Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/FyG3YLYPcilRuSUnqC_9Ol6jhFk.mft
File: FyG3YLYPcilRuSUnqC_9Ol6jhFk.mft (raw, json)
Hash identifier: 0TvHfLox+pLYqs9bUATkm+63HHQNXOGyUHtfmIx/iBk=
Subject key identifier: 8E:31:45:D5:63:D6:83:EC:BE:6B:CA:2F:F5:15:B1:6C:77:97:D3:D6
Authority key identifier: 17:21:B7:60:B6:0F:72:29:51:B9:25:27:A8:2F:FD:3A:5E:A3:84:59
Certificate issuer: /CN=1721b760b60f722951b92527a82ffd3a5ea38459
Certificate serial: 01A03AF07B4857F2826BB7D8A4A9A415FD1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FyG3YLYPcilRuSUnqC_9Ol6jhFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/FyG3YLYPcilRuSUnqC_9Ol6jhFk.mft
Manifest number: 02AE
Signing time: Tue 25 Aug 2026 22:00:33 +0000
Manifest this update: Tue 25 Aug 2026 22:00:33 +0000
Manifest next update: Wed 26 Aug 2026 22:00:33 +0000
Files and hashes: 1: FyG3YLYPcilRuSUnqC_9Ol6jhFk.crl (hash: rOMV7IAEj6wR0MCQ50294BoSfiorgT2gEsSh88Yetqo=)
2: oCNYl0B5qMoFF8XmPK7f1Xws4VI.asa (hash: 8vDowMTHL6DoKrD1U42McYTkIGnu+IPbUjRCF114GTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/FyG3YLYPcilRuSUnqC_9Ol6jhFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/FyG3YLYPcilRuSUnqC_9Ol6jhFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FyG3YLYPcilRuSUnqC_9Ol6jhFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 14:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3a:f0:7b:48:57:f2:82:6b:b7:d8:a4:a9:a4:15:fd:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1721b760b60f722951b92527a82ffd3a5ea38459
Validity
Not Before: Aug 25 22:00:33 2026 GMT
Not After : Aug 26 22:00:33 2026 GMT
Subject: CN=8e3145d563d683ecbe6bca2ff515b16c7797d3d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:21:54:29:34:ba:fc:ff:05:48:4a:24:1d:6a:
24:55:21:5e:92:0c:74:ba:2b:5f:ab:e5:a6:7d:88:
fa:63:34:a8:7d:fc:f1:0e:7f:df:bf:39:cd:fe:95:
6e:e5:44:83:b2:f1:25:f9:24:8a:e1:34:5d:d9:8b:
5c:68:45:70:44:2f:ea:fb:82:b5:df:6d:d6:3c:01:
55:dc:a7:f0:16:13:84:f4:a0:c9:35:a6:56:47:22:
3f:00:66:1e:8d:90:d0:40:0c:15:e7:49:03:5f:bb:
b9:3a:2b:1a:95:42:da:ef:6d:43:de:ac:6e:fc:41:
26:a0:43:39:84:75:52:6a:1b:82:aa:db:31:1c:5c:
84:ce:f0:49:e0:fc:3d:ce:79:7d:b2:d7:63:f1:d5:
4c:38:31:24:9b:ed:0b:cd:42:cc:86:5a:8a:71:23:
93:d6:7a:84:1b:4c:51:ca:12:81:ce:55:b8:54:a1:
e8:07:bf:94:ba:7b:d7:ab:43:00:f2:0f:c3:52:e0:
c5:24:4b:d3:45:28:7b:06:03:fb:3b:76:51:d1:31:
59:e8:67:8b:48:6a:99:e5:e4:2b:f6:50:09:7a:fd:
47:d9:6d:d1:9b:83:e5:bc:86:10:5d:72:18:ac:77:
fe:da:40:23:73:7d:17:f6:e7:2b:12:7e:0d:1a:71:
b9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:31:45:D5:63:D6:83:EC:BE:6B:CA:2F:F5:15:B1:6C:77:97:D3:D6
X509v3 Authority Key Identifier:
keyid:17:21:B7:60:B6:0F:72:29:51:B9:25:27:A8:2F:FD:3A:5E:A3:84:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyG3YLYPcilRuSUnqC_9Ol6jhFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/FyG3YLYPcilRuSUnqC_9Ol6jhFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/FyG3YLYPcilRuSUnqC_9Ol6jhFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:32:d4:f5:06:a8:4f:b5:ad:c9:28:30:29:90:13:27:5f:58:
ca:e9:d5:2d:44:51:e7:90:db:d9:59:69:24:76:09:b8:27:4d:
d5:03:16:7a:17:b0:a0:e5:c2:ba:3f:55:59:d5:59:0c:db:9c:
ab:83:fb:d8:51:cd:8f:6b:e8:91:c4:a4:56:9e:a1:29:b2:2f:
2a:b1:32:d7:ee:3f:bf:c5:1d:a6:16:01:ae:62:f0:ee:7e:5b:
f6:f9:b1:3c:34:36:d8:56:ea:05:28:5c:0a:fd:2a:d7:57:f2:
f4:e9:fc:b1:9e:39:a1:65:23:53:76:38:af:a2:18:15:9e:9b:
5a:b1:a6:a8:6c:83:8e:13:de:88:ed:de:0e:11:5c:b1:dc:40:
3d:cb:ae:f6:2c:e8:81:f7:9d:35:03:c7:91:54:b5:3e:c2:8d:
58:61:16:3e:50:7e:e3:1c:18:45:23:bb:3e:85:41:2a:0c:91:
80:0d:03:3a:ce:9a:65:6d:a0:c4:28:55:e8:4a:6b:a0:7d:69:
16:2e:f4:46:4a:27:fa:e2:85:30:03:0c:eb:0b:fa:a3:3e:85:
8b:05:f0:ff:0d:73:37:4e:2b:40:2e:fe:ca:0d:93:d0:0e:de:
a6:e6:98:70:86:ba:7d:9a:a0:72:2f:53:fb:6b:41:ff:68:c1:
1b:75:6a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 23:42:24 2026 by rpki-client