Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
File: CEl1fj41qqtdV8UYYkOkNxc-TTY.mft (raw, json)
Hash identifier: Ws323Mmw7G6yy1e9iTaxfDCcQaTaDnVoftASsXQyDCg=
Subject key identifier: C7:A3:F8:72:FB:76:51:2C:7A:8B:57:C6:9E:1E:B2:38:2E:5B:C1:65
Authority key identifier: 08:49:75:7E:3E:35:AA:AB:5D:57:C5:18:62:43:A4:37:17:3E:4D:36
Certificate issuer: /CN=0849757e3e35aaab5d57c5186243a437173e4d36
Certificate serial: 019CAA584CED361BBA1894E7A39ED29E6D62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
Manifest number: 157F
Signing time: Sun 01 Mar 2026 17:00:39 +0000
Manifest this update: Sun 01 Mar 2026 17:00:39 +0000
Manifest next update: Mon 02 Mar 2026 17:00:39 +0000
Files and hashes: 1: CEl1fj41qqtdV8UYYkOkNxc-TTY.crl (hash: u8PYqglnyZwv6GF3g2rI4eUp85M9n73bIXQrmLumvtI=)
2: LChGuhkA0gjqQw0ADj2C4E66PrY.roa (hash: yikgcRChSKL+1ugFP9oI4DkOVsuw2tP1bpSv262Uskc=)
3: Xvor6sHffWDb_gSNM1nS_zNqIlk.roa (hash: FYSQWRIi2pReCA7SOIEtCKhDaRDp0KJNqlBByNN1x3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:4c:ed:36:1b:ba:18:94:e7:a3:9e:d2:9e:6d:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0849757e3e35aaab5d57c5186243a437173e4d36
Validity
Not Before: Mar 1 17:00:39 2026 GMT
Not After : Mar 2 17:00:39 2026 GMT
Subject: CN=c7a3f872fb76512c7a8b57c69e1eb2382e5bc165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:eb:8e:91:fa:9c:a9:a4:a1:e3:4b:1f:db:50:
6c:2b:a7:a8:fc:3c:9e:8e:83:0d:d7:92:61:04:a5:
6d:b7:b1:32:2a:41:a4:a3:34:73:71:f5:fb:3c:5c:
a2:dd:b6:70:95:77:f5:7e:4d:d3:13:17:fe:8e:9c:
bc:ef:d9:88:25:cb:b2:09:9b:a1:20:ea:72:e2:66:
8f:8d:84:fb:d6:b1:30:76:55:15:ef:88:ad:ae:31:
5a:01:02:b6:68:be:3b:42:ee:4b:bf:a1:91:51:34:
42:b5:fd:e1:b2:35:ad:5e:a9:20:31:35:ca:11:78:
a5:3a:f0:d4:81:28:69:56:de:7f:d9:53:78:45:b6:
e9:b0:c0:17:3d:fd:6a:45:7e:63:e9:9f:e1:92:20:
81:e5:c3:88:fa:00:7f:f8:24:ce:29:13:3f:c0:97:
92:a3:72:71:fd:ce:86:bc:18:03:b6:73:21:75:6a:
d8:b7:c4:58:bd:11:21:9a:19:32:24:44:fb:77:20:
89:55:22:d0:57:62:2c:8f:f1:ad:09:62:db:49:fa:
ed:da:8a:97:62:0c:f0:62:09:a8:9c:ff:54:43:d1:
a2:4a:bc:c3:83:d4:02:3b:b9:19:ac:55:3c:b4:16:
b6:e9:82:a7:c6:55:f1:ff:54:5e:50:3e:66:d8:70:
e5:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:A3:F8:72:FB:76:51:2C:7A:8B:57:C6:9E:1E:B2:38:2E:5B:C1:65
X509v3 Authority Key Identifier:
keyid:08:49:75:7E:3E:35:AA:AB:5D:57:C5:18:62:43:A4:37:17:3E:4D:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:f4:8c:47:a5:1e:b0:c4:b2:f0:d9:56:d3:cd:92:19:92:8c:
96:68:2a:30:b6:fa:2a:cb:06:f2:ee:45:f9:ba:2e:d6:0d:f9:
30:2e:e2:d1:80:bb:d8:8c:78:a1:45:96:37:f7:11:14:96:67:
f7:cf:51:98:0d:af:18:88:b3:f3:d5:b2:a0:a6:5a:97:64:74:
a1:13:97:6f:97:f9:4d:30:b6:d1:c2:39:cb:60:d2:6b:53:5b:
98:e3:c8:ba:bd:c0:37:c6:75:29:b5:9a:68:17:40:d1:77:35:
0f:8a:ce:1c:fe:b5:37:02:80:0c:49:a4:ca:e2:3c:9f:15:d1:
e4:3f:a6:cd:d2:fe:67:51:25:25:6c:ea:10:af:01:99:32:97:
e7:58:0b:df:3e:3f:ed:0e:a9:da:a3:8b:90:ba:51:19:85:b5:
7d:4b:13:29:1e:03:00:dd:92:5c:aa:89:dd:6b:ca:87:48:db:
02:78:a5:b1:c2:e0:cd:69:57:dc:bb:89:ff:ac:33:b8:4c:68:
30:f8:84:7d:63:d4:bf:0a:e4:96:49:0b:f4:75:17:65:ff:44:
3f:2c:d7:82:17:94:62:99:4c:09:61:b1:12:fd:a1:3a:98:62:
00:d8:9a:a4:d9:1a:fa:ca:6e:a1:66:0a:27:ff:35:30:8a:79:
97:5d:cc:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:07:01 2026 by rpki-client