:8b:e4:9b:7a:d5:4f:5f:25:c2:41:
60:55:a9:cd:5d:16:16:f7:04:9c:c1:4c:99:5f:67:
43:01:5d:c2:25:f6:1e:13:8b:11:95:d3:00:66:31:
fa:2a:c3:d8:fa:9a:08:46:1a:bb:c5:9a:a2:e2:be:
c2:7b:d2:7b:a2:e9:04:7a:22:64:42:93:a9:cc:00:
16:43:5c:98:d5:4c:f1:c5:0b:6a:3a:1b:4e:4b:ff:
e8:47:37:de:89:64:b3:b0:ca:9b:a5:4a:2f:77:ed:
3d:65:d2:c7:58:f3:44:2f:c3:69:b3:26:3b:de:27:
ae:bd:2f:47:97:9e:62:13:69:3a:40:63:92:27:2b:
2e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:5A:2E:E9:03:D6:DA:1C:57:1C:EA:73:81:93:67:34:D5:03:A7:1E
X509v3 Authority Key Identifier:
keyid:09:1F:F5:ED:83:A9:83:F8:8D:59:F0:C3:E6:48:DA:E0:BB:52:78:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR_17YOpg_iNWfDD5kja4LtSeJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c01148-0a92-468e-93f3-ada1b5db0df5/1/CR_17YOpg_iNWfDD5kja4LtSeJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c01148-0a92-468e-93f3-ada1b5db0df5/1/CR_17YOpg_iNWfDD5kja4LtSeJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:7d:1b:48:57:f7:d3:2f:6d:53:c6:ca:f9:05:e8:d3:dd:2c:
cb:4f:e1:50:1e:2d:9d:0a:94:96:59:21:77:19:8e:c6:7a:9e:
eb:44:e4:56:2a:e8:34:ea:4f:68:d8:8f:8f:51:1d:a4:8a:4c:
62:3a:3c:e0:0c:69:a5:f4:e3:7f:8b:42:41:c9:34:37:00:cd:
93:d0:34:87:83:15:a5:a9:b6:b3:b5:6b:9e:22:3e:63:73:91:
f6:09:fd:38:e6:b0:9a:fe:5d:3f:1c:6d:cc:dc:a1:a7:e0:d0:
f8:26:d6:11:6e:29:d2:58:72:64:66:d1:ba:4c:6b:dc:34:db:
a4:75:86:e2:c7:70:a6:b2:c6:80:96:a0:2a:45:c2:59:3a:62:
de:07:3d:cd:a6:88:36:33:76:8c:be:c5:46:3c:14:28:56:e3:
c0:f3:4c:58:ec:ba:4c:16:a6:ee:47:2d:44:8e:6d:9f:af:6a:
85:36:f4:cc:2e:cb:4a:1c:78:3e:60:8b:c9:8d:b8:3b:2c:73:
30:43:2f:cc:0c:ee:41:93:4d:ad:e7:6a:e6:e7:1d:c0:6f:a9:
58:66:46:05:20:45:46:75:7c:25:fc:ff:57:89:ea:97:bd:c2:
61:3d:57:b9:f2:86:a7:c4:d6:50:60:63:3f:a8:e2:84:10:6d:
61:d8:d2:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:51:27 2026 by rpki-client