Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.mft
File: Fl-tQQkoOzO287pT-ug6FF0ZNOI.mft (raw, json)
Hash identifier: Zmi56pLpOEzURvJfLNqxxwS7Dm0NwTeTQQ438Mg0tDs=
Subject key identifier: 42:C4:2C:A9:DD:D0:62:BD:FF:BB:A0:70:16:B5:A3:6F:69:DA:92:36
Authority key identifier: 16:5F:AD:41:09:28:3B:33:B6:F3:BA:53:FA:E8:3A:14:5D:19:34:E2
Certificate issuer: /CN=165fad4109283b33b6f3ba53fae83a145d1934e2
Certificate serial: 01A0DD60B6FDEB60C427A7793B3F08644908
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fl-tQQkoOzO287pT-ug6FF0ZNOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.mft
Manifest number: 077D
Signing time: Sat 26 Sep 2026 11:01:38 +0000
Manifest this update: Sat 26 Sep 2026 11:01:38 +0000
Manifest next update: Sun 27 Sep 2026 11:01:38 +0000
Files and hashes: 1: 9bJWHvsD-dqBntAB20zO9CBt_Wc.roa (hash: 0W6NRPv1Nxc5Zsqyro6dwCeLDZh0yMAr5QQPzv2LCsU=)
2: Fl-tQQkoOzO287pT-ug6FF0ZNOI.crl (hash: Mb38AgG813MjcoD9LrzAVswzwzf2rqt2CgreAr7WqqI=)
3: yPmy2OvPneIoAhLD9gE1TBP3MwA.asa (hash: A9PQOXlu+etQnQ8jd/8UOZro+MQjl0GkxZpOe3jQx6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fl-tQQkoOzO287pT-ug6FF0ZNOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:60:b6:fd:eb:60:c4:27:a7:79:3b:3f:08:64:49:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=165fad4109283b33b6f3ba53fae83a145d1934e2
Validity
Not Before: Sep 26 11:01:38 2026 GMT
Not After : Sep 27 11:01:38 2026 GMT
Subject: CN=42c42ca9ddd062bdffbba07016b5a36f69da9236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a9:78:a7:23:b1:c0:0a:4c:98:7b:2d:e5:a0:
ad:ab:18:1f:f7:bf:97:00:d9:7a:c0:83:c5:f0:4b:
ab:02:9d:33:d1:63:5d:4e:f3:68:2c:b2:1c:69:f8:
db:80:cc:bb:39:3a:63:6d:a0:80:77:ce:38:b0:c6:
28:63:a6:d9:06:19:d3:f8:b3:c6:27:71:f7:8e:37:
7b:da:71:d9:39:ad:e3:eb:3c:05:b2:83:8f:35:4b:
ec:0b:57:05:38:4b:84:08:0e:fb:44:d9:ca:8b:d0:
83:b1:9d:6d:23:c6:6d:c4:d2:cd:e0:57:61:05:3b:
f9:e3:b5:ee:3d:bb:94:5e:49:b1:2a:7f:c1:59:5c:
09:e9:23:15:96:93:2e:f3:e6:fb:9e:7c:02:5b:27:
17:a3:c8:0e:6c:d8:1a:63:90:87:d0:13:f7:c5:4e:
2f:89:a6:c5:dd:32:d0:ae:9b:62:89:ea:fc:1c:17:
d1:f6:fc:bd:bc:47:93:24:be:f1:f7:87:c1:68:19:
aa:05:4c:1a:07:74:0d:81:73:61:99:2a:c4:89:76:
83:21:88:4a:0a:59:42:31:cc:da:71:84:e2:c5:c5:
0d:a5:08:0c:cc:5a:c8:07:bf:bf:64:a1:59:15:45:
ce:e7:d2:42:78:6b:82:34:5c:33:c0:50:07:18:7f:
ed:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C4:2C:A9:DD:D0:62:BD:FF:BB:A0:70:16:B5:A3:6F:69:DA:92:36
X509v3 Authority Key Identifier:
keyid:16:5F:AD:41:09:28:3B:33:B6:F3:BA:53:FA:E8:3A:14:5D:19:34:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fl-tQQkoOzO287pT-ug6FF0ZNOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:fc:ad:13:1c:83:b5:b6:9e:4c:1a:f4:ba:4d:5f:df:85:44:
a6:5f:3f:9e:cc:98:d6:e6:0b:71:f7:81:fb:b4:a1:b3:84:53:
2d:f5:3a:34:2d:f5:eb:21:61:e2:11:f8:15:5c:46:be:ad:90:
ad:f6:ba:3a:83:6f:b2:9e:b9:70:44:4e:eb:88:c2:c8:d9:35:
4e:6f:8e:dd:fd:3b:62:2f:e8:bb:93:5b:31:a3:b2:a6:70:5a:
5a:b8:44:92:ea:11:e8:c9:a7:7a:95:df:2d:2c:c0:bc:f9:61:
ef:63:a8:73:a4:1c:8b:dd:6b:08:e7:58:53:30:97:cb:af:af:
ea:78:70:b1:5e:34:f0:d0:45:4a:5a:b4:68:cb:11:92:2d:c3:
35:19:5d:7d:57:ff:b1:f5:19:b8:56:96:30:75:b2:78:74:47:
16:01:c9:38:b7:ac:a5:b0:ce:f2:b9:3c:d5:47:17:48:fe:7f:
b3:54:f7:82:95:2e:ca:ac:21:ab:23:62:6d:d6:ac:ff:45:12:
d1:63:89:fc:1c:62:06:65:ad:ac:e6:6a:6e:a9:e0:a9:b3:d1:
0c:a6:a3:ae:9c:81:2b:49:6f:a1:06:a8:2a:0e:6d:0b:93:33:
a7:47:fa:e1:e2:ae:83:bf:4f:6b:09:5a:9a:6c:15:48:44:6f:
3c:ed:60:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 17:15:22 2026 by rpki-client