Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
File: flyFKPgXh8SJxUqZODkmn1prH5Q.mft (raw, json)
Hash identifier: hGw/7bqOxEyruyeX4aX6Dtmhy3K2/gs/yYRUtL6+WCs=
Subject key identifier: 74:1E:77:90:56:2D:CE:FD:F5:AC:FC:7E:B3:8A:44:6F:BC:9F:2B:16
Authority key identifier: 7E:5C:85:28:F8:17:87:C4:89:C5:4A:99:38:39:26:9F:5A:6B:1F:94
Certificate issuer: /CN=7e5c8528f81787c489c54a993839269f5a6b1f94
Certificate serial: 019D99627F3CC96289887826ED3B89A4A68A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flyFKPgXh8SJxUqZODkmn1prH5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 03:01:02 +0000
Manifest this update: Fri 17 Apr 2026 03:01:02 +0000
Manifest next update: Sat 18 Apr 2026 03:01:02 +0000
Files and hashes: 1: 3VErUqcZv3DSzuiOHFJ4NhVe-Sk.roa (hash: BPPxG6OZWKRPZ5HBoMHDDf4oiJwnIpeguHXGGr8zBaE=)
2: ADyxeKRZORLqwi8LQj6fHp5wGLo.roa (hash: KI7QNZ1tpSlDspBRe6V1C2CDD2eifh8F15Hlgzqa5Lo=)
3: flyFKPgXh8SJxUqZODkmn1prH5Q.crl (hash: BnkfIMI/9aK8ZbqWMvLitKdMn/4qXT7+EXtkDzd/sAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/flyFKPgXh8SJxUqZODkmn1prH5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:7f:3c:c9:62:89:88:78:26:ed:3b:89:a4:a6:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e5c8528f81787c489c54a993839269f5a6b1f94
Validity
Not Before: Apr 17 03:01:02 2026 GMT
Not After : Apr 18 03:01:02 2026 GMT
Subject: CN=741e7790562dcefdf5acfc7eb38a446fbc9f2b16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:a4:7c:df:3b:49:9c:14:b5:a1:72:3a:f6:e8:
c1:ff:9a:ae:ea:ae:00:47:1d:e9:08:49:ae:9b:eb:
90:b2:b9:1c:a1:ee:78:31:7a:32:2b:2d:83:21:9f:
49:5d:82:c2:9d:95:ee:52:12:91:81:5e:35:21:04:
f6:e0:e3:64:56:6f:66:2c:eb:48:66:b5:a7:46:32:
64:3a:52:98:72:53:17:8b:3e:6a:d7:c7:e1:04:9b:
31:93:d2:4d:ba:40:fc:50:3b:e6:5f:15:7a:ad:fc:
6c:f9:12:94:0e:5b:a5:ad:c5:ac:fb:9e:07:ff:ce:
98:fa:21:34:20:35:1c:8b:b1:b7:c6:f3:2c:7f:74:
ae:34:ac:10:86:2a:4f:70:41:df:e9:37:20:8c:3b:
d2:55:f6:a2:51:45:80:00:dc:6d:63:ac:0c:18:3d:
59:3a:89:9c:ab:31:0a:5e:87:8f:e6:63:47:b2:db:
d7:f4:09:ff:ac:c3:fa:46:fe:a6:f1:58:7b:77:41:
c5:b3:ea:9e:5c:b6:38:f5:18:25:74:60:34:19:51:
84:b4:20:86:91:08:19:8d:87:de:ea:11:9b:26:4f:
2f:5b:69:38:2e:5a:cc:99:c3:6c:38:3e:26:4a:46:
fc:ef:c7:00:89:05:a9:e0:d3:74:62:5b:93:a7:53:
08:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:1E:77:90:56:2D:CE:FD:F5:AC:FC:7E:B3:8A:44:6F:BC:9F:2B:16
X509v3 Authority Key Identifier:
keyid:7E:5C:85:28:F8:17:87:C4:89:C5:4A:99:38:39:26:9F:5A:6B:1F:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flyFKPgXh8SJxUqZODkmn1prH5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:b3:4b:0a:ce:48:8f:3a:51:44:6b:c5:02:19:9b:98:59:ed:
b2:45:d6:b6:42:78:e2:17:6f:c5:27:01:59:16:31:cc:b0:fd:
54:b6:fd:96:ef:4f:36:50:58:bd:90:a7:5c:c2:a5:2b:ed:66:
c5:50:bd:a3:34:6c:f9:ae:e5:e7:46:66:6a:63:b0:bd:93:25:
d2:58:a8:50:8a:99:0b:01:b6:b7:93:42:d6:55:9c:ac:95:82:
ae:c5:51:d6:97:4a:0c:b4:73:31:e2:17:8c:2b:ad:6e:8c:1d:
ff:48:3c:b7:5a:de:59:87:c7:c8:36:35:e5:37:87:65:49:22:
cf:ae:30:36:5a:a5:eb:6a:fa:c0:e3:5c:4a:c1:b6:48:9a:67:
6f:f7:2c:9d:de:70:a0:2e:25:8f:c8:fc:a9:f4:00:10:d1:58:
9c:c9:0f:ca:6e:20:99:36:79:a5:aa:18:37:d0:2f:97:ae:88:
11:94:98:04:11:f4:42:2b:94:53:5a:10:1f:93:d2:e4:3a:e1:
07:61:c5:20:e3:87:0d:98:95:13:7e:54:97:00:0d:2f:33:f0:
89:17:c9:21:dc:9e:12:fc:75:1c:da:a3:9b:ba:86:2e:1a:0d:
08:07:d2:fa:2c:7a:48:6c:cb:1d:1a:f4:02:d5:d7:23:0c:fd:
2f:09:6a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:39:18 2026 by rpki-client