Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/FyG3YLYPcilRuSUnqC_9Ol6jhFk.mft
File: FyG3YLYPcilRuSUnqC_9Ol6jhFk.mft (raw, json)
Hash identifier: Fl7N6+rWu68uLyACy8Y8pv2LpQoGkGReet8qeMyDLk4=
Subject key identifier: A3:CD:FA:E7:48:B4:76:BC:33:56:E0:6E:F8:3F:84:FB:EF:33:AD:D9
Authority key identifier: 17:21:B7:60:B6:0F:72:29:51:B9:25:27:A8:2F:FD:3A:5E:A3:84:59
Certificate issuer: /CN=1721b760b60f722951b92527a82ffd3a5ea38459
Certificate serial: 019F118A05977F84682CC45F2F1701B821EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FyG3YLYPcilRuSUnqC_9Ol6jhFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/FyG3YLYPcilRuSUnqC_9Ol6jhFk.mft
Manifest number: 0214
Signing time: Mon 29 Jun 2026 04:01:25 +0000
Manifest this update: Mon 29 Jun 2026 04:01:25 +0000
Manifest next update: Tue 30 Jun 2026 04:01:25 +0000
Files and hashes: 1: FyG3YLYPcilRuSUnqC_9Ol6jhFk.crl (hash: oSI0D1xdQ1p7uYj/SUqkkvEIuBodG+2ziVFoZYGKLmc=)
2: oCNYl0B5qMoFF8XmPK7f1Xws4VI.asa (hash: 8vDowMTHL6DoKrD1U42McYTkIGnu+IPbUjRCF114GTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/FyG3YLYPcilRuSUnqC_9Ol6jhFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/FyG3YLYPcilRuSUnqC_9Ol6jhFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FyG3YLYPcilRuSUnqC_9Ol6jhFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:8a:05:97:7f:84:68:2c:c4:5f:2f:17:01:b8:21:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1721b760b60f722951b92527a82ffd3a5ea38459
Validity
Not Before: Jun 29 04:01:25 2026 GMT
Not After : Jun 30 04:01:25 2026 GMT
Subject: CN=a3cdfae748b476bc3356e06ef83f84fbef33add9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:7c:38:0c:9d:43:d8:eb:3f:53:fa:e6:1d:f4:
2f:14:cd:9a:d5:5a:a3:e0:af:52:08:22:f7:aa:96:
c1:a0:a8:21:0b:4f:02:bc:48:25:21:83:37:b8:d9:
ad:a2:39:e0:5f:c4:7a:f8:21:11:48:a4:83:ce:7f:
c7:b2:30:55:b8:91:6e:93:bb:16:6b:6e:2f:cd:1b:
73:1a:ba:e4:25:6f:41:b2:97:47:f3:6c:23:09:30:
ed:96:8d:7c:8d:a4:c8:58:3f:c2:10:31:21:3e:82:
55:98:b1:92:2b:3d:ac:fe:66:07:68:d9:9d:3e:8e:
99:90:75:33:2a:e3:d2:96:d4:52:46:b4:92:8d:ec:
53:64:9a:8d:d4:ec:a2:84:45:3a:d0:1d:3b:e8:51:
f5:b3:3a:68:fd:fa:cb:c9:54:d0:52:53:a5:72:37:
50:70:72:a4:cb:24:72:44:b6:3e:ae:74:6f:a6:89:
6e:07:2c:90:16:39:34:b5:1f:cd:af:65:65:83:98:
54:17:2e:59:a9:c0:ec:3c:00:60:87:a7:19:6c:9b:
27:9f:48:1d:73:57:07:b6:92:0b:ae:af:b3:9d:c6:
2c:a0:3d:96:07:cc:fe:ed:7c:2b:70:5f:2e:f5:68:
d7:b4:4c:49:f2:a7:c6:c0:b1:56:e4:1c:97:35:5c:
94:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:CD:FA:E7:48:B4:76:BC:33:56:E0:6E:F8:3F:84:FB:EF:33:AD:D9
X509v3 Authority Key Identifier:
keyid:17:21:B7:60:B6:0F:72:29:51:B9:25:27:A8:2F:FD:3A:5E:A3:84:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyG3YLYPcilRuSUnqC_9Ol6jhFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/FyG3YLYPcilRuSUnqC_9Ol6jhFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/FyG3YLYPcilRuSUnqC_9Ol6jhFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:50:0c:9f:52:88:1e:ed:50:54:96:a5:38:bc:85:0c:09:4a:
b9:cd:2a:45:2f:b2:8c:dd:ad:6e:e2:1d:9e:8d:10:93:ad:e3:
a2:47:c0:64:83:b9:b9:fd:c2:76:9d:2e:57:9e:1a:78:57:f7:
fa:60:d5:46:45:92:12:b6:cc:cd:cb:54:f1:23:73:69:40:97:
ea:18:81:16:9a:77:54:dc:d4:80:7f:67:c8:25:4a:89:c1:f0:
d0:91:89:94:46:2b:75:21:55:97:da:5c:ee:a1:16:2e:8d:41:
58:90:c7:39:e3:55:78:11:9e:81:9f:83:bd:88:76:4a:64:a9:
05:69:b1:75:7a:fb:1d:76:e4:d2:68:d2:b6:e4:bc:d7:7c:bb:
ef:bb:58:90:35:18:46:58:ad:cf:d3:9e:fe:ae:96:16:cc:a3:
62:85:02:6a:22:f2:58:04:2b:fd:8a:bd:20:36:31:86:e6:52:
91:af:e4:2b:be:91:92:12:75:53:a5:af:5c:bd:ac:3a:09:79:
eb:e9:7a:20:7a:23:b6:d0:7f:4f:7c:fc:1f:25:55:46:a4:d9:
7c:b1:5d:cc:7b:ec:cf:36:fc:10:73:5b:5c:57:b1:57:32:ef:
80:4e:f1:08:21:da:02:d6:8d:62:2d:de:7a:99:74:a8:2f:81:
d0:21:77:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:37:59 2026 by rpki-client