Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.mft
File: FyLpZ4-w1BTS3fvSQgxMdIJj80s.mft (raw, json)
Hash identifier: XdRDyyIz2qyLxlxP0Z9+qhBRzvK+1SErSsz+eeR1SGg=
Subject key identifier: 4B:F4:5C:C3:4C:26:B4:9F:19:77:00:93:9A:A2:67:F0:54:74:E8:05
Authority key identifier: 17:22:E9:67:8F:B0:D4:14:D2:DD:FB:D2:42:0C:4C:74:82:63:F3:4B
Certificate issuer: /CN=1722e9678fb0d414d2ddfbd2420c4c748263f34b
Certificate serial: 019D3866384BAC1A83FF7F077495E44EC4C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FyLpZ4-w1BTS3fvSQgxMdIJj80s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.mft
Manifest number: 1103
Signing time: Sun 29 Mar 2026 07:01:56 +0000
Manifest this update: Sun 29 Mar 2026 07:01:56 +0000
Manifest next update: Mon 30 Mar 2026 07:01:56 +0000
Files and hashes: 1: 12e7WnFZjJg5d5fvA7KK7iZMkcY.roa (hash: X98CVhIUdgJwE//yVec86D5pD0Tnuzv1MB8J4RaBu5M=)
2: FyLpZ4-w1BTS3fvSQgxMdIJj80s.crl (hash: AN3ODi6ThB/mi/tfxJK5DpR+8qLGiWCfr23uWKwUJUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.mft
rsync://rpki.ripe.net/repository/DEFAULT/FyLpZ4-w1BTS3fvSQgxMdIJj80s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:38:4b:ac:1a:83:ff:7f:07:74:95:e4:4e:c4:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1722e9678fb0d414d2ddfbd2420c4c748263f34b
Validity
Not Before: Mar 29 07:01:56 2026 GMT
Not After : Mar 30 07:01:56 2026 GMT
Subject: CN=4bf45cc34c26b49f197700939aa267f05474e805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:25:da:03:5b:8a:75:f5:97:70:36:43:af:d6:
f1:88:19:f7:ab:7f:61:22:ce:1b:b9:2f:cc:17:d8:
e2:b6:c7:e5:a4:56:12:f9:30:6e:ca:40:33:cd:09:
7a:e7:82:8b:d6:74:3b:fa:8e:be:5e:09:d3:e6:04:
1b:92:54:31:5b:79:f6:1e:bf:d9:14:f7:dc:b8:cb:
43:ad:83:d3:f1:ed:b2:a4:06:35:c8:b0:91:f3:5b:
ba:38:73:95:3a:4b:e5:13:ef:ba:59:b9:49:2c:5f:
07:8f:a5:21:51:b5:9c:8c:63:9e:28:fe:8a:ea:f1:
e6:5b:66:f0:0b:32:3d:45:ce:3b:26:eb:71:bf:db:
3e:19:24:89:3b:ec:a5:60:f5:a7:c6:13:cc:f2:dc:
16:6e:82:63:ef:01:8b:54:fa:49:0c:a8:a7:33:6b:
24:c4:9a:69:4f:b1:49:2e:2d:4a:fb:47:6c:c6:94:
11:d2:ea:65:f4:02:18:eb:4a:5b:29:07:80:4c:77:
16:7d:d6:f3:09:f2:f9:da:74:37:58:42:ab:2d:7a:
17:84:12:dd:d2:b4:22:2b:02:68:ef:4b:50:f7:f4:
6e:90:41:33:13:78:69:03:ef:14:07:1b:c9:0c:bf:
93:ed:89:45:91:78:04:51:69:8d:43:7f:a6:e5:f2:
2b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F4:5C:C3:4C:26:B4:9F:19:77:00:93:9A:A2:67:F0:54:74:E8:05
X509v3 Authority Key Identifier:
keyid:17:22:E9:67:8F:B0:D4:14:D2:DD:FB:D2:42:0C:4C:74:82:63:F3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyLpZ4-w1BTS3fvSQgxMdIJj80s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:08:35:ab:b0:e0:92:55:3e:e6:82:06:80:55:aa:cd:d6:83:
2d:5f:14:7a:2f:31:22:5e:6b:25:1a:cf:2c:43:5a:1c:40:09:
c8:3d:2d:4f:6b:29:7f:47:21:83:0b:74:74:87:9a:3a:00:59:
4b:62:99:29:de:d3:e4:06:7b:b9:20:6e:dc:35:4f:4b:1f:ff:
7c:80:1a:ce:9d:9e:9c:49:7b:71:d2:77:ed:6f:3e:8e:2b:83:
d6:40:b4:f9:d9:01:03:8d:b9:2a:86:1e:58:f5:f3:09:fa:b9:
e2:ca:65:87:e6:ca:f7:de:ee:f1:ea:05:89:a0:05:1b:87:ab:
e9:6a:32:13:a5:a1:9e:de:ae:0b:8c:fe:56:f3:fc:83:7a:52:
09:a6:de:8c:8d:be:e4:a3:3b:0a:82:ac:53:4f:9a:8a:42:2c:
cc:9f:0f:4e:5f:3d:18:eb:63:ba:02:12:f5:60:5d:26:26:88:
95:b3:a0:ca:dd:a4:8c:a7:01:28:64:4b:47:42:a0:3c:5e:ed:
e7:8d:d9:f7:57:6c:f8:68:64:cd:33:aa:3d:d6:90:fb:08:1b:
9f:8d:52:1f:34:ba:6d:88:fa:81:23:c3:ba:29:da:ee:79:69:
de:58:4f:2f:42:a1:a9:f4:83:de:c3:fb:e9:82:d8:95:f5:07:
8e:5d:14:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:00:06 2026 by rpki-client