Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
File: CEl1fj41qqtdV8UYYkOkNxc-TTY.mft (raw, json)
Hash identifier: Q3vWxa1a+BbWI6BSqsa1v0orkJSZAyRv4mg0tjvOZRM=
Subject key identifier: AC:95:AF:20:3D:B3:11:E6:24:24:12:56:94:DD:8E:85:8A:54:F2:20
Authority key identifier: 08:49:75:7E:3E:35:AA:AB:5D:57:C5:18:62:43:A4:37:17:3E:4D:36
Certificate issuer: /CN=0849757e3e35aaab5d57c5186243a437173e4d36
Certificate serial: 019D99D0DC1D013BCA54DE6E1238061A7B1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
Manifest number: 15FB
Signing time: Fri 17 Apr 2026 05:01:34 +0000
Manifest this update: Fri 17 Apr 2026 05:01:34 +0000
Manifest next update: Sat 18 Apr 2026 05:01:34 +0000
Files and hashes: 1: CEl1fj41qqtdV8UYYkOkNxc-TTY.crl (hash: y9Itbedm3AYxpmV8G3XZAEpyr86+JsU4Ee5V7RHIn9Q=)
2: LChGuhkA0gjqQw0ADj2C4E66PrY.roa (hash: yikgcRChSKL+1ugFP9oI4DkOVsuw2tP1bpSv262Uskc=)
3: Xvor6sHffWDb_gSNM1nS_zNqIlk.roa (hash: FYSQWRIi2pReCA7SOIEtCKhDaRDp0KJNqlBByNN1x3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:dc:1d:01:3b:ca:54:de:6e:12:38:06:1a:7b:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0849757e3e35aaab5d57c5186243a437173e4d36
Validity
Not Before: Apr 17 05:01:34 2026 GMT
Not After : Apr 18 05:01:34 2026 GMT
Subject: CN=ac95af203db311e62424125694dd8e858a54f220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6c:8c:10:83:70:56:46:e9:45:bf:67:51:12:
3e:7f:05:2c:a6:e0:77:79:62:ff:f5:4c:1b:5a:61:
76:ee:7a:28:49:b7:d7:4b:dc:e1:82:5d:c4:42:7b:
42:5c:41:77:c2:83:0d:a6:d4:95:c0:c6:2d:d3:e0:
83:21:40:75:08:fd:64:af:9c:e2:f1:72:5c:8b:39:
b5:cc:27:49:7f:2f:fb:64:5f:c3:e6:e1:c9:f3:fe:
0e:0d:0e:b1:9b:70:0e:9e:35:b0:2b:8a:8f:da:6f:
45:be:2d:f6:df:f4:af:81:6c:03:5a:7f:d5:74:e3:
b9:af:58:ea:e8:33:32:51:bf:c1:e8:d2:9a:dc:b3:
74:b1:3c:21:eb:c7:17:84:40:65:2c:6e:a6:eb:e2:
90:eb:d9:a3:45:11:69:60:d4:77:a5:3e:58:a6:2c:
85:c4:ff:cd:b5:2f:4d:8f:ce:3a:f9:a7:c0:d5:20:
fd:54:54:4d:52:80:1c:6d:c4:68:5a:c6:70:25:86:
2e:12:73:f5:ee:b0:4c:c7:4f:2a:46:00:0f:e7:57:
3e:c0:68:d3:e7:5c:01:86:2a:43:80:64:1e:69:7e:
bb:6a:a2:ce:44:53:ca:fa:2b:51:53:03:c4:c7:9e:
f3:d4:a6:46:bd:c6:70:6b:a2:57:a7:53:64:a7:f7:
f9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:95:AF:20:3D:B3:11:E6:24:24:12:56:94:DD:8E:85:8A:54:F2:20
X509v3 Authority Key Identifier:
keyid:08:49:75:7E:3E:35:AA:AB:5D:57:C5:18:62:43:A4:37:17:3E:4D:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:5d:25:94:76:3a:94:88:a1:89:10:30:36:c2:64:7b:7e:05:
16:20:f8:df:97:54:aa:4a:48:cb:fd:a4:a7:f0:3e:9e:6b:58:
5a:33:96:5e:84:3d:3b:91:c2:64:a6:fd:4d:e1:69:d2:7b:96:
8c:5d:5d:2b:a5:6d:c0:13:f7:f6:7a:38:bb:a5:87:29:4d:f3:
31:1d:31:be:32:e6:c5:43:6c:3d:04:db:59:72:a8:08:17:a8:
f8:94:59:74:7c:80:1a:aa:08:14:ca:dd:3e:ee:e0:18:5f:bd:
e3:b8:b5:bb:cc:79:1a:6d:95:9f:34:f2:08:00:a5:88:08:92:
f7:a9:87:35:4b:40:58:d3:cc:d3:67:03:ff:03:3b:d2:67:25:
dc:48:8c:91:82:08:8b:62:34:8d:c9:75:76:1f:27:3d:50:5a:
4c:55:b5:c9:49:81:6c:3a:79:0a:77:91:b9:36:e4:8b:7e:89:
d6:a9:f8:0e:83:86:95:f4:b9:19:b8:45:7c:ee:d0:9c:22:1d:
fc:68:a6:74:5c:8f:e2:f0:c2:db:a7:2c:f2:49:20:26:d9:c7:
49:36:af:f2:f4:b8:9c:8a:0d:d5:43:f7:00:52:e9:4c:53:63:
80:45:3d:a5:b0:e6:35:cf:55:b5:57:f9:7a:45:bf:c6:bf:75:
a4:b7:09:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:05:24 2026 by rpki-client