Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
File: FlnrYEAZPfBoE1CQXmOdDljV-d8.mft (raw, json)
Hash identifier: X4w8n9xICT+NJs/dUkATHEb9IsbVhONbyJSkD0N3Sqw=
Subject key identifier: 3E:12:49:98:D4:60:DA:8E:53:E3:6D:6E:74:3F:0F:BA:0F:F7:2E:12
Authority key identifier: 16:59:EB:60:40:19:3D:F0:68:13:50:90:5E:63:9D:0E:58:D5:F9:DF
Certificate issuer: /CN=1659eb6040193df0681350905e639d0e58d5f9df
Certificate serial: 019D9A07504D92F86A59D69113BE65CA7F1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
Manifest number: 172B
Signing time: Fri 17 Apr 2026 06:01:03 +0000
Manifest this update: Fri 17 Apr 2026 06:01:03 +0000
Manifest next update: Sat 18 Apr 2026 06:01:03 +0000
Files and hashes: 1: Ebw7UmhhiZG_Nrfoble_YWsPVu4.roa (hash: 9BXqjTT23ZUPj2QuWTEKVvPbzIY1hciLXoi7NrQptsU=)
2: FlnrYEAZPfBoE1CQXmOdDljV-d8.crl (hash: 1JcrR/dIDE8O12jpAN9u5rA6Z6+mgnOsGKixdL65kDU=)
3: aKt1IzaRyYfROpZHibRsZ71BdRE.roa (hash: oXZivLJhewPC3l7955mcOzVeeerdPRVG1F9b3jjovao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:50:4d:92:f8:6a:59:d6:91:13:be:65:ca:7f:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1659eb6040193df0681350905e639d0e58d5f9df
Validity
Not Before: Apr 17 06:01:03 2026 GMT
Not After : Apr 18 06:01:03 2026 GMT
Subject: CN=3e124998d460da8e53e36d6e743f0fba0ff72e12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7f:8e:ad:ee:24:e5:d5:b7:21:88:5b:67:51:
17:90:fd:97:c3:e2:f5:ec:b3:01:3a:f3:32:44:29:
4c:c9:e3:3b:3f:6c:a4:96:b5:04:c3:da:f5:f1:f2:
29:19:7d:70:df:19:43:b9:de:99:ba:89:66:4f:b8:
11:f1:30:08:08:e3:77:ed:15:18:d0:19:0e:db:73:
66:95:09:73:1d:35:79:46:2b:93:23:d4:d5:4c:99:
2d:b5:bb:a4:86:70:45:ae:ae:f5:ee:e5:4c:81:71:
1b:15:5b:75:12:61:17:9a:4d:30:4d:7d:78:bd:3e:
b7:33:c5:d9:b3:55:05:7f:e8:d3:a2:c0:04:56:8e:
ab:9a:d7:35:91:45:64:ba:ef:f9:82:11:4f:0e:ce:
93:a4:cf:b0:bb:1a:6a:4c:83:0a:d0:b5:32:b4:3a:
fe:c8:97:ca:4a:89:9f:6d:ca:e1:a9:9b:17:44:f9:
55:08:3d:3d:e3:96:af:0a:42:f0:c6:7f:16:ff:51:
a6:72:cf:b8:f2:d1:12:a9:0e:bc:d4:2b:22:d7:1a:
4d:cf:e4:a2:e7:6f:45:b3:2f:30:29:82:5f:75:06:
7a:d3:84:7e:76:6a:c0:35:ec:66:79:76:03:db:60:
ad:b2:27:1e:b1:5e:f5:b0:5d:03:3a:ac:37:30:db:
5c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:12:49:98:D4:60:DA:8E:53:E3:6D:6E:74:3F:0F:BA:0F:F7:2E:12
X509v3 Authority Key Identifier:
keyid:16:59:EB:60:40:19:3D:F0:68:13:50:90:5E:63:9D:0E:58:D5:F9:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:50:d9:bb:47:d7:b3:e5:05:00:eb:cb:44:28:63:ad:7b:35:
c7:f4:ef:d3:a6:98:1a:62:30:e4:be:91:0c:9c:89:c5:05:69:
3c:04:e7:ed:4b:64:df:93:54:f8:29:78:5a:e5:8c:98:78:4f:
c5:59:81:f0:bd:5e:99:89:d5:fe:19:71:8a:d1:7a:91:36:ba:
27:b6:6e:3f:9c:a1:c7:c0:14:eb:a3:79:8f:78:73:a8:75:bc:
49:27:37:ae:3f:94:ae:03:79:81:98:e4:5d:53:12:ba:6a:68:
43:09:b0:de:fb:71:be:07:cc:fb:80:3b:69:41:ee:d0:24:e2:
0d:67:c3:05:76:06:d9:b7:50:c4:96:16:20:84:e4:9c:95:85:
15:99:f8:3d:a9:55:ea:20:bb:ca:10:17:b1:f7:dc:e4:98:0f:
2a:6c:9e:91:9f:bd:6c:41:99:ca:79:fe:39:bb:53:2d:50:0b:
6b:95:d2:67:72:03:c7:0c:24:af:6b:f3:05:43:ef:91:1e:28:
37:1b:bc:12:9b:d9:2f:91:b4:50:f7:8a:d6:aa:46:73:e7:c7:
8a:2e:51:56:d4:7f:e2:5b:87:22:59:8e:2f:ee:ac:1f:6f:8d:
50:57:f2:55:5b:e1:b6:11:f2:55:2f:48:c9:02:ce:73:c5:dc:
de:42:9c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:43:22 2026 by rpki-client