Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/cc47e5-4a21-4f4f-be22-a5c93a7b9fa5/1/flL6ttMgbrYKMduWxy2U_CQsCgg.mft
File: flL6ttMgbrYKMduWxy2U_CQsCgg.mft (raw, json)
Hash identifier: 2fTwj7qkqNG5/ixCrwjD2X4h50NsHJKnpggMYgVtYak=
Subject key identifier: 44:59:66:3C:78:54:E0:BD:FD:18:DE:5A:90:0C:9B:5C:06:E5:45:3B
Authority key identifier: 7E:52:FA:B6:D3:20:6E:B6:0A:31:DB:96:C7:2D:94:FC:24:2C:0A:08
Certificate issuer: /CN=7e52fab6d3206eb60a31db96c72d94fc242c0a08
Certificate serial: 01A17BBB527A35982B66CD48AF4CCF37904C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flL6ttMgbrYKMduWxy2U_CQsCgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/cc47e5-4a21-4f4f-be22-a5c93a7b9fa5/1/flL6ttMgbrYKMduWxy2U_CQsCgg.mft
Manifest number: 1AC3
Signing time: Tue 27 Oct 2026 05:00:36 +0000
Manifest this update: Tue 27 Oct 2026 05:00:36 +0000
Manifest next update: Wed 28 Oct 2026 05:00:36 +0000
Files and hashes: 1: TjAvojkthatfZwmFZTWM208kjsE.roa (hash: p0LbMJl290HK/hvyznHFUSYXUEBgbUFMbzWPYg0JPn4=)
2: flL6ttMgbrYKMduWxy2U_CQsCgg.crl (hash: OR/UmpY11IWbGU+K0Um1eW/Z7joX8C82wyMKMFUQ8qY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/cc47e5-4a21-4f4f-be22-a5c93a7b9fa5/1/flL6ttMgbrYKMduWxy2U_CQsCgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/cc47e5-4a21-4f4f-be22-a5c93a7b9fa5/1/flL6ttMgbrYKMduWxy2U_CQsCgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/flL6ttMgbrYKMduWxy2U_CQsCgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:bb:52:7a:35:98:2b:66:cd:48:af:4c:cf:37:90:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e52fab6d3206eb60a31db96c72d94fc242c0a08
Validity
Not Before: Oct 27 05:00:36 2026 GMT
Not After : Oct 28 05:00:36 2026 GMT
Subject: CN=4459663c7854e0bdfd18de5a900c9b5c06e5453b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c1:e5:d5:a9:55:7c:8e:1b:5b:b4:f8:47:e0:
4c:c7:98:e7:cd:91:0e:f2:c4:69:77:34:f7:81:ad:
98:42:c7:6a:5d:71:85:d2:8c:e9:60:5f:77:d2:be:
3a:fc:b4:99:d0:2c:dc:44:b1:47:e3:bb:b8:d4:ff:
26:ec:d3:f9:5a:cb:48:36:7f:af:42:8e:0f:bd:9c:
1f:ac:e3:dd:29:cc:60:76:89:aa:e8:3e:d3:56:50:
a6:28:a1:26:dd:d6:4d:a5:0a:22:d0:fa:1c:62:4a:
a9:8e:a2:f0:9a:23:83:f3:50:e1:3c:da:ba:02:b0:
b0:40:3b:20:76:1b:3f:90:80:0a:eb:64:db:09:9f:
d0:02:3d:df:ed:3a:b0:32:88:17:05:69:aa:ae:8a:
1d:3f:25:e5:7f:90:07:67:43:3a:0e:ef:dc:4e:5e:
6f:17:fb:28:3b:6b:66:a4:96:60:14:43:7f:f9:f4:
0f:a2:67:9c:d0:95:c1:09:ec:84:f9:10:b1:9a:2b:
12:7f:71:ca:11:2c:d5:6a:7b:ce:37:1a:24:4e:0f:
1c:13:9d:ee:20:35:31:9b:fb:a1:22:d0:2b:3a:ca:
ce:93:8c:72:87:db:51:83:5a:1a:90:fc:7b:ca:32:
f8:fb:f9:74:9c:06:fe:bc:da:ad:a7:7f:cc:fb:fe:
78:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:59:66:3C:78:54:E0:BD:FD:18:DE:5A:90:0C:9B:5C:06:E5:45:3B
X509v3 Authority Key Identifier:
keyid:7E:52:FA:B6:D3:20:6E:B6:0A:31:DB:96:C7:2D:94:FC:24:2C:0A:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flL6ttMgbrYKMduWxy2U_CQsCgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/cc47e5-4a21-4f4f-be22-a5c93a7b9fa5/1/flL6ttMgbrYKMduWxy2U_CQsCgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/cc47e5-4a21-4f4f-be22-a5c93a7b9fa5/1/flL6ttMgbrYKMduWxy2U_CQsCgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:dd:df:de:14:c3:00:7d:fb:65:9f:58:9a:29:1e:2b:8a:a8:
8d:e9:c4:d3:64:6c:f5:14:fd:f5:2c:bd:38:d7:65:43:28:41:
13:5d:7f:88:73:d9:eb:23:55:ae:9c:46:f9:56:db:08:0c:5d:
ef:cf:83:9f:18:89:ea:c1:65:d2:84:47:ba:ff:c0:97:e5:1e:
d3:06:e0:3d:a0:cf:20:9a:5c:20:0a:88:e9:59:70:a8:6b:17:
4a:a4:39:c4:36:64:d1:6a:8c:33:0d:81:fe:20:ac:a2:95:62:
5c:82:e9:2f:e1:14:ea:52:f6:bb:69:88:74:0c:e8:16:1b:39:
48:b3:9c:fc:58:86:08:5c:ee:de:2b:9f:75:78:74:df:37:be:
00:c0:d9:ee:a7:c0:b0:3e:55:b2:00:a6:28:9f:ad:89:83:be:
78:c7:d1:d6:4f:7c:71:28:33:67:9f:8d:3e:33:5f:a9:54:4a:
4d:f0:b5:bc:c1:b9:ed:7c:14:21:fc:bc:15:79:01:01:db:71:
22:c2:63:e7:02:43:45:59:e6:a1:a1:1c:f8:08:27:8a:b6:92:
34:03:9e:26:bf:33:a2:19:65:d5:80:8e:e5:61:18:2c:89:2f:
fd:c0:a6:9e:5b:e2:55:ae:71:c7:ec:fe:44:bf:94:57:38:ae:
b3:ae:f1:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:21:29 2026 by rpki-client