Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.mft
File: FyLpZ4-w1BTS3fvSQgxMdIJj80s.mft (raw, json)
Hash identifier: Vfg2UijohcotylHnE7DO7WedzqNbx6iZwOu9QsP67nY=
Subject key identifier: 47:52:53:16:ED:9A:46:D1:B9:C4:BC:25:5E:F1:49:8D:1D:54:37:17
Authority key identifier: 17:22:E9:67:8F:B0:D4:14:D2:DD:FB:D2:42:0C:4C:74:82:63:F3:4B
Certificate issuer: /CN=1722e9678fb0d414d2ddfbd2420c4c748263f34b
Certificate serial: 019CAD59CB3BB56277BF1EE5A9AEF54517C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FyLpZ4-w1BTS3fvSQgxMdIJj80s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.mft
Manifest number: 10BB
Signing time: Mon 02 Mar 2026 07:01:08 +0000
Manifest this update: Mon 02 Mar 2026 07:01:08 +0000
Manifest next update: Tue 03 Mar 2026 07:01:08 +0000
Files and hashes: 1: 12e7WnFZjJg5d5fvA7KK7iZMkcY.roa (hash: X98CVhIUdgJwE//yVec86D5pD0Tnuzv1MB8J4RaBu5M=)
2: FyLpZ4-w1BTS3fvSQgxMdIJj80s.crl (hash: o73tAXPIrGZfxDhFN/X4R8i8BTMO2aSyWB0SP/Fq0u0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.mft
rsync://rpki.ripe.net/repository/DEFAULT/FyLpZ4-w1BTS3fvSQgxMdIJj80s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:cb:3b:b5:62:77:bf:1e:e5:a9:ae:f5:45:17:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1722e9678fb0d414d2ddfbd2420c4c748263f34b
Validity
Not Before: Mar 2 07:01:08 2026 GMT
Not After : Mar 3 07:01:08 2026 GMT
Subject: CN=47525316ed9a46d1b9c4bc255ef1498d1d543717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ef:58:2c:7d:bd:e3:e4:09:b9:bb:0c:21:db:
32:0a:9b:58:b6:7a:ae:99:a6:44:f8:b8:d3:3c:4d:
75:ea:92:99:1f:d7:1d:de:a1:21:56:18:0a:25:7d:
cd:c6:ef:0c:e2:eb:3b:3d:f7:cd:d6:a4:fd:b8:48:
8a:c1:a2:ec:a5:f1:94:42:6d:01:6b:52:c3:59:95:
83:bc:44:7a:00:2e:64:5d:f7:99:84:12:1e:a9:10:
d2:56:54:56:f8:df:38:b9:d0:df:58:ef:d9:63:06:
34:f5:b8:ba:03:ac:10:6b:9c:59:3f:de:31:f4:51:
e6:71:12:2f:a3:8a:67:ce:24:f7:6a:1a:20:1e:49:
3a:7e:64:95:c8:83:3e:4d:86:a1:9a:89:af:fa:8e:
71:4b:dc:60:11:ae:ce:bb:89:49:56:16:05:c7:f7:
24:89:48:fb:9b:d5:ae:3c:44:b9:5a:d6:ee:56:8c:
ec:02:75:27:e9:5e:e3:1d:45:c5:a3:a6:14:e7:24:
71:be:a3:22:92:20:14:59:37:be:2b:5b:b0:06:14:
80:7a:f7:33:42:91:29:3d:8e:e7:33:15:4c:f0:04:
e8:08:0c:3d:9e:79:d8:de:9a:79:95:31:34:6e:de:
bb:6f:de:3f:62:64:6d:b9:3b:7f:36:a8:bf:97:aa:
9b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:52:53:16:ED:9A:46:D1:B9:C4:BC:25:5E:F1:49:8D:1D:54:37:17
X509v3 Authority Key Identifier:
keyid:17:22:E9:67:8F:B0:D4:14:D2:DD:FB:D2:42:0C:4C:74:82:63:F3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyLpZ4-w1BTS3fvSQgxMdIJj80s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:f9:56:0e:00:c4:35:d0:9b:d5:66:2d:19:d3:ff:30:9d:6c:
98:a1:4c:ce:4d:25:4e:d3:9e:3d:d7:8d:d5:58:1d:d4:63:bc:
12:1d:41:57:24:82:33:79:45:e9:43:83:d7:e6:7e:4d:ff:49:
be:8f:b9:e9:9a:66:fb:15:d1:34:db:70:6f:b6:2f:c6:70:e3:
9a:84:e8:d6:43:07:24:d9:5b:3f:93:af:27:e4:f1:c5:24:6e:
45:28:ed:df:f4:61:34:f4:b5:62:66:fb:57:8f:de:e8:a8:72:
1e:ee:9e:b0:c3:90:ee:be:06:f7:48:df:96:1a:39:2b:ae:4d:
ec:cd:64:50:7c:3f:dc:bb:ff:00:7f:bc:a3:0c:10:e9:c5:db:
e4:fd:96:19:b3:08:55:70:36:3d:b3:69:26:60:49:0c:3b:7f:
45:cc:9c:55:31:85:73:7d:22:fa:22:bf:a6:f2:38:91:cb:c9:
aa:92:f8:6e:b1:39:c0:8a:5a:da:45:47:95:b8:9c:28:9f:2e:
90:b6:55:ce:54:24:57:0f:0f:25:de:a6:a1:f2:d5:4a:18:1c:
68:75:79:8e:1a:66:0e:da:4e:ee:89:5d:02:5e:34:69:c6:7c:
23:94:14:d5:46:2a:d7:c0:62:fa:5f:81:42:73:27:34:f3:8a:
77:10:fd:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:44:58 2026 by rpki-client