Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
File: CEl1fj41qqtdV8UYYkOkNxc-TTY.mft (raw, json)
Hash identifier: e5NmrFR6o1ZRsKFxurkAWGbZfXQTXQeOOkkruY0mlas=
Subject key identifier: 79:60:E6:B9:8B:B2:0D:27:11:20:BA:4A:BA:30:3D:E9:B5:B8:D0:EC
Authority key identifier: 08:49:75:7E:3E:35:AA:AB:5D:57:C5:18:62:43:A4:37:17:3E:4D:36
Certificate issuer: /CN=0849757e3e35aaab5d57c5186243a437173e4d36
Certificate serial: 01A0C4E9C5C2D56CAE2F286C7190E53808E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
Manifest number: 17A0
Signing time: Mon 21 Sep 2026 17:00:49 +0000
Manifest this update: Mon 21 Sep 2026 17:00:49 +0000
Manifest next update: Tue 22 Sep 2026 17:00:49 +0000
Files and hashes: 1: CEl1fj41qqtdV8UYYkOkNxc-TTY.crl (hash: VwjxTUkN2QNtHNN75VaEzygAtKVyVu+DFcbZdF2UbyM=)
2: Xvor6sHffWDb_gSNM1nS_zNqIlk.roa (hash: FYSQWRIi2pReCA7SOIEtCKhDaRDp0KJNqlBByNN1x3M=)
3: rOmMXRTZblPMay-zs8kA15IN66k.roa (hash: vQJU3ISGXUgoYaVC83QFFUWTqj9768FZ9m06Z+5hxLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:e9:c5:c2:d5:6c:ae:2f:28:6c:71:90:e5:38:08:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0849757e3e35aaab5d57c5186243a437173e4d36
Validity
Not Before: Sep 21 17:00:49 2026 GMT
Not After : Sep 22 17:00:49 2026 GMT
Subject: CN=7960e6b98bb20d271120ba4aba303de9b5b8d0ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ea:00:98:f8:f3:38:72:fe:52:9a:8a:7c:00:
46:71:86:ba:f9:07:55:67:ae:d0:1d:fd:77:ca:a3:
bd:b3:0f:2a:80:71:fb:e8:ac:48:46:d6:70:69:24:
8d:c6:14:33:06:9e:2b:ec:83:0d:cd:58:e1:d7:34:
c8:d7:c6:53:5f:f5:6d:cb:5e:29:68:7a:45:0b:f1:
47:e7:4e:2c:fe:e1:65:75:22:77:17:d5:ac:92:87:
d7:df:ed:8e:3c:bf:80:c0:1e:90:71:d3:e2:12:6e:
16:b6:55:d2:d7:f1:e3:7d:1b:c7:da:61:4c:02:c5:
52:44:de:78:61:eb:6d:55:b6:86:a7:15:20:30:a2:
25:98:cb:89:38:90:2f:ea:0b:07:ba:34:ca:41:ed:
4c:fa:cf:06:6e:ec:a7:8e:70:86:16:c2:6c:23:dd:
ba:d3:7d:22:b4:22:ff:9b:46:a2:75:2e:a3:c0:45:
51:6d:b1:69:98:01:dd:12:f8:64:78:ed:82:ff:fd:
6d:7d:ac:00:ce:c1:4d:5f:92:55:e8:b1:4a:b9:98:
6a:37:ab:9b:b8:a7:58:19:f1:09:09:8f:89:5d:34:
db:72:4c:ed:2f:31:e7:06:ae:c6:40:79:3c:59:2c:
d0:67:b8:71:f4:a6:49:64:6a:51:4c:f6:1a:46:5b:
e9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:60:E6:B9:8B:B2:0D:27:11:20:BA:4A:BA:30:3D:E9:B5:B8:D0:EC
X509v3 Authority Key Identifier:
keyid:08:49:75:7E:3E:35:AA:AB:5D:57:C5:18:62:43:A4:37:17:3E:4D:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:8e:df:88:01:e0:cb:4d:9c:2c:6f:e0:0d:49:43:0d:bd:f5:
ac:c0:7d:0f:85:61:ac:62:a8:31:c7:ab:93:8b:50:63:96:a3:
79:42:0a:e4:04:42:db:fb:e7:82:5c:b8:d2:22:4c:4c:58:20:
b8:a4:d3:97:96:b0:c1:5c:1e:91:20:7c:ba:b4:f1:30:95:69:
5e:5e:c0:95:23:a3:83:fb:f6:18:4c:f8:99:11:74:96:c5:62:
85:6f:a8:0c:f5:8a:c0:5f:f0:29:98:1e:7b:25:06:d0:4c:eb:
08:c5:fd:fb:00:a5:49:56:83:1a:b2:1c:cd:19:52:84:01:ce:
63:a8:89:1f:7b:ce:c2:1b:54:0e:10:1e:a4:2c:12:9b:c3:e1:
e9:99:a2:c9:42:2e:a6:94:a3:ae:13:15:b8:cc:73:4b:f5:f1:
13:68:ad:be:ee:c5:2e:70:a1:b9:43:11:a8:ca:dd:6f:33:7a:
95:a2:32:0c:d2:0b:3d:47:46:e4:d7:45:37:d3:e4:d6:b9:3f:
de:20:90:07:80:1e:be:66:18:74:ae:41:51:69:11:10:60:c7:
7b:df:1b:d0:1f:14:b2:eb:ad:70:c5:74:bf:1a:8f:8f:9d:8a:
dd:86:b3:53:a4:72:a1:72:b6:6d:81:84:1d:b6:c8:9f:46:b4:
c3:3e:d2:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:39:27 2026 by rpki-client