Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/FyKJy7gXn9846fUyyc1ykbT1xC0.mft
File: FyKJy7gXn9846fUyyc1ykbT1xC0.mft (raw, json)
Hash identifier: 7yNEB2KhA3QOIt+Tr8IgSxGzDIzSVioTrbegGvGkZyw=
Subject key identifier: 61:B6:A6:F7:71:63:0F:AF:0F:FC:79:A4:F2:D9:33:24:C8:0E:6E:A0
Authority key identifier: 17:22:89:CB:B8:17:9F:DF:38:E9:F5:32:C9:CD:72:91:B4:F5:C4:2D
Certificate issuer: /CN=172289cbb8179fdf38e9f532c9cd7291b4f5c42d
Certificate serial: 019F58C6EAEF840ED65A2BA5BB4F31187773
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FyKJy7gXn9846fUyyc1ykbT1xC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/FyKJy7gXn9846fUyyc1ykbT1xC0.mft
Manifest number: 0F99
Signing time: Mon 13 Jul 2026 00:00:58 +0000
Manifest this update: Mon 13 Jul 2026 00:00:58 +0000
Manifest next update: Tue 14 Jul 2026 00:00:58 +0000
Files and hashes: 1: FyKJy7gXn9846fUyyc1ykbT1xC0.crl (hash: m+eka8ZVCsVGnJ+RiaUx3OBW6YBOr4vyWmu65It6MQ0=)
2: G7sgYRFoJFayuqOiJkT4SvmLSC0.roa (hash: s14deS72G3vc/Z7LgUYqSMvuXanb2Xca7svdma5VBoI=)
3: pxS12DAcCwaW3ocjEXURu6Jiigc.roa (hash: ETa0HlY7Y1RquVwxDSRzexuULYuncZkEz0TP+kkZKZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/FyKJy7gXn9846fUyyc1ykbT1xC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/FyKJy7gXn9846fUyyc1ykbT1xC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/FyKJy7gXn9846fUyyc1ykbT1xC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:58:c6:ea:ef:84:0e:d6:5a:2b:a5:bb:4f:31:18:77:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=172289cbb8179fdf38e9f532c9cd7291b4f5c42d
Validity
Not Before: Jul 13 00:00:58 2026 GMT
Not After : Jul 14 00:00:58 2026 GMT
Subject: CN=61b6a6f771630faf0ffc79a4f2d93324c80e6ea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ad:96:27:15:06:8c:b8:53:87:78:4c:03:b2:
d6:a7:f0:6e:7b:1e:fb:27:96:df:6d:62:51:9d:06:
20:c3:2a:f1:c7:2e:c5:a8:e7:20:2f:07:e9:d6:3a:
e5:6e:e3:de:96:b6:15:32:48:ed:ce:4b:f4:a8:a8:
82:64:03:1d:74:9f:ef:bd:7c:b2:00:bc:a2:25:96:
2f:3f:46:22:30:42:d7:46:de:35:7f:68:48:69:89:
6a:91:f7:da:1b:ae:e3:7b:a9:e9:76:c1:67:7e:cc:
09:78:ae:df:53:13:a5:3c:b3:4c:45:d6:4c:78:0b:
2d:ca:c0:97:0f:8a:27:14:66:24:2e:f3:53:0a:6c:
1d:ec:e2:17:90:3e:cc:27:ae:0f:69:a2:4a:93:eb:
88:c7:66:91:5d:0a:e5:99:7f:5c:50:73:2d:36:77:
ea:dd:e9:b3:ca:0d:91:b0:d8:28:7f:f7:1c:b3:1c:
ec:a5:f1:b5:31:77:a9:ff:b5:5e:54:ce:24:63:82:
ff:78:60:34:a5:38:e9:6d:cf:27:93:24:c2:a8:ba:
d5:79:33:65:e3:63:cc:ff:59:fe:c8:41:94:bc:7e:
2d:58:83:61:e6:20:6b:4e:2e:0d:67:e6:6e:29:0e:
e3:68:aa:2e:6c:de:72:43:92:d2:5f:65:66:91:bb:
2e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:B6:A6:F7:71:63:0F:AF:0F:FC:79:A4:F2:D9:33:24:C8:0E:6E:A0
X509v3 Authority Key Identifier:
keyid:17:22:89:CB:B8:17:9F:DF:38:E9:F5:32:C9:CD:72:91:B4:F5:C4:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyKJy7gXn9846fUyyc1ykbT1xC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/FyKJy7gXn9846fUyyc1ykbT1xC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/FyKJy7gXn9846fUyyc1ykbT1xC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:91:fd:99:f1:c1:84:6a:64:6a:b7:b2:f4:d7:6d:e3:21:f7:
27:8d:e8:36:08:da:14:78:17:35:64:74:df:77:a5:38:ed:3c:
53:c0:1f:12:e3:0b:d9:38:d4:49:88:18:98:f0:59:3c:7b:48:
11:a8:82:76:01:e0:63:a7:d5:1b:7d:a6:a8:85:23:d2:70:2b:
e8:53:0f:e7:aa:30:af:32:90:5d:c8:c7:4c:56:34:13:4a:36:
80:d0:53:05:2b:f3:d5:d4:0b:57:0f:11:50:b2:56:c1:31:ff:
e7:43:cb:92:b0:dc:19:d5:31:4c:02:79:c9:55:e5:cc:a2:90:
62:b3:7d:8d:f6:d5:b2:fb:e7:ba:13:a0:f0:09:2a:d6:96:4d:
b6:cb:f0:22:39:bb:5e:27:ea:9a:5f:37:5b:d3:d5:3c:c6:dd:
69:6a:fa:fd:21:f0:c4:55:e0:84:90:ff:f4:5e:c8:56:59:e4:
67:ce:42:c0:4d:6d:f1:2b:51:28:8b:90:79:0c:ff:d9:d1:11:
2e:0f:36:1a:ba:b6:15:9c:22:55:d3:ac:38:99:9f:82:41:77:
2d:bf:3a:8d:6a:20:2e:59:fb:35:6f:2f:9f:7a:38:71:20:0b:
5d:1a:b1:76:7b:50:76:e1:1a:0b:77:a9:79:e8:14:98:64:56:
da:28:07:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 04:23:25 2026 by rpki-client