Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
File: FlnrYEAZPfBoE1CQXmOdDljV-d8.mft (raw, json)
Hash identifier: 5qEoGuACB+Kitdqvn0GYFcFIrnLaFEqOlsB+s5I80ZE=
Subject key identifier: 75:F8:95:A2:C4:74:78:BA:D3:4F:82:33:76:DE:5D:B4:34:CF:E7:CF
Authority key identifier: 16:59:EB:60:40:19:3D:F0:68:13:50:90:5E:63:9D:0E:58:D5:F9:DF
Certificate issuer: /CN=1659eb6040193df0681350905e639d0e58d5f9df
Certificate serial: 01A15BC300BA7E01D57BFB30AF367574CFE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
Manifest number: 191D
Signing time: Wed 21 Oct 2026 00:01:08 +0000
Manifest this update: Wed 21 Oct 2026 00:01:08 +0000
Manifest next update: Thu 22 Oct 2026 00:01:08 +0000
Files and hashes: 1: Ebw7UmhhiZG_Nrfoble_YWsPVu4.roa (hash: 9BXqjTT23ZUPj2QuWTEKVvPbzIY1hciLXoi7NrQptsU=)
2: FlnrYEAZPfBoE1CQXmOdDljV-d8.crl (hash: riYCFZqQ0OssijjJd8pXjdy09hb6+px3CtyfPGtrgtg=)
3: aKt1IzaRyYfROpZHibRsZ71BdRE.roa (hash: oXZivLJhewPC3l7955mcOzVeeerdPRVG1F9b3jjovao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 00:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5b:c3:00:ba:7e:01:d5:7b:fb:30:af:36:75:74:cf:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1659eb6040193df0681350905e639d0e58d5f9df
Validity
Not Before: Oct 21 00:01:08 2026 GMT
Not After : Oct 22 00:01:08 2026 GMT
Subject: CN=75f895a2c47478bad34f823376de5db434cfe7cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d8:16:d3:6a:bf:76:7f:c4:c2:59:7f:5c:25:
7a:a8:a1:ef:48:2b:a7:f9:69:c5:76:96:1a:70:e2:
48:bb:52:70:55:59:f8:57:51:84:51:fa:23:ff:ff:
6c:13:bd:9b:31:ef:4d:97:5d:24:bb:b7:b4:cf:ff:
9a:a7:70:40:92:6e:1d:a0:f6:8e:05:d8:81:78:4c:
2a:3d:61:06:70:27:99:c6:56:87:63:28:ed:7c:29:
67:9d:18:64:1c:b0:0d:b7:88:5e:57:3c:01:20:82:
51:01:b7:e9:50:38:5a:a6:25:6f:45:f0:39:29:3c:
67:59:28:cc:41:f4:8e:9c:9c:95:ca:db:08:4b:78:
4e:e4:f8:0d:13:d0:e2:a6:84:14:fa:eb:ec:6c:57:
db:64:47:7a:a4:a5:aa:33:97:42:3b:fc:bb:cc:4a:
c9:cf:14:a8:42:12:b1:5d:af:ff:fd:fe:2e:61:f5:
97:f2:24:f0:13:ab:bc:92:c4:f1:de:93:ad:85:bc:
0f:22:e2:4c:fb:c2:e3:34:a2:93:24:1a:ce:02:63:
2d:fa:2c:72:5c:9f:b9:49:51:26:89:cd:a7:42:e4:
90:ba:f6:2b:92:9d:97:2b:e4:7b:c1:14:57:f6:94:
92:10:56:b4:84:bd:ca:f5:6c:d6:a2:82:b5:48:07:
3b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:F8:95:A2:C4:74:78:BA:D3:4F:82:33:76:DE:5D:B4:34:CF:E7:CF
X509v3 Authority Key Identifier:
keyid:16:59:EB:60:40:19:3D:F0:68:13:50:90:5E:63:9D:0E:58:D5:F9:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:3c:e1:ac:b6:40:1d:79:df:a4:56:a7:d5:1d:7f:0e:26:b6:
90:53:bc:19:d9:b2:71:e2:bc:47:5d:34:d5:8c:cc:a7:b9:3b:
c8:c4:17:ea:6b:0e:08:35:69:e6:c6:b2:13:c0:f2:c2:e6:1e:
cc:98:11:94:51:ab:da:1a:04:e8:70:64:32:2e:a6:7a:99:d7:
20:11:44:e1:be:50:76:fb:28:2e:92:ae:a3:9c:f9:39:e1:d0:
cc:a0:85:d3:38:34:ba:c0:23:d4:0a:e2:6e:23:fc:ae:43:62:
aa:e1:fa:4d:dc:91:52:09:9b:9c:af:a0:41:0e:08:22:3b:23:
ec:ce:f5:77:49:48:ee:64:72:ad:46:29:f9:86:d5:e0:be:28:
60:46:db:51:2d:23:71:a3:4a:75:26:b2:eb:a6:78:9a:c1:fe:
2f:7c:e6:59:56:47:83:2c:ff:af:fc:50:ee:3a:39:2b:74:79:
e7:f9:d7:39:cc:53:52:45:d9:0e:77:81:7f:d0:b2:42:4d:ea:
64:c8:7b:d8:79:d0:76:5d:ab:d2:cb:e7:70:b4:5c:b5:19:ce:
2a:f9:d5:ed:d5:7d:f8:99:5c:59:f7:8f:da:74:d1:be:80:9a:
7e:74:51:f0:7b:4b:85:be:f6:c2:94:46:d4:86:d6:04:07:b5:
f4:08:64:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 09:33:25 2026 by rpki-client