Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/040564-5952-4223-bcca-f876c055a315/1/flZv_0B_McauhWw3Q-8-XyL401s.mft
File: flZv_0B_McauhWw3Q-8-XyL401s.mft (raw, json)
Hash identifier: 6fgQpfoXrV4Vr08ZfX2A431iLHDtqRbE6BM65nADIK0=
Subject key identifier: 3A:F6:57:A0:16:CC:2D:E4:B6:85:DE:F9:BA:6E:79:96:BC:62:8E:2D
Authority key identifier: 7E:56:6F:FF:40:7F:31:C6:AE:85:6C:37:43:EF:3E:5F:22:F8:D3:5B
Certificate issuer: /CN=7e566fff407f31c6ae856c3743ef3e5f22f8d35b
Certificate serial: 019D9B508F7A1FC7AC81AB546F1B51533C3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flZv_0B_McauhWw3Q-8-XyL401s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/040564-5952-4223-bcca-f876c055a315/1/flZv_0B_McauhWw3Q-8-XyL401s.mft
Manifest number: 17DA
Signing time: Fri 17 Apr 2026 12:00:41 +0000
Manifest this update: Fri 17 Apr 2026 12:00:41 +0000
Manifest next update: Sat 18 Apr 2026 12:00:41 +0000
Files and hashes: 1: 0Wah9lDQL0CoLEgawmzR8dhxyAc.roa (hash: ee0vXYwpzwNhjYiRTv9x+OGC9lOC07tlDhvLzTb9boo=)
2: flZv_0B_McauhWw3Q-8-XyL401s.crl (hash: h4B/38xZ7O5sOsAiwEYNJ3qiSEDdu6R/ntBhva1k/gM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/040564-5952-4223-bcca-f876c055a315/1/flZv_0B_McauhWw3Q-8-XyL401s.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/040564-5952-4223-bcca-f876c055a315/1/flZv_0B_McauhWw3Q-8-XyL401s.mft
rsync://rpki.ripe.net/repository/DEFAULT/flZv_0B_McauhWw3Q-8-XyL401s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:8f:7a:1f:c7:ac:81:ab:54:6f:1b:51:53:3c:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e566fff407f31c6ae856c3743ef3e5f22f8d35b
Validity
Not Before: Apr 17 12:00:41 2026 GMT
Not After : Apr 18 12:00:41 2026 GMT
Subject: CN=3af657a016cc2de4b685def9ba6e7996bc628e2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:bc:b7:32:d5:cd:0b:8c:8c:11:43:a9:de:84:
76:b2:b7:63:51:7c:ba:b5:77:1c:b0:87:c0:76:28:
19:d1:5d:a5:0a:66:50:d8:ab:26:6a:46:5d:d1:f9:
0b:32:ff:24:bf:59:8d:26:41:5f:71:45:6e:40:bb:
6f:ac:be:a6:0e:28:1b:c0:ac:95:31:93:02:89:82:
14:82:34:a2:79:0a:e5:ff:45:42:ce:b5:7d:95:b1:
d3:a8:0b:a8:ce:17:a8:72:1c:ce:d3:6a:d6:15:b0:
a9:f8:54:63:84:ee:92:79:a8:3f:2d:e1:a7:33:d4:
84:c6:d6:14:61:46:c2:f1:13:f1:29:c9:64:cf:29:
c8:0e:d4:74:59:07:20:b9:fe:2e:13:b2:9f:3f:99:
e8:21:40:d7:5c:5c:66:a4:6b:9a:22:04:9c:f8:f6:
28:34:b0:66:f8:89:52:1f:2d:4b:7f:23:e2:6f:83:
cb:e6:bb:a5:71:81:ef:0e:23:46:f5:4c:d9:88:e0:
3c:05:42:32:a7:49:7e:85:01:c9:24:ad:2e:23:77:
98:ba:44:be:d4:8c:75:11:f4:76:f7:8f:d3:9a:d2:
46:69:f8:87:d6:50:a8:2e:26:e5:17:df:2d:f6:83:
c3:34:1a:b7:2f:0f:79:81:81:68:c3:89:9a:e5:29:
85:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:F6:57:A0:16:CC:2D:E4:B6:85:DE:F9:BA:6E:79:96:BC:62:8E:2D
X509v3 Authority Key Identifier:
keyid:7E:56:6F:FF:40:7F:31:C6:AE:85:6C:37:43:EF:3E:5F:22:F8:D3:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flZv_0B_McauhWw3Q-8-XyL401s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/040564-5952-4223-bcca-f876c055a315/1/flZv_0B_McauhWw3Q-8-XyL401s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/040564-5952-4223-bcca-f876c055a315/1/flZv_0B_McauhWw3Q-8-XyL401s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:3e:94:49:98:99:d1:35:4e:74:66:73:64:43:85:a2:7c:d8:
12:8f:69:57:89:87:e5:ac:32:8f:5d:1a:d1:58:eb:11:b4:3f:
59:2b:be:1c:75:41:1b:0e:06:6a:52:8e:95:03:7f:50:af:03:
c9:f4:52:f8:4f:df:70:22:6f:a7:80:2d:4c:fc:f0:ac:f5:a7:
87:4e:76:06:38:8e:14:04:8a:d5:e1:05:53:03:6d:60:e3:83:
72:47:c4:51:79:00:8c:9d:91:bf:81:dd:2a:94:6c:94:00:52:
65:c6:5f:a7:ae:13:22:bd:6e:5d:0c:bd:d3:37:be:b6:a4:cb:
90:cc:88:25:bb:79:64:ca:83:1a:cb:57:d3:d5:e3:06:e6:2d:
87:dd:b9:3e:8f:b4:3d:7e:67:73:f8:e4:25:c0:27:e0:0e:e7:
7e:9b:53:f8:de:f2:e1:43:a7:4c:e6:e4:e1:dd:86:68:43:85:
4f:0a:71:f8:9a:9d:3f:83:fb:9c:ea:37:e5:74:01:98:45:ab:
c3:95:3e:d7:46:01:73:e1:46:eb:d4:7e:c0:c5:0e:60:ef:c3:
f8:de:0a:98:c6:64:79:9a:82:bc:59:62:ee:65:eb:89:ad:85:
e7:e6:58:9f:9d:d1:32:10:8b:19:80:6b:74:05:f4:03:24:71:
1c:62:f9:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:05:56 2026 by rpki-client