Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/flrIG7zPhS8irI7VLS6S2zHY1gY.mft
File: flrIG7zPhS8irI7VLS6S2zHY1gY.mft (raw, json)
Hash identifier: NkzCBYksFFbamEa3GC4IlyAd3AcH/b1hvrPwcvEmPs0=
Subject key identifier: 54:A2:67:A1:D3:FC:6B:2A:EF:15:F7:AC:3D:5A:A2:86:25:9F:24:45
Authority key identifier: 7E:5A:C8:1B:BC:CF:85:2F:22:AC:8E:D5:2D:2E:92:DB:31:D8:D6:06
Certificate issuer: /CN=7e5ac81bbccf852f22ac8ed52d2e92db31d8d606
Certificate serial: 019D9962C648AC9B276D9303A1B346AD48F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flrIG7zPhS8irI7VLS6S2zHY1gY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/flrIG7zPhS8irI7VLS6S2zHY1gY.mft
Manifest number: 068C
Signing time: Fri 17 Apr 2026 03:01:20 +0000
Manifest this update: Fri 17 Apr 2026 03:01:20 +0000
Manifest next update: Sat 18 Apr 2026 03:01:20 +0000
Files and hashes: 1: 8crzujhFPcFtbV2lWsb3pVCUfzo.roa (hash: eQSvKYDMqkqsiIoj2XOwpx4q3L0IumCSy//x/1LUkR8=)
2: flrIG7zPhS8irI7VLS6S2zHY1gY.crl (hash: j82HWx9Fdxo2wgLA9UrfHT4Nk7N5HP2TbL+JjeI2TTY=)
3: t__6136takHeUvRHDalHrBzgXQY.roa (hash: WD8+WaJGfN5reVo0Qs2GlcEq7iUcR3GPBrBgQRmS4a8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/flrIG7zPhS8irI7VLS6S2zHY1gY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/flrIG7zPhS8irI7VLS6S2zHY1gY.mft
rsync://rpki.ripe.net/repository/DEFAULT/flrIG7zPhS8irI7VLS6S2zHY1gY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:c6:48:ac:9b:27:6d:93:03:a1:b3:46:ad:48:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e5ac81bbccf852f22ac8ed52d2e92db31d8d606
Validity
Not Before: Apr 17 03:01:20 2026 GMT
Not After : Apr 18 03:01:20 2026 GMT
Subject: CN=54a267a1d3fc6b2aef15f7ac3d5aa286259f2445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:00:33:61:fb:35:e5:4c:9f:97:05:06:ce:a1:
44:f6:00:97:d6:4e:d5:49:dc:c4:1d:9e:2a:56:74:
61:fc:6b:09:8b:e5:1e:8c:f9:5f:5d:20:2c:68:29:
6d:73:19:c3:e4:eb:a4:e4:f1:cd:8e:5c:59:30:64:
b8:d6:95:7d:2b:bd:ef:04:e4:5e:9f:a3:85:36:72:
bf:e6:a0:71:3d:7c:38:19:26:f7:06:32:d4:3a:76:
f7:56:71:0a:8c:35:37:58:bb:1c:bc:1e:d8:da:19:
7e:1e:79:ce:49:95:00:44:c0:0d:aa:ae:f4:00:48:
96:22:eb:7e:a3:99:8c:9f:87:07:4f:93:84:0b:bf:
9c:c0:33:1c:6a:d3:92:55:f3:f9:e2:3f:74:aa:74:
c7:a6:5f:e8:a9:6e:54:4c:e4:e2:1c:25:d4:3c:df:
54:95:04:d5:96:9d:39:99:14:00:9d:8e:86:67:ca:
9a:56:00:0b:e0:44:d1:c1:50:e8:9f:01:0c:a1:0e:
1d:ec:05:f6:7e:4b:88:eb:49:70:7c:22:ea:63:f6:
be:31:21:dd:4a:46:e7:c7:68:05:f0:04:33:ad:1a:
ff:f5:ce:4c:a1:28:50:6f:99:a8:21:f3:a4:bd:58:
a8:3c:f3:df:cc:30:ba:09:b5:8b:91:46:ae:c4:60:
44:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:A2:67:A1:D3:FC:6B:2A:EF:15:F7:AC:3D:5A:A2:86:25:9F:24:45
X509v3 Authority Key Identifier:
keyid:7E:5A:C8:1B:BC:CF:85:2F:22:AC:8E:D5:2D:2E:92:DB:31:D8:D6:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flrIG7zPhS8irI7VLS6S2zHY1gY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/flrIG7zPhS8irI7VLS6S2zHY1gY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/flrIG7zPhS8irI7VLS6S2zHY1gY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:d1:b0:d7:eb:b4:59:dc:40:f1:cc:40:e5:27:df:0f:73:6d:
78:f8:a4:2e:96:44:2b:22:3e:62:ff:ae:7d:96:f5:18:65:1b:
e0:f5:13:43:ae:25:ee:2c:7f:2f:5d:09:30:25:26:75:65:7c:
91:03:28:34:50:4b:5d:90:20:d4:46:64:85:6d:3d:c6:1f:56:
90:88:c4:f1:7e:a0:71:03:a1:a5:10:24:ef:72:3f:d8:1c:31:
17:bd:19:a8:58:5c:21:ee:20:72:ed:5a:5c:c6:49:89:ed:44:
a9:ef:35:f4:3c:24:3b:79:3c:80:d9:58:34:b0:b4:55:3f:7f:
1e:37:30:b7:48:9c:e7:c6:1b:4c:be:65:9b:7f:70:32:b1:2a:
d8:e5:4c:ca:b5:5e:a0:3c:09:4a:58:48:b7:9a:d7:06:bb:68:
35:90:c0:82:c5:41:d5:25:8c:b9:26:a0:63:0a:aa:3f:31:c1:
dd:1f:47:77:43:e0:5e:60:b6:f5:dd:55:b1:54:bd:c7:91:1d:
38:80:3f:03:15:37:52:db:2d:a4:0e:fe:7f:4a:db:cd:07:0a:
f2:a2:f3:db:ad:4c:f3:63:c8:36:51:af:cc:46:8b:49:51:7f:
f4:72:a3:84:66:4b:af:28:f9:c2:c3:37:ea:fc:3f:2c:db:f5:
e0:a9:b9:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:12:51 2026 by rpki-client