Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
File: FlnrYEAZPfBoE1CQXmOdDljV-d8.mft (raw, json)
Hash identifier: lRCUf1VMKodUbiSTyDqehd/O2B5XB7vQguowiTTZCKE=
Subject key identifier: 75:4A:02:42:EC:98:57:C4:FF:E7:5D:5D:F2:5E:1A:E3:8C:00:BD:69
Authority key identifier: 16:59:EB:60:40:19:3D:F0:68:13:50:90:5E:63:9D:0E:58:D5:F9:DF
Certificate issuer: /CN=1659eb6040193df0681350905e639d0e58d5f9df
Certificate serial: 019CAC7DF4F9BBCA5862DBE201C8AC74F390
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
Manifest number: 16B0
Signing time: Mon 02 Mar 2026 03:01:01 +0000
Manifest this update: Mon 02 Mar 2026 03:01:01 +0000
Manifest next update: Tue 03 Mar 2026 03:01:01 +0000
Files and hashes: 1: Ebw7UmhhiZG_Nrfoble_YWsPVu4.roa (hash: 9BXqjTT23ZUPj2QuWTEKVvPbzIY1hciLXoi7NrQptsU=)
2: FlnrYEAZPfBoE1CQXmOdDljV-d8.crl (hash: YXSxASrf7pdkSE0YYQihuDYyx+K9sSjWfQn0GNRswok=)
3: aKt1IzaRyYfROpZHibRsZ71BdRE.roa (hash: oXZivLJhewPC3l7955mcOzVeeerdPRVG1F9b3jjovao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 03:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:f4:f9:bb:ca:58:62:db:e2:01:c8:ac:74:f3:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1659eb6040193df0681350905e639d0e58d5f9df
Validity
Not Before: Mar 2 03:01:01 2026 GMT
Not After : Mar 3 03:01:01 2026 GMT
Subject: CN=754a0242ec9857c4ffe75d5df25e1ae38c00bd69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:39:b3:bd:27:71:b4:99:a5:d3:3c:ab:ce:e2:
65:a5:5a:77:b9:b3:ca:f3:32:26:33:74:58:93:1f:
40:03:56:78:47:61:93:0a:c6:3a:69:65:cf:a1:fc:
a7:98:2b:6b:bd:cb:ad:06:9a:f5:fa:27:2a:8b:6a:
f1:7c:ae:05:c7:3b:08:d0:e2:23:a5:25:85:12:46:
3d:17:a6:6e:57:81:b1:6e:88:91:86:47:1a:3e:7e:
e3:c0:61:f0:13:8b:12:96:6b:76:8a:2b:b3:32:f8:
62:0d:43:e9:df:fa:d7:e4:63:85:a5:42:07:8c:dc:
ae:fa:fc:c2:c5:1a:1d:38:31:f2:fb:8a:cf:16:ee:
78:72:74:ec:04:5b:f6:fc:03:fe:d6:d0:9a:d3:17:
bc:9d:67:1a:fc:7f:60:a4:26:f1:4c:78:b5:0a:0e:
8e:53:e7:65:42:49:b9:f3:4b:d9:b0:d5:54:d8:27:
d3:02:ed:7f:bc:e3:df:ef:dd:6d:1f:29:52:20:9d:
40:d3:f9:77:60:91:d5:08:56:20:e1:8b:42:7c:72:
78:25:99:ae:08:87:dc:c6:ee:c7:4e:e4:35:d3:f7:
d5:05:a2:ad:0f:49:e2:2e:97:9a:7f:4a:8f:a4:e0:
1e:0c:c5:66:8e:f6:d1:18:57:45:09:86:65:2a:0e:
b6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:4A:02:42:EC:98:57:C4:FF:E7:5D:5D:F2:5E:1A:E3:8C:00:BD:69
X509v3 Authority Key Identifier:
keyid:16:59:EB:60:40:19:3D:F0:68:13:50:90:5E:63:9D:0E:58:D5:F9:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:23:0f:79:a4:df:5e:21:7a:cf:01:f0:d0:14:48:b5:07:1a:
53:26:ef:7b:ac:75:e4:b9:22:89:1f:f5:1c:55:b4:e2:50:95:
9d:9a:79:04:bb:0d:03:74:27:b2:99:f2:33:27:af:b1:81:5b:
ac:a0:c4:5b:b9:a2:20:9c:1b:dd:84:b7:ee:f3:94:d7:c7:ab:
d6:3a:b9:11:38:1f:fe:8a:2b:94:34:24:3d:ef:33:55:4d:c5:
34:bb:74:fb:5d:ae:10:11:00:e1:36:99:4a:0f:13:41:28:13:
8b:55:82:7e:c2:7f:de:f7:06:0a:c2:f6:ae:41:41:da:6e:4f:
4f:62:3a:55:ff:bc:b0:6c:b6:35:3b:ba:72:7c:35:91:a2:28:
36:90:98:1e:2b:af:b5:a0:67:a2:3c:89:cf:02:93:fe:55:b2:
4b:23:95:7f:86:ef:09:bb:78:2a:8b:12:ed:83:b9:88:20:a3:
a7:fe:af:8e:12:b5:32:79:e4:4b:51:41:46:86:c3:2d:b8:5e:
0a:d9:39:7f:62:8f:38:8d:36:13:a8:b2:8b:01:a6:b4:6e:32:
1c:0f:d7:72:b5:72:d2:fb:1d:1d:36:44:35:6b:b8:49:2f:6c:
53:f1:35:2f:5e:81:cc:a5:ac:56:75:49:6e:98:e2:e7:d0:3e:
50:9c:e9:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:02:32 2026 by rpki-client