Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
File: CEl1fj41qqtdV8UYYkOkNxc-TTY.mft (raw, json)
Hash identifier: f+T0nNigqg5pHFlCDCzOe38xjg3WScnFORearq/PbOo=
Subject key identifier: FB:28:BE:08:3B:11:EF:A8:80:FC:6F:10:AA:DF:62:86:51:26:EE:31
Authority key identifier: 08:49:75:7E:3E:35:AA:AB:5D:57:C5:18:62:43:A4:37:17:3E:4D:36
Certificate issuer: /CN=0849757e3e35aaab5d57c5186243a437173e4d36
Certificate serial: 019FAAF5FEC16924A2CCAD160768591D64BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
Manifest number: 170D
Signing time: Tue 28 Jul 2026 23:01:15 +0000
Manifest this update: Tue 28 Jul 2026 23:01:15 +0000
Manifest next update: Wed 29 Jul 2026 23:01:15 +0000
Files and hashes: 1: CEl1fj41qqtdV8UYYkOkNxc-TTY.crl (hash: t/YL5/XLguGzyOL9GrHGJUQft7Bgzfs+a9SKZ1kksoY=)
2: LChGuhkA0gjqQw0ADj2C4E66PrY.roa (hash: yikgcRChSKL+1ugFP9oI4DkOVsuw2tP1bpSv262Uskc=)
3: Xvor6sHffWDb_gSNM1nS_zNqIlk.roa (hash: FYSQWRIi2pReCA7SOIEtCKhDaRDp0KJNqlBByNN1x3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:fe:c1:69:24:a2:cc:ad:16:07:68:59:1d:64:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0849757e3e35aaab5d57c5186243a437173e4d36
Validity
Not Before: Jul 28 23:01:15 2026 GMT
Not After : Jul 29 23:01:15 2026 GMT
Subject: CN=fb28be083b11efa880fc6f10aadf62865126ee31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bf:57:f0:be:c4:5c:00:57:17:8c:70:54:a2:
df:db:fc:9d:b8:96:3a:9b:e6:89:dc:34:c7:54:f2:
13:82:14:38:f6:a9:a7:90:4e:55:64:63:1f:78:84:
ab:82:58:bd:92:14:c1:8c:46:16:1d:a1:81:00:ac:
65:1e:09:ba:a2:7b:b2:83:2a:c3:fa:ee:3f:56:23:
3f:75:a0:17:94:b9:1e:36:e5:66:8a:2a:72:7e:45:
c1:01:5b:2b:5d:e9:26:06:61:ec:e4:51:ca:6b:08:
73:b8:08:94:b7:22:71:46:fe:71:58:58:79:2c:7f:
58:88:70:5e:f7:3d:54:3b:77:b8:8b:e2:75:06:36:
9f:04:3b:23:74:85:d3:da:04:a1:f0:aa:bf:76:ac:
9a:e3:0c:51:70:55:42:20:8e:42:94:e3:b8:e1:4e:
95:5b:af:94:ad:a6:11:61:cb:75:cd:2f:f0:53:f1:
4f:c9:99:60:c4:8b:42:85:f3:4e:f8:ba:64:b6:6f:
7d:f9:5d:2a:46:f2:3e:f8:30:67:47:b0:33:9f:90:
fe:9a:3e:3b:bf:82:c4:66:f2:06:89:72:ec:34:f7:
05:58:53:7a:64:ea:0d:16:cc:84:d2:b0:49:0a:28:
72:cc:d8:9f:10:af:b5:2c:5f:33:3e:e9:85:1b:fa:
d2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:28:BE:08:3B:11:EF:A8:80:FC:6F:10:AA:DF:62:86:51:26:EE:31
X509v3 Authority Key Identifier:
keyid:08:49:75:7E:3E:35:AA:AB:5D:57:C5:18:62:43:A4:37:17:3E:4D:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:91:b9:91:fa:05:fa:c6:f6:d1:1a:ea:43:fd:b0:ac:73:75:
db:ef:6c:e2:7f:ce:6b:6b:53:bd:b0:84:0a:77:b4:54:a8:11:
a6:b6:d2:fc:c6:dc:9f:e8:f4:b7:1e:88:4d:fc:65:15:e7:15:
e4:6c:62:d9:b8:4d:54:60:32:98:b7:8e:11:6a:e4:1a:bf:70:
b9:2a:cc:ed:b0:68:3b:f3:82:d4:aa:b3:fc:3a:de:3a:9c:20:
de:f8:6b:60:0c:35:68:56:1e:5e:56:01:6f:c6:b2:78:34:93:
67:ea:bd:75:7b:8d:11:6c:5f:52:86:9d:dc:d3:f1:d6:90:15:
bd:14:e2:8e:43:9d:2d:ae:bf:e3:63:68:87:e6:b3:44:c7:5f:
a6:12:b2:94:e4:41:1a:9b:1c:32:49:40:2d:c3:e5:ab:68:a6:
60:5c:3e:da:9e:af:73:f6:f6:ed:5f:60:be:c5:fb:5c:a2:97:
ed:ff:6a:94:53:f1:1f:26:0a:ea:ca:20:55:30:49:77:67:71:
39:cb:03:5b:86:0a:77:d6:27:cd:a3:1c:be:4c:cd:7e:a7:8a:
b9:bc:96:d3:33:31:5d:62:8e:c7:c6:84:af:9b:63:32:cc:d0:
8f:19:bc:02:6c:9a:d3:5a:ef:50:76:67:9f:0d:be:84:94:76:
b4:fd:fe:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+q9f7BaSSizK0WB2hZHWS9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4NDk3NTdlM2UzNWFhYWI1ZDU3YzUxODYyNDNhNDM3MTcz
ZTRkMzYwHhcNMjYwNzI4MjMwMTE1WhcNMjYwNzI5MjMwMTE1WjAzMTEwLwYDVQQD
EyhmYjI4YmUwODNiMTFlZmE4ODBmYzZmMTBhYWRmNjI4NjUxMjZlZTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuL9X8L7EXABXF4xwVKLf2/yduJY6
m+aJ3DTHVPITghQ49qmnkE5VZGMfeISrgli9khTBjEYWHaGBAKxlHgm6onuygyrD
+u4/ViM/daAXlLkeNuVmiipyfkXBAVsrXekmBmHs5FHKawhzuAiUtyJxRv5xWFh5
LH9YiHBe9z1UO3e4i+J1BjafBDsjdIXT2gSh8Kq/dqya4wxRcFVCII5ClOO44U6V
W6+UraYRYct1zS/wU/FPyZlgxItChfNO+Lpktm99+V0qRvI++DBnR7Azn5D+mj47
v4LEZvIGiXLsNPcFWFN6ZOoNFsyE0rBJCihyzNifEK+1LF8zPumFG/rSXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPsovgg7Ee+ogPxvEKrfYoZRJu4xMB8GA1UdIwQY
MBaAFAhJdX4+NaqrXVfFGGJDpDcXPk02MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0VsMWZqNDFxcXRkVjhVWVlrT2tOeGMtVFRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9mYjI0MDEtZTQ3MC00YzA1LTk5Yjgt
ZjhlZWNiNDI1MDg3LzEvQ0VsMWZqNDFxcXRkVjhVWVlrT2tOeGMtVFRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9mYjI0MDEtZTQ3MC00YzA1LTk5YjgtZjhlZWNiNDI1MDg3
LzEvQ0VsMWZqNDFxcXRkVjhVWVlrT2tOeGMtVFRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgZG5kfoF
+sb20RrqQ/2wrHN12+9s4n/Oa2tTvbCECne0VKgRprbS/Mbcn+j0tx6ITfxlFecV
5Gxi2bhNVGAymLeOEWrkGr9wuSrM7bBoO/OC1Kqz/DreOpwg3vhrYAw1aFYeXlYB
b8ayeDSTZ+q9dXuNEWxfUoad3NPx1pAVvRTijkOdLa6/42Noh+azRMdfphKylORB
GpscMklALcPlq2imYFw+2p6vc/b27V9gvsX7XKKX7f9qlFPxHyYK6sogVTBJd2dx
OcsDW4YKd9YnzaMcvkzNfqeKubyW0zMxXWKOx8aEr5tjMszQjxm8Amya01rvUHZn
nw2+hJR2tP3+ZA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 02:01:43 2026 by rpki-client