Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
File: FlnrYEAZPfBoE1CQXmOdDljV-d8.mft (raw, json)
Hash identifier: 2akfpjPJy5+OpjUFdxiA++w27FNfiWEQFr1GvUlRH60=
Subject key identifier: F1:8C:1E:2C:11:B4:73:D6:C7:CC:CB:87:50:90:DF:5A:E8:02:BB:28
Authority key identifier: 16:59:EB:60:40:19:3D:F0:68:13:50:90:5E:63:9D:0E:58:D5:F9:DF
Certificate issuer: /CN=1659eb6040193df0681350905e639d0e58d5f9df
Certificate serial: 019F829DFD6BCDD88641D77A7D36CC4FE269
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
Manifest number: 1828
Signing time: Tue 21 Jul 2026 03:00:19 +0000
Manifest this update: Tue 21 Jul 2026 03:00:19 +0000
Manifest next update: Wed 22 Jul 2026 03:00:19 +0000
Files and hashes: 1: Ebw7UmhhiZG_Nrfoble_YWsPVu4.roa (hash: 9BXqjTT23ZUPj2QuWTEKVvPbzIY1hciLXoi7NrQptsU=)
2: FlnrYEAZPfBoE1CQXmOdDljV-d8.crl (hash: ibDSMWW0acuXPSdlJKulpPkL/hB944NSXAEbKgrTNiE=)
3: aKt1IzaRyYfROpZHibRsZ71BdRE.roa (hash: oXZivLJhewPC3l7955mcOzVeeerdPRVG1F9b3jjovao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 03:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:82:9d:fd:6b:cd:d8:86:41:d7:7a:7d:36:cc:4f:e2:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1659eb6040193df0681350905e639d0e58d5f9df
Validity
Not Before: Jul 21 03:00:19 2026 GMT
Not After : Jul 22 03:00:19 2026 GMT
Subject: CN=f18c1e2c11b473d6c7cccb875090df5ae802bb28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:51:bd:80:f0:a7:ff:45:ac:b7:64:b5:3b:fd:
b0:fe:03:7c:2e:c3:8b:58:fa:c4:8b:82:2b:49:39:
62:62:5f:c4:88:6d:e0:6b:11:73:f2:19:64:ec:9b:
68:e0:22:22:b2:0f:16:53:a0:fa:8c:cf:7f:d2:07:
b5:7b:6c:73:68:62:fd:ab:b3:b2:30:b6:0f:f0:6b:
e3:55:8c:b8:70:e0:56:ab:f9:91:a4:73:34:82:b1:
f8:d0:c2:d5:52:74:4c:f6:91:b0:f3:4e:95:2a:16:
de:83:fc:d2:18:ba:86:63:92:42:84:e8:59:80:0c:
05:e1:62:0b:79:99:40:9a:1a:1f:61:38:0a:82:1d:
21:8b:35:d1:b6:e9:f7:91:8e:d2:d6:d2:0f:5a:bb:
e7:a0:3a:4e:09:2c:e3:93:dd:92:d2:f6:63:ca:a0:
d0:4c:83:63:e8:0b:9a:d4:ba:38:1e:ab:fc:bb:47:
13:8a:7d:3c:aa:ed:9f:80:52:84:58:a2:d5:96:83:
e6:19:40:be:d3:15:f8:64:0b:62:69:44:b4:cb:59:
fa:29:e7:41:5c:99:40:26:a3:e3:17:8d:75:de:89:
8e:89:ba:77:50:3b:65:6e:8f:60:bb:f7:58:91:d0:
ab:af:78:0f:4e:05:fb:bc:7f:a7:bb:99:23:4b:05:
26:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:8C:1E:2C:11:B4:73:D6:C7:CC:CB:87:50:90:DF:5A:E8:02:BB:28
X509v3 Authority Key Identifier:
keyid:16:59:EB:60:40:19:3D:F0:68:13:50:90:5E:63:9D:0E:58:D5:F9:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:ff:5b:c2:3b:4e:86:83:b9:50:7b:e9:29:f0:d2:26:f6:6b:
76:84:02:b5:0f:13:54:46:f7:d3:bf:41:6d:26:d4:82:1e:85:
20:e5:eb:18:12:49:6e:c7:d3:b0:67:6e:50:d8:9d:5f:7f:f9:
ac:05:f8:96:c8:0b:50:94:dc:d0:87:ce:78:be:d3:05:57:51:
63:8d:fb:ce:6d:fe:ad:ad:ae:e6:2e:f9:c5:69:a4:56:17:d9:
c6:12:db:87:fc:ea:94:7f:f1:7c:9b:13:72:c5:58:01:e1:33:
c5:62:01:ff:1a:93:67:0e:47:2a:60:95:dc:f8:f9:3b:a8:01:
01:38:e7:6f:1b:10:59:48:a0:cc:8d:be:d9:e1:0a:3a:a4:bb:
93:77:b7:35:68:cf:a6:70:ff:85:9c:87:3c:40:16:95:b5:9d:
26:3d:2c:14:bc:03:7d:25:e1:84:c4:bd:9d:0f:97:61:42:5d:
4b:e0:20:32:6a:89:33:f0:49:da:02:f2:bf:f5:3c:88:2b:36:
0f:ce:f5:86:de:4a:56:3e:17:38:d3:78:f9:86:38:f4:dc:a6:
29:63:7c:a8:c4:23:02:d3:22:27:8c:47:ce:ba:6d:27:8c:5e:
c4:0b:01:f4:44:49:5d:34:3f:9d:7e:b0:82:33:b3:7c:4f:21:
48:31:03:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:13:55 2026 by rpki-client