Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.mft
File: Fl-tQQkoOzO287pT-ug6FF0ZNOI.mft (raw, json)
Hash identifier: KMBfcCnwAzqEn3LUjzIUw6tzQyB+PnvpgDs0kVmzwpc=
Subject key identifier: 32:6D:1A:9F:EE:C0:98:0E:2E:EB:64:26:A9:03:E4:89:A8:CD:C5:E3
Authority key identifier: 16:5F:AD:41:09:28:3B:33:B6:F3:BA:53:FA:E8:3A:14:5D:19:34:E2
Certificate issuer: /CN=165fad4109283b33b6f3ba53fae83a145d1934e2
Certificate serial: 019D98F4D4055CAD40B432C483402ADDF915
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fl-tQQkoOzO287pT-ug6FF0ZNOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.mft
Manifest number: 05CB
Signing time: Fri 17 Apr 2026 01:01:14 +0000
Manifest this update: Fri 17 Apr 2026 01:01:14 +0000
Manifest next update: Sat 18 Apr 2026 01:01:14 +0000
Files and hashes: 1: 9bJWHvsD-dqBntAB20zO9CBt_Wc.roa (hash: 0W6NRPv1Nxc5Zsqyro6dwCeLDZh0yMAr5QQPzv2LCsU=)
2: Fl-tQQkoOzO287pT-ug6FF0ZNOI.crl (hash: /Y4RrB8L5hn47nO8m93mGtF946LZsDpV4EReLC5UH3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fl-tQQkoOzO287pT-ug6FF0ZNOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:d4:05:5c:ad:40:b4:32:c4:83:40:2a:dd:f9:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=165fad4109283b33b6f3ba53fae83a145d1934e2
Validity
Not Before: Apr 17 01:01:14 2026 GMT
Not After : Apr 18 01:01:14 2026 GMT
Subject: CN=326d1a9feec0980e2eeb6426a903e489a8cdc5e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6b:e8:ae:42:ac:b0:2a:6c:12:bf:c5:6e:e9:
3a:6c:10:87:7b:cc:7b:6d:39:c3:c7:65:08:b6:79:
55:a7:95:e2:54:a0:5b:fa:49:35:20:26:de:33:36:
c6:03:06:f3:14:11:dc:c0:fa:e4:e2:30:aa:4d:b5:
c7:4a:e6:d6:f5:2f:78:70:e1:e6:b7:5b:77:32:f1:
1c:7b:29:2f:01:46:71:75:a7:9a:b8:59:e3:e1:f7:
dd:0e:b1:94:73:67:a3:2c:c5:fc:76:15:98:90:ce:
19:54:41:a6:1b:93:cd:bd:47:00:93:3a:f2:4f:c6:
59:7e:d1:9f:c3:43:c3:2d:6e:3b:44:36:c5:b5:5b:
76:97:4a:b2:2c:d4:25:8a:ef:17:ba:75:01:25:5e:
b0:d0:e4:f8:89:3f:88:f5:bb:5c:54:64:9a:2c:c8:
f6:78:4b:9e:1f:ca:85:4b:a6:b9:31:0b:67:4f:68:
02:db:04:4c:74:f0:0c:ee:00:db:4d:44:3d:0d:14:
17:74:f2:f1:b2:fc:ed:fd:93:47:a3:b5:30:75:02:
09:8b:56:c3:b7:7d:5c:36:d8:46:c7:46:6c:a8:1d:
c9:a8:ee:1a:c5:48:ac:02:4e:55:da:b9:b3:a0:cc:
b6:49:a5:a6:54:a1:97:45:67:fe:78:7f:e1:db:37:
77:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:6D:1A:9F:EE:C0:98:0E:2E:EB:64:26:A9:03:E4:89:A8:CD:C5:E3
X509v3 Authority Key Identifier:
keyid:16:5F:AD:41:09:28:3B:33:B6:F3:BA:53:FA:E8:3A:14:5D:19:34:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fl-tQQkoOzO287pT-ug6FF0ZNOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:bd:7f:b1:e5:51:fb:b1:03:68:11:0b:c7:d4:51:a0:45:a4:
ea:80:51:8b:24:cd:5f:00:ac:9f:8c:50:78:6c:50:fb:d3:0f:
77:f8:02:79:28:ec:d5:d9:fe:bc:06:ed:67:4e:9f:41:5d:ab:
fb:0d:99:51:68:25:93:7c:da:6b:a7:b8:2a:93:da:c4:12:f2:
ac:46:ca:57:4e:45:55:0b:4e:d0:39:49:05:8d:fb:ff:9d:b8:
e7:0a:5e:87:37:fb:46:30:21:e2:bf:09:24:97:2d:98:68:b8:
c2:b8:49:ee:76:f1:90:1f:c1:b8:23:18:69:78:9e:39:c6:d4:
ec:f1:62:a8:1c:53:ab:75:61:55:8a:2e:ec:86:c8:f1:dc:ad:
e9:a5:04:a8:02:8e:cd:ae:59:78:8e:1a:53:a0:5e:db:4d:fd:
3a:79:79:cd:ff:59:bd:3c:51:e8:aa:52:15:43:2c:1a:19:f5:
80:1f:60:5e:c3:60:75:5b:17:ee:48:95:8a:e3:ea:50:94:09:
77:8c:40:11:70:cb:5e:fa:7c:35:30:d7:97:5c:5e:46:5b:2f:
38:0a:c4:6e:3b:21:76:cf:67:57:04:42:bf:7d:0f:09:77:ad:
26:98:b1:59:d4:f8:45:76:48:15:e7:0c:b8:c8:e4:1d:c0:21:
71:72:a4:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:48:05 2026 by rpki-client