Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
File: flyFKPgXh8SJxUqZODkmn1prH5Q.mft (raw, json)
Hash identifier: NIvMg0n2O/Fx06eXrDyL0x4jOsi4O0l7hLCJEamyW04=
Subject key identifier: 01:4A:58:DE:5F:68:60:50:58:87:B7:88:B6:C6:49:4B:A0:90:AC:11
Authority key identifier: 7E:5C:85:28:F8:17:87:C4:89:C5:4A:99:38:39:26:9F:5A:6B:1F:94
Certificate issuer: /CN=7e5c8528f81787c489c54a993839269f5a6b1f94
Certificate serial: 019CABD98D581EEAEEDE9EE2A64B218BFAEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flyFKPgXh8SJxUqZODkmn1prH5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 00:01:27 +0000
Manifest this update: Mon 02 Mar 2026 00:01:27 +0000
Manifest next update: Tue 03 Mar 2026 00:01:27 +0000
Files and hashes: 1: 3VErUqcZv3DSzuiOHFJ4NhVe-Sk.roa (hash: BPPxG6OZWKRPZ5HBoMHDDf4oiJwnIpeguHXGGr8zBaE=)
2: ADyxeKRZORLqwi8LQj6fHp5wGLo.roa (hash: KI7QNZ1tpSlDspBRe6V1C2CDD2eifh8F15Hlgzqa5Lo=)
3: flyFKPgXh8SJxUqZODkmn1prH5Q.crl (hash: exQ6bX1ZoHUgPwbgGdi6trzSBcwaYBFyLj+ew7Dg1z8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/flyFKPgXh8SJxUqZODkmn1prH5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:8d:58:1e:ea:ee:de:9e:e2:a6:4b:21:8b:fa:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e5c8528f81787c489c54a993839269f5a6b1f94
Validity
Not Before: Mar 2 00:01:27 2026 GMT
Not After : Mar 3 00:01:27 2026 GMT
Subject: CN=014a58de5f6860505887b788b6c6494ba090ac11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:49:01:7e:06:f7:98:bc:12:c3:f1:00:38:18:
00:0f:54:55:21:93:37:6b:b0:d2:0f:17:43:c5:ee:
01:3a:c4:3f:51:ef:8b:87:dc:d0:b2:8a:ac:c5:b4:
45:a3:25:c4:37:ab:4a:ac:7a:b1:2f:2b:ff:40:72:
43:63:45:23:1b:c3:6b:fd:9f:29:df:30:e6:a7:f1:
03:35:d9:a2:68:f2:c9:96:7c:e3:83:e1:c6:f7:38:
b3:e2:ab:8b:75:51:a6:04:43:e3:55:7e:c2:a8:0c:
18:14:dc:3c:9b:37:4d:ac:98:36:49:1b:33:69:7e:
ae:55:01:8f:16:8c:9a:3c:c7:54:fd:32:8c:ba:35:
96:9a:81:0b:e8:24:57:ab:7a:31:28:72:08:73:a2:
58:88:aa:c6:68:8f:8f:54:5e:c5:95:2f:79:ce:a9:
b4:3e:b8:34:e7:7e:f2:a1:1e:31:67:07:42:89:6d:
3d:37:2d:dd:47:76:e6:30:6e:34:e3:77:e8:ca:56:
f9:8e:9f:17:83:fe:40:f8:b4:56:b0:f4:16:b4:9a:
71:f2:1d:94:f4:50:55:bd:e5:d8:df:94:93:65:38:
db:75:42:28:a1:2b:75:f9:e0:c5:fd:cd:8e:3d:c2:
8e:7c:e6:e5:01:fd:a8:52:46:85:7d:1a:68:d6:e3:
f6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:4A:58:DE:5F:68:60:50:58:87:B7:88:B6:C6:49:4B:A0:90:AC:11
X509v3 Authority Key Identifier:
keyid:7E:5C:85:28:F8:17:87:C4:89:C5:4A:99:38:39:26:9F:5A:6B:1F:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flyFKPgXh8SJxUqZODkmn1prH5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:dd:66:2c:59:11:50:7f:0f:33:c4:05:d3:23:6c:2e:68:12:
3b:ae:6f:54:0a:47:4a:53:68:1c:a6:7d:03:59:b6:4b:26:b2:
b9:68:45:2f:2c:78:00:ea:05:ef:12:7a:ba:c9:5f:7a:9e:39:
b5:14:20:25:20:54:0f:a3:11:5f:6a:d2:74:16:5c:67:19:bb:
21:b9:4a:bf:94:6d:82:20:7e:9a:93:25:ab:f9:55:aa:fc:62:
fb:f9:03:49:7a:92:25:26:e7:07:7f:b1:26:ff:08:77:4b:76:
69:06:da:87:63:a1:6f:10:ee:2f:2b:9f:4d:25:5a:f2:86:1a:
18:09:5b:8a:bf:2e:ce:aa:5a:b1:5c:2a:85:da:bc:2a:f1:b7:
73:8f:a7:80:a6:a3:9b:1d:ed:01:bf:6b:b6:25:25:3b:9f:10:
72:00:61:35:57:72:17:c4:1f:8c:a2:ec:86:fc:53:25:58:a1:
b4:da:79:97:ed:0a:76:cf:20:bf:9b:a0:ca:58:3c:45:9b:4f:
c6:53:1a:b3:d3:d7:02:13:ab:38:75:68:fc:b6:81:bb:fb:d2:
c3:4f:67:b6:4c:cd:18:75:5d:34:75:8b:f7:67:00:f9:d9:bf:
08:3c:ca:d3:95:1f:e6:9f:eb:81:d2:12:dd:19:75:62:a0:04:
05:9a:82:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:04:23 2026 by rpki-client