Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/FyG3YLYPcilRuSUnqC_9Ol6jhFk.mft
File: FyG3YLYPcilRuSUnqC_9Ol6jhFk.mft (raw, json)
Hash identifier: 5STmejva+dY1kvN5hfWNYSNFVyqUo3Nl0f7ohD+nZus=
Subject key identifier: 93:47:0A:2D:1F:02:48:89:4A:94:FA:F7:38:0F:CC:EB:EC:F9:E7:C4
Authority key identifier: 17:21:B7:60:B6:0F:72:29:51:B9:25:27:A8:2F:FD:3A:5E:A3:84:59
Certificate issuer: /CN=1721b760b60f722951b92527a82ffd3a5ea38459
Certificate serial: 019FA82B77908EBED9EFEBCD48F496D16F2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FyG3YLYPcilRuSUnqC_9Ol6jhFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/FyG3YLYPcilRuSUnqC_9Ol6jhFk.mft
Manifest number: 0262
Signing time: Tue 28 Jul 2026 10:00:48 +0000
Manifest this update: Tue 28 Jul 2026 10:00:48 +0000
Manifest next update: Wed 29 Jul 2026 10:00:48 +0000
Files and hashes: 1: FyG3YLYPcilRuSUnqC_9Ol6jhFk.crl (hash: gUkX5WaZ1bu12K8iJYsldZ+2UKVlrFykaVgenhOd23g=)
2: oCNYl0B5qMoFF8XmPK7f1Xws4VI.asa (hash: 8vDowMTHL6DoKrD1U42McYTkIGnu+IPbUjRCF114GTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/FyG3YLYPcilRuSUnqC_9Ol6jhFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/FyG3YLYPcilRuSUnqC_9Ol6jhFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FyG3YLYPcilRuSUnqC_9Ol6jhFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2b:77:90:8e:be:d9:ef:eb:cd:48:f4:96:d1:6f:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1721b760b60f722951b92527a82ffd3a5ea38459
Validity
Not Before: Jul 28 10:00:48 2026 GMT
Not After : Jul 29 10:00:48 2026 GMT
Subject: CN=93470a2d1f0248894a94faf7380fccebecf9e7c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a3:55:ed:44:ca:0b:45:7f:91:f7:7d:52:fa:
12:43:53:6f:41:1c:e7:ea:47:aa:20:e6:31:e2:3d:
7a:30:75:45:9c:f2:aa:d2:36:aa:e6:7f:dd:c3:b5:
bd:aa:9d:8e:52:34:71:60:38:c8:65:40:a6:81:08:
e3:78:6c:16:ee:1b:7a:2a:bc:d9:c7:5d:a7:bc:85:
eb:aa:3e:74:4f:2d:1e:71:4c:a9:86:d1:55:5b:14:
71:94:37:d5:01:c1:9f:d0:e6:c4:ce:e4:d0:4e:fc:
26:c8:fd:70:4f:ea:52:88:ec:32:55:f7:33:28:1c:
29:0e:2f:74:40:f9:5c:e7:92:3c:f9:96:78:ef:b9:
d5:85:e2:ee:25:10:44:d0:da:d0:77:47:3a:4c:88:
4e:91:66:38:7d:17:77:fb:b2:76:0e:8b:ff:ca:e2:
c0:71:14:11:e9:90:d3:57:ac:72:47:2a:e7:e7:bd:
50:df:77:1e:bd:08:ff:bf:69:d8:81:c0:22:d4:3c:
71:12:9b:99:87:2e:aa:43:e1:48:b6:0f:94:1f:1e:
4a:dc:2d:f9:eb:f4:50:87:2a:ce:ff:b7:26:e6:4a:
3c:4c:bd:58:91:cc:eb:5e:c2:2f:f2:1e:4f:55:31:
83:66:a3:7f:aa:ff:70:7a:00:29:78:44:8a:6d:35:
e8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:47:0A:2D:1F:02:48:89:4A:94:FA:F7:38:0F:CC:EB:EC:F9:E7:C4
X509v3 Authority Key Identifier:
keyid:17:21:B7:60:B6:0F:72:29:51:B9:25:27:A8:2F:FD:3A:5E:A3:84:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyG3YLYPcilRuSUnqC_9Ol6jhFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/FyG3YLYPcilRuSUnqC_9Ol6jhFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/FyG3YLYPcilRuSUnqC_9Ol6jhFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:22:9d:4c:01:7a:8a:ff:80:b1:5f:cf:66:1d:28:34:90:0d:
cb:52:c8:2f:c4:13:41:ab:46:ec:78:24:26:53:d6:43:3b:01:
83:b3:f1:fd:a0:9a:14:36:ba:85:da:c3:15:a6:ea:08:c3:33:
57:0e:61:02:af:21:bd:23:ca:98:cf:c4:2d:62:8e:cf:a8:3a:
c1:48:50:08:fa:13:bb:41:5f:be:f8:4e:b0:21:fc:2b:7a:0c:
f4:9a:0e:9d:96:63:22:f4:26:a4:93:55:a4:a3:22:72:5f:53:
69:ca:e7:d0:3a:f3:9e:e4:40:56:0f:c2:33:26:9d:fd:4b:0b:
b9:92:3b:99:9b:bd:73:4e:27:65:23:28:64:54:20:49:52:23:
ff:95:92:bf:e7:3e:33:f1:bc:4c:b4:e1:97:25:94:e0:fd:0c:
0f:9e:f3:19:02:0a:1f:bb:aa:33:3a:2f:78:b9:3d:05:5a:7e:
0d:6a:28:d2:34:8e:15:37:3a:9b:bc:7c:99:8e:21:f7:3a:c3:
ca:ab:ec:3f:c8:1a:52:90:82:3c:f7:06:72:d4:62:89:75:21:
f3:a3:ca:7d:98:9e:b1:90:1b:81:8d:2c:7b:78:8d:b8:62:ad:
d6:dd:8e:27:83:a8:8b:a7:db:78:2d:d8:24:89:ac:78:a0:9f:
96:8d:74:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:53:13 2026 by rpki-client