Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/FyKJy7gXn9846fUyyc1ykbT1xC0.mft
File: FyKJy7gXn9846fUyyc1ykbT1xC0.mft (raw, json)
Hash identifier: lNwO1/4RWrTrWB1klO/aN9iLPwYeIfOyJ29pNNaI7sc=
Subject key identifier: C8:70:91:2C:18:55:62:EC:DF:4D:7E:12:8E:4B:A6:A2:8C:DB:45:90
Authority key identifier: 17:22:89:CB:B8:17:9F:DF:38:E9:F5:32:C9:CD:72:91:B4:F5:C4:2D
Certificate issuer: /CN=172289cbb8179fdf38e9f532c9cd7291b4f5c42d
Certificate serial: 01A0427378CCEE09DFB0C77E782D22C50209
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FyKJy7gXn9846fUyyc1ykbT1xC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/FyKJy7gXn9846fUyyc1ykbT1xC0.mft
Manifest number: 1012
Signing time: Thu 27 Aug 2026 09:00:58 +0000
Manifest this update: Thu 27 Aug 2026 09:00:58 +0000
Manifest next update: Fri 28 Aug 2026 09:00:58 +0000
Files and hashes: 1: FyKJy7gXn9846fUyyc1ykbT1xC0.crl (hash: iLMx21gIRoQH2pffewGiiBl13UXZkTQ0XcKdzzHbEE8=)
2: G7sgYRFoJFayuqOiJkT4SvmLSC0.roa (hash: s14deS72G3vc/Z7LgUYqSMvuXanb2Xca7svdma5VBoI=)
3: pxS12DAcCwaW3ocjEXURu6Jiigc.roa (hash: ETa0HlY7Y1RquVwxDSRzexuULYuncZkEz0TP+kkZKZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/FyKJy7gXn9846fUyyc1ykbT1xC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/FyKJy7gXn9846fUyyc1ykbT1xC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/FyKJy7gXn9846fUyyc1ykbT1xC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Aug 2026 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:42:73:78:cc:ee:09:df:b0:c7:7e:78:2d:22:c5:02:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=172289cbb8179fdf38e9f532c9cd7291b4f5c42d
Validity
Not Before: Aug 27 09:00:58 2026 GMT
Not After : Aug 28 09:00:58 2026 GMT
Subject: CN=c870912c185562ecdf4d7e128e4ba6a28cdb4590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:26:74:57:00:02:78:d7:7a:78:ce:e9:36:59:
b0:f4:ad:77:21:ad:14:83:38:ae:f2:0f:75:73:47:
5a:b6:47:e0:44:25:8a:48:64:82:14:a0:2a:cc:11:
dc:54:67:7f:30:d8:57:e4:52:f6:5c:a9:58:83:0f:
75:f6:26:78:84:ae:f3:bd:d8:0c:51:97:1e:f2:0f:
a9:f8:00:08:32:59:bd:97:3a:1f:d1:96:cd:50:21:
4c:76:64:5e:54:5d:ea:f8:77:70:f1:db:e5:5f:a6:
df:da:99:0e:1c:1c:a7:75:5f:49:d9:f4:44:d2:e1:
7f:30:9a:38:52:fd:0c:e2:c4:f2:d4:96:cb:91:a9:
80:e0:32:75:15:31:4c:1a:8f:5f:97:01:ac:a3:82:
f0:ec:94:5f:9e:de:80:8b:17:4b:c4:a3:cd:9b:b8:
48:e5:f9:4c:d8:dd:98:cc:4c:2f:43:3c:43:ea:88:
f3:21:1c:c6:9d:1d:8f:2a:bd:8a:93:28:67:6e:96:
14:48:e3:73:14:49:be:35:e4:76:4a:59:77:80:72:
84:fa:f1:05:1e:3c:dd:6f:47:da:3f:57:64:99:75:
35:33:c8:25:8f:29:22:42:f2:09:1c:35:37:a5:bb:
5e:7c:14:c0:9f:40:6d:f5:d3:8c:75:61:86:e5:13:
f5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:70:91:2C:18:55:62:EC:DF:4D:7E:12:8E:4B:A6:A2:8C:DB:45:90
X509v3 Authority Key Identifier:
keyid:17:22:89:CB:B8:17:9F:DF:38:E9:F5:32:C9:CD:72:91:B4:F5:C4:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyKJy7gXn9846fUyyc1ykbT1xC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/FyKJy7gXn9846fUyyc1ykbT1xC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/FyKJy7gXn9846fUyyc1ykbT1xC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:f0:d5:f2:65:dc:f5:6f:48:50:53:ba:c7:5a:74:6a:cb:fb:
35:f1:fb:a2:da:65:f5:59:7d:d4:88:43:a8:03:d2:90:ac:90:
33:fb:45:0f:de:65:f1:8b:6f:9a:4d:ac:f6:6e:66:1d:b1:7f:
7c:2e:a6:9a:23:39:46:f5:ac:20:57:96:8b:46:85:64:70:06:
eb:e5:7c:63:ef:23:a6:a1:76:21:de:49:6f:38:6b:42:49:d2:
68:64:5d:41:f0:30:3e:08:a8:a5:bb:e9:fc:b3:78:0b:50:2d:
10:8d:eb:73:1e:f3:7c:65:3b:42:e4:e9:c6:f9:9a:38:15:5b:
4d:a4:f8:6e:c9:c7:8a:f6:5b:24:2f:df:54:b2:f0:83:ac:d1:
88:4c:5c:70:98:b1:01:c3:ca:f4:14:ce:be:66:56:c5:4f:74:
ef:9e:3c:8e:d1:5e:cd:10:a5:d5:6f:77:fa:bc:df:a3:a5:8e:
33:b7:e5:23:28:d8:13:6c:e9:05:c6:87:8c:d0:49:b0:0c:10:
17:3f:63:04:4e:00:5a:2a:d5:6a:6b:85:84:fa:16:5d:9d:97:
47:ef:4f:18:c4:d3:8c:16:de:3d:15:91:30:bc:09:c6:55:e1:
73:a7:23:d6:0a:40:22:eb:43:f3:cd:6b:c8:ce:be:3c:02:b8:
fb:0c:be:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBCc3jM7gnfsMd+eC0ixQIJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3MjI4OWNiYjgxNzlmZGYzOGU5ZjUzMmM5Y2Q3MjkxYjRm
NWM0MmQwHhcNMjYwODI3MDkwMDU4WhcNMjYwODI4MDkwMDU4WjAzMTEwLwYDVQQD
EyhjODcwOTEyYzE4NTU2MmVjZGY0ZDdlMTI4ZTRiYTZhMjhjZGI0NTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSZ0VwACeNd6eM7pNlmw9K13Ia0U
gziu8g91c0datkfgRCWKSGSCFKAqzBHcVGd/MNhX5FL2XKlYgw919iZ4hK7zvdgM
UZce8g+p+AAIMlm9lzof0ZbNUCFMdmReVF3q+Hdw8dvlX6bf2pkOHByndV9J2fRE
0uF/MJo4Uv0M4sTy1JbLkamA4DJ1FTFMGo9flwGso4Lw7JRfnt6AixdLxKPNm7hI
5flM2N2YzEwvQzxD6ojzIRzGnR2PKr2KkyhnbpYUSONzFEm+NeR2Sll3gHKE+vEF
Hjzdb0faP1dkmXU1M8gljykiQvIJHDU3pbtefBTAn0Bt9dOMdWGG5RP1NQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMhwkSwYVWLs301+Eo5LpqKM20WQMB8GA1UdIwQY
MBaAFBciicu4F5/fOOn1MsnNcpG09cQtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnlLSnk3Z1huOTg0NmZVeXljMXlrYlQxeEMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8yODllMzgtYWM5My00ZThiLWEwOGIt
Zjc0YmFhMTJmZGM5LzEvRnlLSnk3Z1huOTg0NmZVeXljMXlrYlQxeEMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni8yODllMzgtYWM5My00ZThiLWEwOGItZjc0YmFhMTJmZGM5
LzEvRnlLSnk3Z1huOTg0NmZVeXljMXlrYlQxeEMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATfDV8mXc
9W9IUFO6x1p0asv7NfH7otpl9Vl91IhDqAPSkKyQM/tFD95l8Ytvmk2s9m5mHbF/
fC6mmiM5RvWsIFeWi0aFZHAG6+V8Y+8jpqF2Id5JbzhrQknSaGRdQfAwPgiopbvp
/LN4C1AtEI3rcx7zfGU7QuTpxvmaOBVbTaT4bsnHivZbJC/fVLLwg6zRiExccJix
AcPK9BTOvmZWxU907548jtFezRCl1W93+rzfo6WOM7flIyjYE2zpBcaHjNBJsAwQ
Fz9jBE4AWirVamuFhPoWXZ2XR+9PGMTTjBbePRWRMLwJxlXhc6cj1gpAIutD881r
yM6+PAK4+wy+xQ==
-----END CERTIFICATE-----
Generated at Thu Aug 27 15:14:52 2026 by rpki-client