Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
File: CEl1fj41qqtdV8UYYkOkNxc-TTY.mft (raw, json)
Hash identifier: D4Rh2PPNw1xZ3vtgE9rljf309Bm9JxpwqjD7fydy4rU=
Subject key identifier: DD:F9:13:D4:11:86:3C:E6:1D:0A:AB:75:B9:2F:A8:92:26:FC:5C:84
Authority key identifier: 08:49:75:7E:3E:35:AA:AB:5D:57:C5:18:62:43:A4:37:17:3E:4D:36
Certificate issuer: /CN=0849757e3e35aaab5d57c5186243a437173e4d36
Certificate serial: 01A1DEDED088882C611CDFC7047DEBCC5994
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
Manifest number: 1832
Signing time: Sun 15 Nov 2026 11:01:46 +0000
Manifest this update: Sun 15 Nov 2026 11:01:46 +0000
Manifest next update: Mon 16 Nov 2026 11:01:46 +0000
Files and hashes: 1: CEl1fj41qqtdV8UYYkOkNxc-TTY.crl (hash: j3+AlZwnn3uwgTtMvSKToW40aeWUhTmQaaaCtFs8gx4=)
2: Xvor6sHffWDb_gSNM1nS_zNqIlk.roa (hash: FYSQWRIi2pReCA7SOIEtCKhDaRDp0KJNqlBByNN1x3M=)
3: rOmMXRTZblPMay-zs8kA15IN66k.roa (hash: vQJU3ISGXUgoYaVC83QFFUWTqj9768FZ9m06Z+5hxLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 11:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:de:d0:88:88:2c:61:1c:df:c7:04:7d:eb:cc:59:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0849757e3e35aaab5d57c5186243a437173e4d36
Validity
Not Before: Nov 15 11:01:46 2026 GMT
Not After : Nov 16 11:01:46 2026 GMT
Subject: CN=ddf913d411863ce61d0aab75b92fa89226fc5c84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:72:fb:fd:46:c7:c8:90:b0:3a:eb:08:80:7c:
c5:65:2a:07:e3:31:c6:88:ff:c4:a5:51:35:c2:18:
00:ee:d6:08:9c:b4:c0:99:31:f6:9e:a4:b7:4b:e2:
ed:d0:b3:4b:58:06:82:5b:47:df:a8:a5:8f:6e:37:
42:15:21:ba:39:49:53:9d:80:b1:d2:9e:6e:de:b8:
b5:b6:bd:81:e3:68:8d:13:30:37:0a:b2:71:53:fc:
8d:d8:83:32:bb:f9:14:3d:89:c9:1d:09:63:0c:9f:
0b:5a:d6:63:3e:18:89:16:27:fa:1b:46:ab:fc:1a:
2a:91:96:c0:f8:22:17:26:93:e1:b3:80:13:b4:c4:
b0:3d:ed:c1:66:e2:15:7d:49:95:67:8b:f4:bd:96:
00:11:93:66:a9:6e:36:b9:ba:77:cd:3c:83:97:ed:
d5:0f:78:e1:4f:69:2c:8c:c1:5b:70:5a:52:f6:12:
29:19:b8:02:40:12:73:63:c3:45:fd:8c:0a:94:0c:
c7:a0:ec:b7:bc:5e:cb:28:80:e2:bc:06:d7:04:34:
f6:e0:73:e9:05:4d:90:4b:03:b0:7e:34:b7:b1:9e:
93:18:db:0a:02:02:fe:cb:c1:f5:23:ab:4f:fc:a7:
4b:03:81:ce:75:e2:cf:6a:57:95:88:b6:99:60:bd:
38:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:F9:13:D4:11:86:3C:E6:1D:0A:AB:75:B9:2F:A8:92:26:FC:5C:84
X509v3 Authority Key Identifier:
keyid:08:49:75:7E:3E:35:AA:AB:5D:57:C5:18:62:43:A4:37:17:3E:4D:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:44:44:81:be:18:1a:63:a1:8b:94:37:a6:41:ba:ee:f6:37:
b6:b1:54:e9:00:7a:64:d5:2c:e3:37:0a:bb:72:67:bf:4b:ff:
f8:31:9b:10:6d:28:95:60:24:3d:2a:44:51:9c:09:e8:2f:11:
32:2b:91:49:f5:fa:6d:07:b8:33:ad:54:22:62:9d:50:9d:08:
77:08:7c:cc:96:f5:43:be:f3:3a:69:72:23:d3:3e:92:94:69:
2e:a8:45:3a:d9:6b:8a:d0:7d:84:9b:3a:93:df:75:64:5f:46:
52:be:d4:26:69:27:20:00:aa:7d:e8:75:4c:35:0e:52:e9:9a:
5e:93:96:66:df:d5:ab:60:6e:7d:3b:e4:ee:00:e4:c6:bd:c1:
b3:db:47:73:bf:5b:05:65:5c:01:8c:71:86:db:37:7d:d2:d6:
f6:1e:fc:c9:10:0d:47:54:08:2c:94:8a:69:d2:41:b7:32:09:
b7:cc:24:b1:57:ec:3c:e2:fc:fa:9f:ad:0b:58:1b:3e:f7:73:
8f:4b:88:27:6d:44:cf:50:f1:9d:38:9f:05:23:a4:1f:4b:e0:
99:42:84:14:3d:fc:8c:a2:fd:a6:d6:50:39:c0:7f:33:0b:5a:
82:e6:02:7e:92:fe:ab:96:55:06:49:b1:28:7a:66:73:c3:ae:
51:63:b5:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:53:50 2026 by rpki-client