Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
File: FlnrYEAZPfBoE1CQXmOdDljV-d8.mft (raw, json)
Hash identifier: ZU7nWCefuFUJmdXpZMsrrny1cBC97KrvGOvHDkT39bA=
Subject key identifier: E4:FC:98:F1:28:2B:4F:E7:36:8B:5E:BE:67:B0:17:22:3C:D4:E5:ED
Authority key identifier: 16:59:EB:60:40:19:3D:F0:68:13:50:90:5E:63:9D:0E:58:D5:F9:DF
Certificate issuer: /CN=1659eb6040193df0681350905e639d0e58d5f9df
Certificate serial: 01A0BF551DAE71BB7776ED05FE0F0BE00703
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
Manifest number: 18CC
Signing time: Sun 20 Sep 2026 15:00:21 +0000
Manifest this update: Sun 20 Sep 2026 15:00:21 +0000
Manifest next update: Mon 21 Sep 2026 15:00:21 +0000
Files and hashes: 1: Ebw7UmhhiZG_Nrfoble_YWsPVu4.roa (hash: 9BXqjTT23ZUPj2QuWTEKVvPbzIY1hciLXoi7NrQptsU=)
2: FlnrYEAZPfBoE1CQXmOdDljV-d8.crl (hash: 6jgKnXyS7RxsPzHK67xpBsgGTfltVqQLX5A8xEhr3FA=)
3: aKt1IzaRyYfROpZHibRsZ71BdRE.roa (hash: oXZivLJhewPC3l7955mcOzVeeerdPRVG1F9b3jjovao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 15:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:55:1d:ae:71:bb:77:76:ed:05:fe:0f:0b:e0:07:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1659eb6040193df0681350905e639d0e58d5f9df
Validity
Not Before: Sep 20 15:00:21 2026 GMT
Not After : Sep 21 15:00:21 2026 GMT
Subject: CN=e4fc98f1282b4fe7368b5ebe67b017223cd4e5ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:21:57:00:8b:dd:94:c4:3e:f4:8e:45:a5:af:
63:58:c7:a6:bc:6f:36:c0:75:74:5c:80:69:9f:62:
a4:43:42:2b:ee:d0:10:5b:b9:e3:ac:54:69:0f:e6:
3b:b9:82:ea:fd:81:6d:fd:5a:a8:6e:10:ff:fc:ba:
2c:46:24:39:d4:cc:97:1f:8e:d0:c3:1a:4b:61:28:
3c:14:0b:2c:1f:a3:65:47:61:02:47:ab:11:e8:84:
bd:ae:ae:ac:a9:ae:dc:cb:49:1c:a4:cb:34:cb:9e:
a0:d9:0e:32:40:8a:f3:30:69:ff:6b:89:06:98:d0:
70:bc:b6:1f:b8:17:1d:42:cf:02:19:b4:3e:9f:d4:
49:94:89:9b:62:3b:14:cf:b2:e3:3d:9e:30:c6:46:
da:a1:dd:f3:66:c5:83:4c:de:4c:74:52:a6:35:12:
6f:0c:99:66:07:07:7e:56:60:9d:0a:59:09:fb:4b:
cf:d1:2b:ee:c4:71:b4:05:d3:68:43:21:a9:31:49:
1e:1c:a9:63:e7:7c:31:ca:18:32:67:00:4b:42:1c:
0b:2c:eb:bf:7b:a1:d6:15:e2:8c:e2:9b:20:28:e8:
2b:b6:dd:86:f2:d4:b8:2a:1a:26:01:f4:99:89:57:
93:2d:7b:ca:cf:aa:c7:0e:21:5a:a5:26:89:41:82:
1c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:FC:98:F1:28:2B:4F:E7:36:8B:5E:BE:67:B0:17:22:3C:D4:E5:ED
X509v3 Authority Key Identifier:
keyid:16:59:EB:60:40:19:3D:F0:68:13:50:90:5E:63:9D:0E:58:D5:F9:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:f4:a7:8d:77:89:22:a5:f1:af:85:a3:6a:b1:2a:0b:dc:a5:
5c:cb:27:3f:90:14:5c:29:5d:87:da:6e:a3:6c:53:21:bc:ba:
09:ee:dd:cd:36:74:e0:45:6a:50:0e:86:f1:4c:b5:b9:b1:f0:
91:1a:34:34:eb:23:b9:97:7a:56:ad:d4:3d:7e:3a:bc:e6:f1:
ab:69:c1:5b:49:ec:e0:ae:09:8b:8b:04:c0:30:7b:1b:c1:02:
cf:5c:98:53:a9:05:1c:de:f5:51:21:63:6b:1f:c9:e1:9f:a6:
5b:7f:37:bf:ff:9d:9a:99:e1:4f:72:91:62:b5:f0:9e:7f:83:
36:7c:2a:0a:33:a3:ad:5c:e5:e5:cd:d1:90:bb:46:f3:cf:6c:
0b:37:11:fc:b4:c3:b0:28:da:4b:4c:20:4d:bb:81:73:5f:07:
7a:6d:69:fe:ad:4a:c6:d9:cb:db:8b:61:95:ca:d1:c8:40:76:
ac:d0:fb:59:95:3e:b8:65:cc:22:30:f8:e9:96:11:e8:46:4e:
de:e2:e7:3b:45:34:4b:cf:f2:c1:ef:6a:df:d6:d4:11:82:ed:
46:01:69:51:29:df:00:b3:ba:91:8d:3d:ee:16:df:4f:24:5a:
f4:38:ad:e4:ae:e5:95:1c:b8:a9:d4:7c:d4:c4:59:48:85:ae:
b3:fb:05:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC/VR2ucbt3du0F/g8L4AcDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2NTllYjYwNDAxOTNkZjA2ODEzNTA5MDVlNjM5ZDBlNThk
NWY5ZGYwHhcNMjYwOTIwMTUwMDIxWhcNMjYwOTIxMTUwMDIxWjAzMTEwLwYDVQQD
EyhlNGZjOThmMTI4MmI0ZmU3MzY4YjVlYmU2N2IwMTcyMjNjZDRlNWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5CFXAIvdlMQ+9I5Fpa9jWMemvG82
wHV0XIBpn2KkQ0Ir7tAQW7njrFRpD+Y7uYLq/YFt/VqobhD//LosRiQ51MyXH47Q
wxpLYSg8FAssH6NlR2ECR6sR6IS9rq6sqa7cy0kcpMs0y56g2Q4yQIrzMGn/a4kG
mNBwvLYfuBcdQs8CGbQ+n9RJlImbYjsUz7LjPZ4wxkbaod3zZsWDTN5MdFKmNRJv
DJlmBwd+VmCdClkJ+0vP0SvuxHG0BdNoQyGpMUkeHKlj53wxyhgyZwBLQhwLLOu/
e6HWFeKM4psgKOgrtt2G8tS4KhomAfSZiVeTLXvKz6rHDiFapSaJQYIc5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOT8mPEoK0/nNotevmewFyI81OXtMB8GA1UdIwQY
MBaAFBZZ62BAGT3waBNQkF5jnQ5Y1fnfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmxucllFQVpQZkJvRTFDUVhtT2REbGpWLWQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9mZjUxMzMtY2ExMS00MmRiLWIwM2Qt
NTQ0ODU1Y2M0ZjU3LzEvRmxucllFQVpQZkJvRTFDUVhtT2REbGpWLWQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9mZjUxMzMtY2ExMS00MmRiLWIwM2QtNTQ0ODU1Y2M0ZjU3
LzEvRmxucllFQVpQZkJvRTFDUVhtT2REbGpWLWQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFfSnjXeJ
IqXxr4WjarEqC9ylXMsnP5AUXCldh9puo2xTIby6Ce7dzTZ04EVqUA6G8Uy1ubHw
kRo0NOsjuZd6Vq3UPX46vObxq2nBW0ns4K4Ji4sEwDB7G8ECz1yYU6kFHN71USFj
ax/J4Z+mW383v/+dmpnhT3KRYrXwnn+DNnwqCjOjrVzl5c3RkLtG889sCzcR/LTD
sCjaS0wgTbuBc18Hem1p/q1KxtnL24thlcrRyEB2rND7WZU+uGXMIjD46ZYR6EZO
3uLnO0U0S8/ywe9q39bUEYLtRgFpUSnfALO6kY097hbfTyRa9Dit5K7llRy4qdR8
1MRZSIWus/sFAg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 01:18:22 2026 by rpki-client