Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
File: FlnrYEAZPfBoE1CQXmOdDljV-d8.mft (raw, json)
Hash identifier: +whvMQWc0OMZC6nho9kUcor74+oJiV22WfgfexuOZVk=
Subject key identifier: B3:5F:54:2A:89:83:94:91:0D:F3:7D:F3:1B:11:2F:B8:18:B8:7F:47
Authority key identifier: 16:59:EB:60:40:19:3D:F0:68:13:50:90:5E:63:9D:0E:58:D5:F9:DF
Certificate issuer: /CN=1659eb6040193df0681350905e639d0e58d5f9df
Certificate serial: 019E49C46648A51BDD4C7596194D29F8A36E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
Manifest number: 1786
Signing time: Thu 21 May 2026 09:01:08 +0000
Manifest this update: Thu 21 May 2026 09:01:08 +0000
Manifest next update: Fri 22 May 2026 09:01:08 +0000
Files and hashes: 1: Ebw7UmhhiZG_Nrfoble_YWsPVu4.roa (hash: 9BXqjTT23ZUPj2QuWTEKVvPbzIY1hciLXoi7NrQptsU=)
2: FlnrYEAZPfBoE1CQXmOdDljV-d8.crl (hash: oVgbWf+05AsuvDmaqkUoL57nj9V9TDUjdOAjiOiJ0Gs=)
3: aKt1IzaRyYfROpZHibRsZ71BdRE.roa (hash: oXZivLJhewPC3l7955mcOzVeeerdPRVG1F9b3jjovao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:49:c4:66:48:a5:1b:dd:4c:75:96:19:4d:29:f8:a3:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1659eb6040193df0681350905e639d0e58d5f9df
Validity
Not Before: May 21 09:01:08 2026 GMT
Not After : May 22 09:01:08 2026 GMT
Subject: CN=b35f542a898394910df37df31b112fb818b87f47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:91:a3:fb:58:ec:a0:52:d6:55:69:71:fd:b1:
66:44:f8:63:4c:8b:f0:1a:3f:23:d1:6a:69:fb:c9:
ae:6f:68:f5:f1:37:20:4f:cc:51:3b:09:33:f9:86:
43:40:80:f1:e0:08:e2:33:6d:2b:03:c3:55:3a:0b:
67:8a:00:a2:9f:50:a8:28:76:fd:08:3d:a1:15:c9:
78:31:6d:b2:2d:f2:a8:1d:32:88:19:32:64:c4:a9:
38:9f:78:58:b5:45:fa:97:32:20:57:a7:77:c7:37:
19:5c:f2:a7:4e:4d:11:a6:ec:bc:f3:3a:e1:79:14:
62:14:af:c8:98:93:da:e6:a1:de:ce:9e:47:22:0c:
59:71:bb:79:68:80:7b:b3:f6:3d:d4:4b:da:9c:61:
28:e3:3c:fd:52:7d:8d:82:d0:43:38:d3:27:b7:f5:
af:88:a3:1f:ba:60:f9:7d:73:b2:44:56:0c:aa:96:
ac:1a:29:98:37:b1:01:34:d6:70:f6:c3:97:11:54:
3f:49:e6:cc:a2:85:a8:d5:f9:d2:bf:fd:db:d3:90:
5c:62:89:eb:f9:11:98:dc:41:79:9f:fa:73:5b:ad:
65:32:74:77:19:62:25:bc:ae:a5:ce:89:ff:25:3c:
34:48:b5:1d:c2:42:cf:17:93:26:cb:e6:e7:44:fc:
09:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:5F:54:2A:89:83:94:91:0D:F3:7D:F3:1B:11:2F:B8:18:B8:7F:47
X509v3 Authority Key Identifier:
keyid:16:59:EB:60:40:19:3D:F0:68:13:50:90:5E:63:9D:0E:58:D5:F9:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:d7:00:3a:33:de:aa:21:e8:97:ec:da:17:6e:f3:81:f5:6a:
8e:b5:04:5c:f4:d2:e8:17:c4:04:e8:cd:c1:e9:00:2f:59:b4:
f7:0e:ef:a8:71:6b:86:66:de:b9:c1:8f:9d:7f:1e:52:57:52:
b3:4a:dc:dd:25:39:03:f3:12:82:ea:41:db:96:23:0e:27:22:
47:07:b0:ce:5b:1e:ce:34:18:b1:39:cc:f3:68:ed:2b:ea:5f:
6e:96:d6:cc:35:6c:ea:5c:e6:a9:f1:c9:f5:39:6f:f1:9d:22:
ec:d7:21:b9:22:a2:02:38:31:31:03:7e:27:f4:45:ca:b3:df:
90:0a:7c:ed:33:83:d1:50:74:18:42:50:14:ea:b0:ad:1c:62:
6c:c9:65:32:0a:4b:87:02:44:bf:21:db:a2:2a:db:68:85:bb:
23:5c:b5:2a:3d:29:45:97:af:c2:67:f8:0f:ba:c8:e5:3d:85:
5f:46:4d:ae:4d:a8:1e:be:af:d0:6f:03:42:c2:ef:27:b4:3b:
f6:c2:2d:c2:5c:3a:2d:05:3d:22:45:69:5d:5d:5e:44:6f:f3:
bc:d0:73:fd:71:66:86:2e:50:9c:31:34:a1:85:f1:d7:51:a0:
81:09:e3:9f:39:b1:69:bf:0b:b9:30:c3:bd:f8:9e:c4:93:60:
c7:30:e0:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 14:43:46 2026 by rpki-client