Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/FyKJy7gXn9846fUyyc1ykbT1xC0.mft
File: FyKJy7gXn9846fUyyc1ykbT1xC0.mft (raw, json)
Hash identifier: JVCIUFf0pAmP0Fy++qQJKDggFUwZTRinYS4gUYUqsWs=
Subject key identifier: E8:D1:3D:9D:DE:CA:4E:6F:6F:E2:77:0A:E7:CE:01:6F:C2:7C:23:01
Authority key identifier: 17:22:89:CB:B8:17:9F:DF:38:E9:F5:32:C9:CD:72:91:B4:F5:C4:2D
Certificate issuer: /CN=172289cbb8179fdf38e9f532c9cd7291b4f5c42d
Certificate serial: 019D9C9A10C91E0C49294C6AB489EFE7BCA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FyKJy7gXn9846fUyyc1ykbT1xC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/FyKJy7gXn9846fUyyc1ykbT1xC0.mft
Manifest number: 0EB3
Signing time: Fri 17 Apr 2026 18:00:35 +0000
Manifest this update: Fri 17 Apr 2026 18:00:35 +0000
Manifest next update: Sat 18 Apr 2026 18:00:35 +0000
Files and hashes: 1: FyKJy7gXn9846fUyyc1ykbT1xC0.crl (hash: +i+Y5Z62isxfupbIaJZfKR9OTvMbQIO585+RrZIPIEU=)
2: G7sgYRFoJFayuqOiJkT4SvmLSC0.roa (hash: s14deS72G3vc/Z7LgUYqSMvuXanb2Xca7svdma5VBoI=)
3: pxS12DAcCwaW3ocjEXURu6Jiigc.roa (hash: ETa0HlY7Y1RquVwxDSRzexuULYuncZkEz0TP+kkZKZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/FyKJy7gXn9846fUyyc1ykbT1xC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/FyKJy7gXn9846fUyyc1ykbT1xC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/FyKJy7gXn9846fUyyc1ykbT1xC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:9a:10:c9:1e:0c:49:29:4c:6a:b4:89:ef:e7:bc:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=172289cbb8179fdf38e9f532c9cd7291b4f5c42d
Validity
Not Before: Apr 17 18:00:35 2026 GMT
Not After : Apr 18 18:00:35 2026 GMT
Subject: CN=e8d13d9ddeca4e6f6fe2770ae7ce016fc27c2301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:c3:d5:4e:c6:b9:7f:6c:30:62:f9:50:ed:a1:
14:fc:ab:70:60:61:dc:cc:f9:37:62:16:d7:a0:4a:
ff:4b:52:ad:bc:62:b1:ac:c7:2c:95:fb:71:36:1a:
e8:86:73:4f:75:64:2d:26:95:ea:9e:4d:83:5a:80:
d6:a9:b2:f8:48:48:56:58:5e:1b:cd:90:c5:ca:ef:
0d:75:6b:d3:10:90:01:df:27:58:3d:ac:7a:e7:12:
23:ad:83:a1:7a:64:ed:74:a2:a6:53:70:dc:27:35:
37:f1:35:ba:d8:4b:49:fc:a2:90:3c:24:af:54:87:
d5:8d:a1:57:0d:a6:2b:18:a5:16:0e:46:88:03:fb:
50:1f:3e:1d:20:d7:58:b3:57:0d:07:63:f2:e3:be:
37:d2:b6:ac:95:72:fb:dd:01:18:ed:bf:68:6f:37:
58:e7:b2:54:0e:35:2b:6c:03:f5:9b:de:d8:96:54:
91:b5:60:c5:ec:85:af:19:33:35:76:3d:7f:51:e6:
f3:e5:66:f4:ed:d2:29:60:c0:54:c3:37:95:6f:47:
04:7c:ed:bc:ce:1e:7c:d5:77:0e:06:9f:68:de:1a:
c5:5f:58:d2:d5:6c:f9:43:39:9b:54:f8:fd:74:6d:
ae:b6:e6:f2:ce:37:a3:fb:38:3c:40:50:1c:00:8d:
b9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:D1:3D:9D:DE:CA:4E:6F:6F:E2:77:0A:E7:CE:01:6F:C2:7C:23:01
X509v3 Authority Key Identifier:
keyid:17:22:89:CB:B8:17:9F:DF:38:E9:F5:32:C9:CD:72:91:B4:F5:C4:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyKJy7gXn9846fUyyc1ykbT1xC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/FyKJy7gXn9846fUyyc1ykbT1xC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/FyKJy7gXn9846fUyyc1ykbT1xC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:03:13:d1:ce:84:53:52:38:d6:78:27:03:34:6c:d5:0f:9d:
1d:d6:1f:41:46:f9:39:ec:fe:93:00:48:4e:bb:8a:08:6d:8d:
a1:0f:79:41:e1:a2:ab:eb:99:51:e8:c4:72:5a:fc:cc:6e:30:
b9:04:89:20:2d:e5:ff:86:56:b7:f6:55:3f:f4:cf:b7:e1:2c:
ea:ac:7d:74:eb:0e:a6:20:6a:5f:62:96:99:b0:f8:b6:cf:ac:
a8:dd:59:b0:06:dc:a7:56:09:2e:ce:29:cf:48:e7:ba:3d:7a:
04:79:ae:75:14:c6:c9:0f:37:c8:85:76:87:ef:75:61:58:d2:
c8:8d:f4:64:da:b9:44:de:e7:f5:b2:56:e1:5f:df:96:34:fa:
19:98:2c:e0:b3:f3:45:40:bb:bc:30:d0:c2:2b:58:99:03:a0:
79:78:ac:c2:60:02:40:e0:c5:2b:9a:db:a2:52:16:91:3f:a8:
75:f9:75:52:1b:6f:56:e3:df:78:f7:4b:d2:6a:fc:60:fa:48:
a7:3e:8f:c4:6e:24:a5:cf:31:78:f9:85:cc:9f:69:89:ca:56:
07:72:36:31:03:e6:b5:33:a0:8c:67:50:f5:79:e2:39:e4:78:
17:1f:5a:f3:ae:e5:37:0a:7b:11:f2:17:20:5a:f0:ac:19:4b:
9b:54:b4:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:03:19 2026 by rpki-client