Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/FyG3YLYPcilRuSUnqC_9Ol6jhFk.mft
File: FyG3YLYPcilRuSUnqC_9Ol6jhFk.mft (raw, json)
Hash identifier: bOWdD06MWfvhROABbexIbjGeJcdYcW9vL51AxCpIMWM=
Subject key identifier: 8F:F2:AC:D5:1C:E3:79:6F:B7:24:B9:36:FC:1D:8D:35:05:90:F1:BB
Authority key identifier: 17:21:B7:60:B6:0F:72:29:51:B9:25:27:A8:2F:FD:3A:5E:A3:84:59
Certificate issuer: /CN=1721b760b60f722951b92527a82ffd3a5ea38459
Certificate serial: 019DDD9EF8A510EA85DDD9074BC9A4384450
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FyG3YLYPcilRuSUnqC_9Ol6jhFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/FyG3YLYPcilRuSUnqC_9Ol6jhFk.mft
Manifest number: 0173
Signing time: Thu 30 Apr 2026 09:01:16 +0000
Manifest this update: Thu 30 Apr 2026 09:01:16 +0000
Manifest next update: Fri 01 May 2026 09:01:16 +0000
Files and hashes: 1: 7JZ7akj6p5ZGzmwwxqm7e8x1k-U.asa (hash: VdQ4RKd98hOOxtXKTSQlYR4XwxyVTDohFUAsTdvGQLw=)
2: FyG3YLYPcilRuSUnqC_9Ol6jhFk.crl (hash: KrQXtXxBjQLp6OI9IAzAG0+RuZWTXAv3OP4P4YLQEnY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/FyG3YLYPcilRuSUnqC_9Ol6jhFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/FyG3YLYPcilRuSUnqC_9Ol6jhFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FyG3YLYPcilRuSUnqC_9Ol6jhFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dd:9e:f8:a5:10:ea:85:dd:d9:07:4b:c9:a4:38:44:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1721b760b60f722951b92527a82ffd3a5ea38459
Validity
Not Before: Apr 30 09:01:16 2026 GMT
Not After : May 1 09:01:16 2026 GMT
Subject: CN=8ff2acd51ce3796fb724b936fc1d8d350590f1bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:84:86:fb:f2:15:5a:96:96:cc:57:db:f7:cb:
96:ed:a1:ee:0a:af:f4:5f:97:80:0a:9e:f8:23:87:
fc:42:aa:43:73:5e:50:03:e5:83:e1:9a:d9:07:db:
ba:ed:a9:2a:dc:77:92:74:e6:c8:e5:a5:9a:3b:41:
7e:50:49:f2:b5:db:a8:69:a8:04:8b:c2:77:e5:32:
76:14:2d:64:ca:a3:47:d4:99:3f:14:31:df:df:58:
7c:47:65:d1:9d:5f:71:93:40:c2:82:21:52:c0:18:
30:f6:11:92:98:19:80:eb:86:60:9f:11:68:28:99:
40:17:fd:07:9d:a4:51:8b:cc:07:d7:21:5e:37:68:
a9:ae:fb:4a:32:35:d5:5b:e6:36:9d:cd:99:8c:9a:
9e:b0:b9:57:68:a4:a6:1b:dd:2f:6e:4a:94:bc:77:
71:39:39:ef:ba:91:4d:f0:38:9b:62:c1:cc:76:29:
63:e6:6b:38:42:04:3c:d0:00:c5:23:d2:ba:75:a3:
11:44:7e:95:2e:4a:35:76:2e:2a:df:f5:0f:5f:63:
e8:da:31:fe:3f:ed:f7:74:08:40:14:e8:95:8c:02:
c0:25:d0:c9:90:98:07:dd:a4:b6:61:d0:fb:41:69:
14:db:f5:7c:c2:5b:97:1f:57:8d:74:bf:12:cc:4d:
c4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:F2:AC:D5:1C:E3:79:6F:B7:24:B9:36:FC:1D:8D:35:05:90:F1:BB
X509v3 Authority Key Identifier:
keyid:17:21:B7:60:B6:0F:72:29:51:B9:25:27:A8:2F:FD:3A:5E:A3:84:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyG3YLYPcilRuSUnqC_9Ol6jhFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/FyG3YLYPcilRuSUnqC_9Ol6jhFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/FyG3YLYPcilRuSUnqC_9Ol6jhFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:61:4b:00:2c:97:6d:63:79:9f:d0:b1:e5:47:ab:96:83:b9:
85:97:35:ef:82:b3:31:47:99:34:9c:40:12:c2:db:7a:74:27:
91:52:44:74:a2:c3:06:f7:95:65:6a:d6:e3:01:67:73:bb:3b:
13:c4:48:7f:d3:13:b4:74:c6:57:b6:19:cb:3a:3f:c4:1b:1c:
5e:b6:66:62:08:17:d7:b8:b7:41:c6:3f:d2:13:cd:ad:0e:cd:
f6:4e:cd:f9:f4:69:6e:00:55:71:a0:e2:f6:c3:cc:71:39:d8:
0c:ab:e6:9d:e7:a1:ea:20:6c:76:65:a0:6a:8b:e2:15:a0:08:
2d:61:3e:fe:f0:63:54:65:39:74:aa:a9:e5:cf:26:24:e2:6e:
72:6c:f3:33:1e:ba:28:73:bd:ee:b0:66:fc:e1:ff:d3:86:c1:
89:84:a5:50:9c:a0:18:f7:b8:d8:f4:3d:87:24:c3:23:f2:b2:
a7:22:40:ba:f4:65:e7:ff:8a:20:b9:80:a3:2a:27:1f:d5:34:
7d:06:63:15:3a:fa:3e:35:4c:1d:00:73:6f:a0:ae:3a:9f:63:
a2:1f:4d:77:2a:eb:92:b9:42:2a:0b:5a:0c:d6:8a:26:0b:d6:
d9:84:32:c0:9d:c6:bf:21:a0:a2:a4:06:a5:34:da:03:96:2c:
02:5f:40:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 12:48:52 2026 by rpki-client