Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/FyG3YLYPcilRuSUnqC_9Ol6jhFk.mft
File: FyG3YLYPcilRuSUnqC_9Ol6jhFk.mft (raw, json)
Hash identifier: xH42jDAdC5mGgXhnjy2KsX76EWeioj0B5Oa6COEuev8=
Subject key identifier: 95:2B:5E:EE:E9:C1:9A:E3:56:0A:47:C3:55:08:17:C8:4B:9C:85:07
Authority key identifier: 17:21:B7:60:B6:0F:72:29:51:B9:25:27:A8:2F:FD:3A:5E:A3:84:59
Certificate issuer: /CN=1721b760b60f722951b92527a82ffd3a5ea38459
Certificate serial: 019CC2CE9B8BF5AABC99625D53278CAF3343
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FyG3YLYPcilRuSUnqC_9Ol6jhFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/FyG3YLYPcilRuSUnqC_9Ol6jhFk.mft
Manifest number: DF
Signing time: Fri 06 Mar 2026 11:00:45 +0000
Manifest this update: Fri 06 Mar 2026 11:00:45 +0000
Manifest next update: Sat 07 Mar 2026 11:00:45 +0000
Files and hashes: 1: FyG3YLYPcilRuSUnqC_9Ol6jhFk.crl (hash: PmInqzq2Mxa6+2cdoijVnkkOIcEnWXeno/zcWhmigHc=)
2: PRSuuvH26xT5-o54onKQLtr_Yyc.asa (hash: oaFOFjQ9m4CifADB9zFA8Nh1K294y+NsTbFx9uaW4rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/FyG3YLYPcilRuSUnqC_9Ol6jhFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/FyG3YLYPcilRuSUnqC_9Ol6jhFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FyG3YLYPcilRuSUnqC_9Ol6jhFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Mar 2026 10:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c2:ce:9b:8b:f5:aa:bc:99:62:5d:53:27:8c:af:33:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1721b760b60f722951b92527a82ffd3a5ea38459
Validity
Not Before: Mar 6 11:00:45 2026 GMT
Not After : Mar 7 11:00:45 2026 GMT
Subject: CN=952b5eeee9c19ae3560a47c3550817c84b9c8507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bc:9c:ca:7e:e9:e5:af:3c:33:62:eb:d6:f9:
fa:de:3c:b6:2b:af:d4:24:30:96:33:17:02:74:74:
82:d4:36:cf:18:a6:04:af:ba:c7:0e:df:f4:37:57:
45:b5:ea:22:4c:a6:a8:4e:b0:aa:53:67:44:c1:15:
9e:d9:63:0e:17:f7:4b:4c:58:91:db:95:e3:d3:2d:
36:cf:8f:5f:d2:90:36:68:46:2c:df:fd:57:e3:9f:
a6:ab:98:63:ef:31:41:dc:89:dd:be:ec:43:82:37:
43:43:ed:23:47:ea:64:83:b8:01:60:3b:ac:72:32:
7c:6a:ec:01:30:b8:1e:21:36:37:8c:7b:6c:a6:98:
ae:3d:b8:29:0d:c2:59:d3:03:0c:56:6c:eb:5b:d0:
c1:5b:15:9c:db:78:4e:3e:5a:62:d5:c1:4d:45:93:
92:b1:5d:66:ea:ef:0e:06:cb:4f:74:b1:a7:86:b7:
0c:46:91:a5:a7:0f:85:29:d4:45:52:71:60:ae:7d:
bc:41:59:07:9f:bb:60:0a:7a:62:ee:81:73:76:8d:
fe:cf:49:50:e2:50:aa:81:2a:8c:7e:b1:be:75:6e:
76:d9:e0:b9:25:24:34:c8:36:db:84:09:37:04:e9:
08:8e:7f:42:41:af:4a:c8:c4:6c:8d:8c:04:b2:1e:
34:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:2B:5E:EE:E9:C1:9A:E3:56:0A:47:C3:55:08:17:C8:4B:9C:85:07
X509v3 Authority Key Identifier:
keyid:17:21:B7:60:B6:0F:72:29:51:B9:25:27:A8:2F:FD:3A:5E:A3:84:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyG3YLYPcilRuSUnqC_9Ol6jhFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/FyG3YLYPcilRuSUnqC_9Ol6jhFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/FyG3YLYPcilRuSUnqC_9Ol6jhFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:2d:60:1e:33:25:9b:2c:03:3f:7b:62:6f:79:91:bb:d3:25:
3b:c1:26:e0:cf:98:cf:48:f8:8a:90:16:f2:33:de:03:0d:b5:
98:75:1d:91:f0:f7:56:a9:8c:c9:08:7c:e3:91:6f:25:a3:a0:
b2:ef:4b:ff:5a:52:a7:ae:41:97:31:63:6f:04:6d:72:2b:21:
81:61:f9:5f:3f:50:de:71:e3:d6:45:13:c9:71:3b:c4:6b:09:
c8:c0:65:b4:f1:42:a4:db:db:87:32:a2:54:8b:20:43:e9:96:
8e:d0:5f:93:3d:9a:fe:94:ab:06:7d:97:17:5d:bd:33:08:d2:
81:59:62:f9:e0:1a:05:e3:8c:67:a5:51:8a:47:47:a7:2e:12:
dd:e7:fe:06:a0:57:6a:b7:84:da:80:53:22:39:e9:3c:ba:8d:
b6:24:a7:93:ed:69:22:26:d2:39:88:3a:59:4e:8f:e6:aa:bc:
b3:f6:ad:14:40:60:5a:8f:9c:e8:d6:0c:26:fc:69:8e:d8:20:
c5:f8:7a:e2:92:f4:0b:5c:b8:4a:de:de:4e:82:91:ce:54:45:
f1:94:bb:63:04:87:62:24:3a:90:38:fe:f2:c4:99:a2:60:80:
0b:d1:7b:6c:2a:c8:77:b5:77:be:70:c2:7d:d1:21:02:70:e5:
5b:01:7b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 17:24:10 2026 by rpki-client