Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/FyG3YLYPcilRuSUnqC_9Ol6jhFk.mft
File: FyG3YLYPcilRuSUnqC_9Ol6jhFk.mft (raw, json)
Hash identifier: 10CauQVFZP2FK+jfikTJ+D9enbIyukBliCBo4KLHgG4=
Subject key identifier: 46:0C:71:10:39:61:DA:61:52:96:7F:80:3E:DF:39:5B:80:DA:41:BC
Authority key identifier: 17:21:B7:60:B6:0F:72:29:51:B9:25:27:A8:2F:FD:3A:5E:A3:84:59
Certificate issuer: /CN=1721b760b60f722951b92527a82ffd3a5ea38459
Certificate serial: 019CA9B3F5A399848F0202A9D29758113DC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FyG3YLYPcilRuSUnqC_9Ol6jhFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/FyG3YLYPcilRuSUnqC_9Ol6jhFk.mft
Manifest number: D2
Signing time: Sun 01 Mar 2026 14:01:09 +0000
Manifest this update: Sun 01 Mar 2026 14:01:09 +0000
Manifest next update: Mon 02 Mar 2026 14:01:09 +0000
Files and hashes: 1: FyG3YLYPcilRuSUnqC_9Ol6jhFk.crl (hash: Jun+9AWzTA4hKySuEbLTtwB/YT7XLuqg/zpP2cCbWHw=)
2: PRSuuvH26xT5-o54onKQLtr_Yyc.asa (hash: oaFOFjQ9m4CifADB9zFA8Nh1K294y+NsTbFx9uaW4rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/FyG3YLYPcilRuSUnqC_9Ol6jhFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/FyG3YLYPcilRuSUnqC_9Ol6jhFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FyG3YLYPcilRuSUnqC_9Ol6jhFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:f5:a3:99:84:8f:02:02:a9:d2:97:58:11:3d:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1721b760b60f722951b92527a82ffd3a5ea38459
Validity
Not Before: Mar 1 14:01:09 2026 GMT
Not After : Mar 2 14:01:09 2026 GMT
Subject: CN=460c71103961da6152967f803edf395b80da41bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b4:20:2a:38:02:ad:82:b2:39:d4:45:8b:3e:
d2:86:e9:2c:70:f9:42:fa:ba:b5:63:f0:d2:c0:dc:
dc:9b:7c:0d:3e:8d:db:06:4f:43:8a:f6:26:15:aa:
b0:21:71:a6:78:3f:53:c9:6b:df:36:07:55:ed:93:
bf:47:ca:2a:5e:26:cb:69:1f:f5:d5:f3:8f:a7:a2:
b5:2b:db:da:93:2a:e4:cb:09:b8:5f:12:97:a2:32:
ab:0c:a6:17:ce:b2:7b:90:cc:ff:7e:77:0f:8d:0a:
a9:53:f1:f8:7d:57:6a:b9:7a:69:b8:7a:27:8c:f6:
73:7b:18:6c:99:f4:db:60:75:57:6b:80:3e:e5:c1:
17:8f:20:bf:ec:4b:d4:2a:6d:07:a1:e7:68:e2:3e:
8c:38:62:88:96:ff:b6:46:5a:69:ea:ad:b3:fd:b2:
10:9b:72:56:7c:a2:fd:6b:a3:b4:9d:45:39:5c:50:
cf:ca:c7:91:90:a7:f0:e3:23:e1:e2:e2:07:db:30:
45:bd:5b:25:16:f9:33:3f:50:5d:39:f6:cc:90:19:
8b:fc:32:58:bd:fd:f0:f6:42:58:07:9c:50:f9:ac:
61:07:b0:f2:5d:30:b5:2e:58:34:38:90:cf:98:84:
d4:78:6d:b7:ae:fd:49:0f:a0:a8:62:22:ca:7f:cf:
8e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:0C:71:10:39:61:DA:61:52:96:7F:80:3E:DF:39:5B:80:DA:41:BC
X509v3 Authority Key Identifier:
keyid:17:21:B7:60:B6:0F:72:29:51:B9:25:27:A8:2F:FD:3A:5E:A3:84:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyG3YLYPcilRuSUnqC_9Ol6jhFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/FyG3YLYPcilRuSUnqC_9Ol6jhFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/FyG3YLYPcilRuSUnqC_9Ol6jhFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:10:c3:d5:fa:7c:9f:c7:3b:51:76:95:25:c7:b4:d4:b3:98:
55:d9:16:34:42:51:fb:1c:f1:f6:f3:3c:5a:1e:55:52:da:bd:
4b:ae:7f:38:42:ff:be:34:ca:de:e4:f4:bb:8f:25:12:f7:8a:
0d:8d:ea:23:1d:73:a1:0f:7c:c7:f3:28:60:34:79:70:7d:4d:
6d:e2:4a:76:70:8b:fb:54:98:cf:2c:07:45:77:55:ee:c8:e9:
c0:2b:a0:2e:e8:17:7e:48:94:3f:c2:92:67:ba:06:e7:50:ce:
8f:ab:df:cc:11:69:f5:7e:3c:74:9c:24:8c:cf:c5:d8:27:fb:
5b:ef:b3:26:89:a0:f6:b3:90:11:ca:5e:d5:b4:cc:fc:8a:04:
a7:de:ec:48:68:1b:61:6f:43:53:ae:cc:81:a9:8e:b4:01:28:
08:b1:ee:e7:89:88:31:ce:b0:db:45:c4:2b:cc:85:51:34:84:
35:58:03:0b:0d:49:19:96:96:c4:ea:54:3f:bf:5c:18:51:d4:
df:ce:90:cc:af:73:f4:da:ef:5b:20:f7:ee:97:5a:ce:61:40:
8c:58:3d:9c:f5:47:2a:43:eb:40:8f:01:7d:f9:b7:da:7c:af:
9a:36:fb:2c:45:f9:16:43:d5:45:27:2f:d9:20:7a:aa:b2:36:
e6:54:ce:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:24:08 2026 by rpki-client