Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/FyKJy7gXn9846fUyyc1ykbT1xC0.mft
File: FyKJy7gXn9846fUyyc1ykbT1xC0.mft (raw, json)
Hash identifier: /w5Tbqy1g+Ot8QEL4ihCEKhKu43n+NSrc/+SBTh60m0=
Subject key identifier: 89:D1:51:E9:9C:ED:AF:76:DF:2E:2D:2C:25:37:31:2F:EA:92:9B:87
Authority key identifier: 17:22:89:CB:B8:17:9F:DF:38:E9:F5:32:C9:CD:72:91:B4:F5:C4:2D
Certificate issuer: /CN=172289cbb8179fdf38e9f532c9cd7291b4f5c42d
Certificate serial: 01A12089BFE083120635990D1DF39551A538
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FyKJy7gXn9846fUyyc1ykbT1xC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/FyKJy7gXn9846fUyyc1ykbT1xC0.mft
Manifest number: 1085
Signing time: Fri 09 Oct 2026 12:01:00 +0000
Manifest this update: Fri 09 Oct 2026 12:01:00 +0000
Manifest next update: Sat 10 Oct 2026 12:01:00 +0000
Files and hashes: 1: FyKJy7gXn9846fUyyc1ykbT1xC0.crl (hash: 2ye8BnKe9MufltDxOa8wArJB99YGEu3YoIaC7/SLWIQ=)
2: G7sgYRFoJFayuqOiJkT4SvmLSC0.roa (hash: s14deS72G3vc/Z7LgUYqSMvuXanb2Xca7svdma5VBoI=)
3: pxS12DAcCwaW3ocjEXURu6Jiigc.roa (hash: ETa0HlY7Y1RquVwxDSRzexuULYuncZkEz0TP+kkZKZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/FyKJy7gXn9846fUyyc1ykbT1xC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/FyKJy7gXn9846fUyyc1ykbT1xC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/FyKJy7gXn9846fUyyc1ykbT1xC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:20:89:bf:e0:83:12:06:35:99:0d:1d:f3:95:51:a5:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=172289cbb8179fdf38e9f532c9cd7291b4f5c42d
Validity
Not Before: Oct 9 12:01:00 2026 GMT
Not After : Oct 10 12:01:00 2026 GMT
Subject: CN=89d151e99cedaf76df2e2d2c2537312fea929b87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ee:06:71:6a:59:42:8d:a0:f1:da:99:f0:b4:
a5:6d:70:90:12:6d:48:3e:6e:f0:df:bb:7c:91:44:
cd:db:90:ca:6b:b6:e1:d0:34:5a:74:01:b0:1a:f1:
3e:1c:f0:a5:82:63:42:10:65:8e:c7:9d:6b:fa:0e:
0d:9e:2a:5a:ab:11:59:87:db:9d:ae:0c:63:aa:ae:
f4:94:ec:77:da:7d:0b:f5:91:cf:66:ce:99:0a:1b:
f5:e3:1b:3e:00:78:2d:f5:5a:fa:a6:38:87:1d:53:
e3:a1:f2:b8:95:6c:18:56:21:c6:6c:87:f0:8c:d9:
23:0f:46:ef:df:db:07:93:eb:04:06:7e:42:0f:cd:
0a:3d:d1:68:a7:88:5f:86:8c:42:f3:f2:20:54:ac:
de:7f:d3:e8:f7:2f:57:fc:1f:8c:16:17:8a:46:1c:
7c:bf:1c:1f:67:54:d9:b3:53:b0:63:ad:20:f7:27:
5e:89:00:61:f5:1e:08:5e:5e:65:69:b8:31:93:ef:
f8:e5:89:31:32:a2:2e:eb:6b:f3:ed:40:8c:a8:0a:
7f:12:3b:03:16:d0:2a:22:e8:93:3c:ef:b3:57:e6:
fd:4c:b4:78:72:ab:7b:c1:98:a8:f7:d7:82:34:84:
af:09:c2:84:a5:d7:11:61:22:c8:5a:04:23:e7:d5:
9d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:D1:51:E9:9C:ED:AF:76:DF:2E:2D:2C:25:37:31:2F:EA:92:9B:87
X509v3 Authority Key Identifier:
keyid:17:22:89:CB:B8:17:9F:DF:38:E9:F5:32:C9:CD:72:91:B4:F5:C4:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyKJy7gXn9846fUyyc1ykbT1xC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/FyKJy7gXn9846fUyyc1ykbT1xC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/FyKJy7gXn9846fUyyc1ykbT1xC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:f5:dd:75:c3:76:d5:07:0f:51:1b:c8:79:2f:e5:27:fd:69:
d1:ce:0a:ad:22:a8:92:74:ff:37:73:d3:08:3a:96:85:9b:fd:
5c:b2:52:06:b4:ac:47:6a:d1:6e:37:3b:22:ca:8b:11:1d:34:
01:d4:5b:49:ed:ec:e0:1d:60:c3:a6:b0:cd:13:a3:f8:bb:9c:
dd:65:d3:cc:84:73:db:2a:e5:c9:44:d3:43:48:1f:42:6b:53:
84:a7:cc:26:96:80:36:c4:df:6d:99:8f:38:ba:63:dc:42:88:
a1:c4:dd:36:90:d0:6b:3c:44:33:71:bb:52:47:24:f9:d8:b3:
50:29:fd:33:bb:d6:e8:36:e6:8b:33:c7:94:43:d6:8f:99:68:
71:05:27:f0:f6:76:a7:29:b3:f0:c8:a8:55:0f:38:65:52:a5:
4d:1f:0b:8e:d4:0a:f1:e6:47:cb:81:bd:cb:a4:e9:ed:2e:50:
f9:9c:52:f8:e0:01:57:a2:38:5a:e6:87:2e:5f:97:e8:9f:a1:
26:b7:2f:67:9a:bc:31:5c:38:c2:73:95:65:13:91:84:16:63:
4e:93:0b:85:30:e5:57:8b:22:f6:59:80:ee:e8:03:57:7a:bc:
1c:16:f3:89:d5:ed:73:d1:54:9e:f4:9f:63:b4:b8:4a:df:05:
2e:d9:5e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 17:20:30 2026 by rpki-client