Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
File: FlnrYEAZPfBoE1CQXmOdDljV-d8.mft (raw, json)
Hash identifier: 6llY0yrscq5bprnYTdWGO4Pomyfz7AN5eSbroOCHM70=
Subject key identifier: 18:34:9C:AE:0C:BB:C4:A5:44:A8:19:F7:FE:34:79:BB:F7:0A:96:09
Authority key identifier: 16:59:EB:60:40:19:3D:F0:68:13:50:90:5E:63:9D:0E:58:D5:F9:DF
Certificate issuer: /CN=1659eb6040193df0681350905e639d0e58d5f9df
Certificate serial: 01A06E39573BFE9A9FD1C887719E72C896E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
Manifest number: 18A2
Signing time: Fri 04 Sep 2026 21:00:46 +0000
Manifest this update: Fri 04 Sep 2026 21:00:46 +0000
Manifest next update: Sat 05 Sep 2026 21:00:46 +0000
Files and hashes: 1: Ebw7UmhhiZG_Nrfoble_YWsPVu4.roa (hash: 9BXqjTT23ZUPj2QuWTEKVvPbzIY1hciLXoi7NrQptsU=)
2: FlnrYEAZPfBoE1CQXmOdDljV-d8.crl (hash: Jo+pa38G6ieGMyiUX4R2peiMkWJIY9w+Ozf1P6ZZi4g=)
3: aKt1IzaRyYfROpZHibRsZ71BdRE.roa (hash: oXZivLJhewPC3l7955mcOzVeeerdPRVG1F9b3jjovao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:39:57:3b:fe:9a:9f:d1:c8:87:71:9e:72:c8:96:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1659eb6040193df0681350905e639d0e58d5f9df
Validity
Not Before: Sep 4 21:00:46 2026 GMT
Not After : Sep 5 21:00:46 2026 GMT
Subject: CN=18349cae0cbbc4a544a819f7fe3479bbf70a9609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:07:6a:39:d5:9a:21:21:40:28:20:97:dc:16:
ac:a6:b4:fa:44:36:26:e3:2c:75:a5:3e:be:d2:21:
7e:7a:3b:a5:e5:72:8b:f4:0a:e3:37:88:64:02:a1:
3d:97:72:f6:e1:c3:eb:19:a3:ec:c7:6b:68:e0:15:
4f:1f:7b:de:b7:b6:a2:fd:4a:50:2c:03:80:43:3a:
cc:a1:4f:49:07:e8:24:9b:78:0f:48:49:a7:1d:20:
b4:f2:35:a0:75:b7:0a:18:62:98:3c:88:1b:ad:be:
0d:9e:86:84:43:fd:20:7f:be:34:31:be:aa:28:ec:
f3:eb:32:bc:3d:cc:13:9a:23:2f:21:93:9a:55:d5:
a8:41:55:44:52:1a:c9:f4:63:19:72:4b:15:7d:1b:
bf:b7:04:ac:25:36:80:80:ed:de:8d:2c:3d:33:49:
ff:c7:50:ae:18:78:8f:86:04:15:0a:cd:a4:d9:61:
9f:e9:ff:24:ba:48:f7:02:1e:7e:73:9f:41:d8:4a:
59:bc:a9:73:80:ea:f8:bd:ef:0f:a0:30:02:07:19:
6c:39:a9:49:c9:cd:f6:27:59:69:4d:ac:17:b1:de:
6f:17:04:78:69:7d:e8:15:6f:c1:1f:95:23:2e:63:
b5:de:fc:d8:31:4f:37:4c:12:6e:d1:73:ee:b0:84:
64:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:34:9C:AE:0C:BB:C4:A5:44:A8:19:F7:FE:34:79:BB:F7:0A:96:09
X509v3 Authority Key Identifier:
keyid:16:59:EB:60:40:19:3D:F0:68:13:50:90:5E:63:9D:0E:58:D5:F9:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:28:88:bd:48:0d:6e:dc:bc:35:34:9d:69:1a:7f:81:16:0b:
f7:00:db:6f:05:91:c6:5a:2d:82:f6:25:91:c1:0d:e3:69:91:
7d:58:4f:a4:75:38:98:ad:31:18:14:98:73:5a:3b:a0:d6:1b:
36:00:f6:12:cf:31:7b:eb:ae:b4:36:bc:8d:ce:06:21:d3:08:
e1:64:14:be:57:73:2d:12:78:00:5c:be:fd:55:4b:ea:fc:14:
13:f0:13:c8:12:c4:26:58:74:1f:4e:d3:8c:46:8f:cd:8c:f3:
a1:b0:ff:07:b8:fe:e9:32:55:31:0d:c1:cb:2a:ee:f5:57:ee:
40:90:af:6f:69:39:ab:7d:63:df:c6:52:5b:44:85:c4:45:58:
78:66:96:9c:cd:8e:42:17:7c:a7:f0:c7:54:4b:72:02:33:5c:
24:17:5f:de:3b:a5:f1:62:76:97:fd:d2:e3:c3:93:90:39:64:
3c:be:09:a4:77:f2:a3:a8:3d:83:b9:f8:2c:1c:63:41:55:63:
a8:a1:72:4b:14:9e:bd:85:35:77:d6:b5:c3:d6:fb:9b:42:62:
21:50:01:29:4f:f4:d2:07:12:eb:5c:38:19:9f:68:d9:ee:79:
80:75:19:a2:9f:21:da:78:16:f5:96:16:a3:d2:b9:83:e7:f3:
f5:1b:50:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:53:07 2026 by rpki-client