Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/FyKJy7gXn9846fUyyc1ykbT1xC0.mft
File: FyKJy7gXn9846fUyyc1ykbT1xC0.mft (raw, json)
Hash identifier: Wcro7zba7vzEUwP2iCzV0Lwt+FB04Plq1bixE5G5aPE=
Subject key identifier: 50:5C:1B:B7:1B:5C:E0:A7:88:6E:B2:FE:70:18:F9:DF:84:18:DC:BF
Authority key identifier: 17:22:89:CB:B8:17:9F:DF:38:E9:F5:32:C9:CD:72:91:B4:F5:C4:2D
Certificate issuer: /CN=172289cbb8179fdf38e9f532c9cd7291b4f5c42d
Certificate serial: 019CAD229EAA46DED280C027DEE4D7F430AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FyKJy7gXn9846fUyyc1ykbT1xC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/FyKJy7gXn9846fUyyc1ykbT1xC0.mft
Manifest number: 0E37
Signing time: Mon 02 Mar 2026 06:00:53 +0000
Manifest this update: Mon 02 Mar 2026 06:00:53 +0000
Manifest next update: Tue 03 Mar 2026 06:00:53 +0000
Files and hashes: 1: FyKJy7gXn9846fUyyc1ykbT1xC0.crl (hash: Dun148TZPAi1jjlnZIqbSMEeknEcQr+lIUc6i93NQ8E=)
2: G7sgYRFoJFayuqOiJkT4SvmLSC0.roa (hash: s14deS72G3vc/Z7LgUYqSMvuXanb2Xca7svdma5VBoI=)
3: pxS12DAcCwaW3ocjEXURu6Jiigc.roa (hash: ETa0HlY7Y1RquVwxDSRzexuULYuncZkEz0TP+kkZKZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/FyKJy7gXn9846fUyyc1ykbT1xC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/FyKJy7gXn9846fUyyc1ykbT1xC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/FyKJy7gXn9846fUyyc1ykbT1xC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:9e:aa:46:de:d2:80:c0:27:de:e4:d7:f4:30:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=172289cbb8179fdf38e9f532c9cd7291b4f5c42d
Validity
Not Before: Mar 2 06:00:53 2026 GMT
Not After : Mar 3 06:00:53 2026 GMT
Subject: CN=505c1bb71b5ce0a7886eb2fe7018f9df8418dcbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6b:d5:68:c4:32:5d:cc:cd:3c:b0:2a:a9:43:
56:7a:ac:55:ca:b5:f0:9d:68:7b:61:8f:74:fa:14:
9c:b0:83:6a:1f:d7:20:f6:94:24:b0:02:9a:15:c5:
6c:fb:11:66:bc:82:1b:88:d9:4e:8e:15:ed:6d:08:
cd:4c:fd:4f:2a:8d:f1:64:0c:6c:ee:2f:c2:b4:c7:
a7:37:35:38:02:56:fd:82:b4:6f:99:39:d2:dc:7d:
db:ff:37:89:48:06:8a:30:85:e3:89:c5:d7:69:b5:
a5:87:f1:8b:99:a8:f7:71:d8:78:0a:91:f6:9a:73:
5b:31:d3:11:7e:8e:3c:c2:27:65:95:5e:d3:de:d0:
e1:bb:98:f3:de:f0:21:a8:68:6a:6c:e3:d8:3d:cf:
0a:6b:1f:a3:82:60:27:d5:68:59:9a:21:3e:13:dc:
ab:8e:0c:ca:a2:93:51:46:66:d6:d0:91:1c:ac:a8:
c7:fd:30:7e:ca:af:d3:88:4c:7d:f1:bf:34:8f:18:
e7:f6:e3:df:42:2b:67:28:59:ec:23:84:cc:bf:c8:
d5:e1:ed:4e:90:b9:63:dc:3f:b2:a4:33:02:85:9b:
6e:b8:25:ff:34:37:13:d2:eb:b7:9d:6b:bf:9e:65:
d2:be:41:6e:f4:fd:89:0a:7a:ae:10:56:8a:3c:93:
61:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:5C:1B:B7:1B:5C:E0:A7:88:6E:B2:FE:70:18:F9:DF:84:18:DC:BF
X509v3 Authority Key Identifier:
keyid:17:22:89:CB:B8:17:9F:DF:38:E9:F5:32:C9:CD:72:91:B4:F5:C4:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyKJy7gXn9846fUyyc1ykbT1xC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/FyKJy7gXn9846fUyyc1ykbT1xC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/FyKJy7gXn9846fUyyc1ykbT1xC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:73:32:61:01:31:8a:e5:08:c6:3a:f1:cf:24:76:2c:ba:49:
4f:c0:f3:6a:ab:f3:f2:dd:e6:01:94:32:8f:3f:4b:a5:6b:2e:
a0:18:f3:32:3c:da:ae:98:ac:b8:0a:23:90:0f:cf:d2:53:31:
1a:1c:50:f8:c3:32:50:59:74:fe:65:21:ba:4f:b6:e0:4b:32:
37:d2:07:96:e9:e5:68:b8:4a:d2:f4:e5:00:74:59:8e:1b:60:
af:09:ea:60:23:d6:29:66:6f:13:30:c5:40:69:98:76:a0:02:
25:36:34:37:c4:30:fc:df:f4:a8:81:6a:80:fe:0b:d4:d1:db:
19:15:b4:b6:75:5f:da:de:fa:81:cd:09:de:e2:f4:e7:5e:6f:
ca:79:90:fe:fc:e9:ce:05:d7:61:59:5f:46:8b:6f:63:8c:fa:
9d:84:72:57:64:e1:56:26:75:e1:cf:84:ba:09:5e:2b:6b:f3:
de:08:fc:61:75:44:17:b9:d5:e2:44:71:82:bb:a4:c1:ee:e7:
97:3e:8f:86:a4:3d:c2:6e:35:f6:d0:a9:be:06:85:da:35:fc:
c7:bf:63:24:b9:85:5c:5c:f8:ca:a6:16:42:d0:1d:4d:1e:ab:
48:d6:34:bd:b5:d2:6b:51:fb:cd:e4:b5:ef:0a:e3:ba:17:27:
3e:82:5c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:40:20 2026 by rpki-client