Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
File: FlnrYEAZPfBoE1CQXmOdDljV-d8.mft (raw, json)
Hash identifier: stHfooe4pyO0B6iLmX40cSPPU4aPwqoTe09M+tLX6Ks=
Subject key identifier: 23:9E:06:D8:6A:52:A9:2B:58:13:99:1D:B0:63:28:92:F3:3C:7B:3D
Authority key identifier: 16:59:EB:60:40:19:3D:F0:68:13:50:90:5E:63:9D:0E:58:D5:F9:DF
Certificate issuer: /CN=1659eb6040193df0681350905e639d0e58d5f9df
Certificate serial: 019EBF9160F7429928E990795BE5E272307C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
Manifest number: 17C3
Signing time: Sat 13 Jun 2026 06:00:36 +0000
Manifest this update: Sat 13 Jun 2026 06:00:36 +0000
Manifest next update: Sun 14 Jun 2026 06:00:36 +0000
Files and hashes: 1: Ebw7UmhhiZG_Nrfoble_YWsPVu4.roa (hash: 9BXqjTT23ZUPj2QuWTEKVvPbzIY1hciLXoi7NrQptsU=)
2: FlnrYEAZPfBoE1CQXmOdDljV-d8.crl (hash: 0k/qGfDoVDKwcA1METc28tx1dcvySMIDpxHCIPfFuMI=)
3: aKt1IzaRyYfROpZHibRsZ71BdRE.roa (hash: oXZivLJhewPC3l7955mcOzVeeerdPRVG1F9b3jjovao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 06:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:91:60:f7:42:99:28:e9:90:79:5b:e5:e2:72:30:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1659eb6040193df0681350905e639d0e58d5f9df
Validity
Not Before: Jun 13 06:00:36 2026 GMT
Not After : Jun 14 06:00:36 2026 GMT
Subject: CN=239e06d86a52a92b5813991db0632892f33c7b3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:86:db:cb:27:0d:66:c0:d5:40:0f:4a:f2:99:
37:52:20:2d:1a:ad:5e:1b:ed:09:b7:af:74:c0:ea:
9e:f6:cc:d0:63:74:5c:10:d8:23:49:5c:8e:dd:94:
ac:e0:39:61:ee:8b:bb:34:64:23:d1:18:27:c9:d1:
f7:b1:1f:87:99:c9:e8:bd:ea:f3:22:a7:dc:0c:6f:
85:f2:df:de:7c:2d:9d:49:af:77:e0:8e:b8:c7:7a:
39:ba:61:d0:05:d0:1a:54:d0:e3:24:6a:89:23:32:
ba:f6:2e:9c:e0:c6:3d:32:eb:06:4b:a1:e4:d1:5c:
0b:92:84:a3:18:15:45:c4:76:ba:e8:e1:9e:70:2f:
8e:bd:c4:a6:ad:4b:c7:82:45:d0:4d:9b:09:db:6b:
df:d1:4b:f1:b7:e0:f9:c8:10:98:2a:cc:5b:57:4d:
b4:ee:4b:35:e1:f8:a6:9c:e4:6e:a4:c0:b5:db:ea:
2e:5e:73:d3:61:3e:0a:21:84:ea:c3:6c:ac:66:dd:
d4:c4:ed:05:a1:93:48:32:dc:3e:b5:aa:44:29:6a:
ea:3d:15:f1:55:f1:10:33:f8:b3:e6:eb:62:75:10:
cc:85:26:8b:ad:1e:61:02:fd:45:7e:7c:78:1d:70:
39:41:50:b2:e0:17:bb:bc:e0:e8:92:ef:b7:8c:7f:
f5:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:9E:06:D8:6A:52:A9:2B:58:13:99:1D:B0:63:28:92:F3:3C:7B:3D
X509v3 Authority Key Identifier:
keyid:16:59:EB:60:40:19:3D:F0:68:13:50:90:5E:63:9D:0E:58:D5:F9:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:d0:b6:2e:c6:04:03:97:0c:87:17:d1:71:ec:94:65:d4:e5:
1a:ec:d2:cc:9b:ee:53:44:2e:d0:b3:65:8c:59:a2:1b:c5:4a:
aa:38:5d:c8:90:0b:dc:2a:d3:65:3c:58:73:5a:8f:60:ae:2a:
47:5e:fc:f1:eb:fd:b1:69:01:e3:db:61:c0:bc:db:2d:0e:16:
89:5f:f2:37:47:14:ca:d2:1a:30:85:47:b2:3d:20:42:74:af:
44:1c:fa:8a:44:e6:d5:34:25:8a:1d:21:ea:af:93:29:2b:f3:
6c:4d:b0:f6:f0:c9:f8:b1:34:34:63:cf:ac:97:6a:a8:69:1d:
10:13:c0:1f:24:f6:da:3d:de:8e:38:72:b0:b4:ee:f2:4b:90:
bd:f6:d6:4d:ee:75:68:e7:fd:74:92:4c:d7:81:01:d0:4a:43:
ee:04:67:94:a7:77:dd:33:dc:e1:73:e0:e9:a7:7a:62:9b:d6:
a2:4f:f8:ba:4e:f9:42:2a:ad:05:b8:ae:d3:3e:3e:6d:76:c0:
bb:ba:46:49:e2:90:97:8f:45:9c:71:c1:b1:be:70:86:58:8b:
a3:50:75:df:86:43:86:12:e5:34:8e:b1:a0:c7:cc:ec:26:eb:
f7:43:a9:86:d8:a6:9a:43:73:cc:48:50:97:df:50:c8:03:c0:
11:f7:2b:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/kWD3Qpko6ZB5W+XicjB8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2NTllYjYwNDAxOTNkZjA2ODEzNTA5MDVlNjM5ZDBlNThk
NWY5ZGYwHhcNMjYwNjEzMDYwMDM2WhcNMjYwNjE0MDYwMDM2WjAzMTEwLwYDVQQD
EygyMzllMDZkODZhNTJhOTJiNTgxMzk5MWRiMDYzMjg5MmYzM2M3YjNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIbbyycNZsDVQA9K8pk3UiAtGq1e
G+0Jt690wOqe9szQY3RcENgjSVyO3ZSs4Dlh7ou7NGQj0RgnydH3sR+Hmcnoverz
IqfcDG+F8t/efC2dSa934I64x3o5umHQBdAaVNDjJGqJIzK69i6c4MY9MusGS6Hk
0VwLkoSjGBVFxHa66OGecC+OvcSmrUvHgkXQTZsJ22vf0Uvxt+D5yBCYKsxbV020
7ks14fimnORupMC12+ouXnPTYT4KIYTqw2ysZt3UxO0FoZNIMtw+tapEKWrqPRXx
VfEQM/iz5utidRDMhSaLrR5hAv1Ffnx4HXA5QVCy4Be7vODoku+3jH/1WwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCOeBthqUqkrWBOZHbBjKJLzPHs9MB8GA1UdIwQY
MBaAFBZZ62BAGT3waBNQkF5jnQ5Y1fnfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmxucllFQVpQZkJvRTFDUVhtT2REbGpWLWQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9mZjUxMzMtY2ExMS00MmRiLWIwM2Qt
NTQ0ODU1Y2M0ZjU3LzEvRmxucllFQVpQZkJvRTFDUVhtT2REbGpWLWQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9mZjUxMzMtY2ExMS00MmRiLWIwM2QtNTQ0ODU1Y2M0ZjU3
LzEvRmxucllFQVpQZkJvRTFDUVhtT2REbGpWLWQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAotC2LsYE
A5cMhxfRceyUZdTlGuzSzJvuU0Qu0LNljFmiG8VKqjhdyJAL3CrTZTxYc1qPYK4q
R1788ev9sWkB49thwLzbLQ4WiV/yN0cUytIaMIVHsj0gQnSvRBz6ikTm1TQlih0h
6q+TKSvzbE2w9vDJ+LE0NGPPrJdqqGkdEBPAHyT22j3ejjhysLTu8kuQvfbWTe51
aOf9dJJM14EB0EpD7gRnlKd33TPc4XPg6ad6YpvWok/4uk75QiqtBbiu0z4+bXbA
u7pGSeKQl49FnHHBsb5whliLo1B134ZDhhLlNI6xoMfM7Cbr90OphtimmkNzzEhQ
l99QyAPAEfcrBA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:58:57 2026 by rpki-client