Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.mft
File: Fl-tQQkoOzO287pT-ug6FF0ZNOI.mft (raw, json)
Hash identifier: VXDMeClOn6nlqSepz0aLJJFHn+C9giBqOVbnWbXRjCM=
Subject key identifier: 48:01:08:1F:FC:38:38:74:D8:D8:BD:E3:9E:F6:E5:3F:27:58:BD:CF
Authority key identifier: 16:5F:AD:41:09:28:3B:33:B6:F3:BA:53:FA:E8:3A:14:5D:19:34:E2
Certificate issuer: /CN=165fad4109283b33b6f3ba53fae83a145d1934e2
Certificate serial: 019FA8622FA992BD58D742DC41C8FA391996
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fl-tQQkoOzO287pT-ug6FF0ZNOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.mft
Manifest number: 06DD
Signing time: Tue 28 Jul 2026 11:00:34 +0000
Manifest this update: Tue 28 Jul 2026 11:00:34 +0000
Manifest next update: Wed 29 Jul 2026 11:00:34 +0000
Files and hashes: 1: 9bJWHvsD-dqBntAB20zO9CBt_Wc.roa (hash: 0W6NRPv1Nxc5Zsqyro6dwCeLDZh0yMAr5QQPzv2LCsU=)
2: Fl-tQQkoOzO287pT-ug6FF0ZNOI.crl (hash: 4VDNmlKzpwBKbKXT/P7llWWjbd/GRlxqS8Q9fUxiHKg=)
3: yPmy2OvPneIoAhLD9gE1TBP3MwA.asa (hash: A9PQOXlu+etQnQ8jd/8UOZro+MQjl0GkxZpOe3jQx6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fl-tQQkoOzO287pT-ug6FF0ZNOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:62:2f:a9:92:bd:58:d7:42:dc:41:c8:fa:39:19:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=165fad4109283b33b6f3ba53fae83a145d1934e2
Validity
Not Before: Jul 28 11:00:34 2026 GMT
Not After : Jul 29 11:00:34 2026 GMT
Subject: CN=4801081ffc383874d8d8bde39ef6e53f2758bdcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7b:1b:d2:26:4c:eb:cc:5c:fe:67:6a:63:2a:
4d:e5:1d:71:91:3e:85:b3:86:dd:e8:75:0f:35:9b:
9a:a4:37:5a:27:fb:f7:a4:a4:0f:5d:20:7c:11:40:
23:06:4c:94:b8:61:a1:11:12:65:f4:3f:17:20:31:
85:7b:a7:aa:f6:d0:70:a9:75:35:f8:07:70:09:c8:
0a:f1:d5:e4:58:02:0b:17:d6:5e:2b:70:19:f1:61:
2c:97:13:b6:bb:9f:13:4f:94:b8:ab:5f:a1:31:1e:
50:46:74:48:c3:73:7a:82:ac:20:92:65:2a:b7:f7:
c4:6a:3c:98:07:d2:54:c5:32:f5:d4:0e:a0:f8:cf:
0b:34:21:5b:61:6e:b3:d6:bb:85:f2:df:f7:e2:96:
cb:d8:3f:2a:6d:e5:b4:ed:34:5b:bc:9a:09:d9:e8:
12:8b:4c:65:ca:07:24:ee:c1:f8:57:a3:7d:93:b8:
2a:02:d1:3b:85:0e:79:62:d6:7b:29:cf:77:cf:2c:
1d:92:29:84:e1:bc:10:69:ab:8e:f8:65:32:11:8c:
9b:8f:ae:42:d9:7a:b6:16:33:50:ab:e3:02:2e:9d:
ef:cb:8b:58:0f:75:bd:05:f3:33:b4:c0:07:df:54:
49:8b:43:82:71:3c:56:78:f0:cc:95:cd:3e:37:79:
43:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:01:08:1F:FC:38:38:74:D8:D8:BD:E3:9E:F6:E5:3F:27:58:BD:CF
X509v3 Authority Key Identifier:
keyid:16:5F:AD:41:09:28:3B:33:B6:F3:BA:53:FA:E8:3A:14:5D:19:34:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fl-tQQkoOzO287pT-ug6FF0ZNOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:10:37:0e:86:31:47:ec:69:b2:ac:48:62:31:ae:e3:4d:87:
3a:1d:13:62:6f:4b:6b:45:c8:6e:76:49:0f:0a:f3:59:90:bc:
b2:32:c4:b0:38:36:05:a7:ca:4f:58:de:be:92:8c:4f:44:96:
30:cc:66:0a:e0:8c:c7:de:04:4a:41:c5:61:89:2b:dd:7b:6a:
89:07:4c:d7:0a:84:55:85:fb:1d:5f:e7:28:4c:e2:df:32:67:
6f:2b:fe:f3:2e:67:87:54:79:ea:7c:9c:a1:79:d2:60:2d:a1:
57:27:01:e4:9c:7c:64:cc:0e:ee:f5:cc:51:b8:22:87:55:e5:
4c:b4:38:7f:bb:c6:31:53:89:dc:db:29:fd:a9:0e:14:00:b4:
d4:b6:7f:92:6c:53:7d:51:ef:08:09:24:b3:c8:55:ca:c4:f7:
e6:06:e8:fc:44:48:d0:1e:94:6a:c4:35:1e:7e:12:d5:5e:c8:
ef:8b:de:de:f0:ac:9c:0b:19:e5:f1:27:c3:95:62:b1:a4:68:
80:3f:2e:9e:5b:66:0e:62:75:89:b6:66:b6:46:c9:45:ad:ca:
ee:64:cd:e3:06:36:ae:8c:f0:91:04:e5:d0:82:43:b7:ec:ad:
61:1f:9d:39:5a:1b:34:39:69:48:05:5a:d5:0c:af:52:6d:dc:
b0:06:5f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:49:11 2026 by rpki-client