Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.mft
File: Fl-tQQkoOzO287pT-ug6FF0ZNOI.mft (raw, json)
Hash identifier: bNT2M2SQhfrH38h41jVWo5TsVDtk8+JDxtb+UdORHDo=
Subject key identifier: FD:E3:7A:80:33:B4:1F:FF:12:C1:98:E7:F1:BA:D5:17:05:79:43:21
Authority key identifier: 16:5F:AD:41:09:28:3B:33:B6:F3:BA:53:FA:E8:3A:14:5D:19:34:E2
Certificate issuer: /CN=165fad4109283b33b6f3ba53fae83a145d1934e2
Certificate serial: 019D3A539270D4CECDB8488EB73961418A23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fl-tQQkoOzO287pT-ug6FF0ZNOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.mft
Manifest number: 059A
Signing time: Sun 29 Mar 2026 16:00:48 +0000
Manifest this update: Sun 29 Mar 2026 16:00:48 +0000
Manifest next update: Mon 30 Mar 2026 16:00:48 +0000
Files and hashes: 1: 9bJWHvsD-dqBntAB20zO9CBt_Wc.roa (hash: 0W6NRPv1Nxc5Zsqyro6dwCeLDZh0yMAr5QQPzv2LCsU=)
2: Fl-tQQkoOzO287pT-ug6FF0ZNOI.crl (hash: 3lh3OiZblxB//dkeu843bRKTeRLQid6gQvGMt6dV3FI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fl-tQQkoOzO287pT-ug6FF0ZNOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:53:92:70:d4:ce:cd:b8:48:8e:b7:39:61:41:8a:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=165fad4109283b33b6f3ba53fae83a145d1934e2
Validity
Not Before: Mar 29 16:00:48 2026 GMT
Not After : Mar 30 16:00:48 2026 GMT
Subject: CN=fde37a8033b41fff12c198e7f1bad51705794321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:49:88:2c:ef:33:c2:7a:07:33:4e:d7:2b:84:
c0:ce:3a:e2:b3:e5:74:11:66:98:e6:79:56:cf:b3:
92:16:0b:42:8d:ae:c2:1e:ab:c8:07:16:12:33:81:
66:6b:90:c3:58:af:32:89:cb:2b:87:82:50:be:c0:
27:c1:7f:d5:a3:df:24:85:84:c0:98:c9:cd:b8:3d:
a3:31:dd:50:b7:c1:dd:28:11:c1:6c:16:6c:91:ae:
0f:83:5b:12:8a:03:c2:78:94:84:b0:fe:58:61:50:
d2:ad:48:9b:0c:e8:83:c7:e3:b4:e6:41:20:d0:f8:
c0:8a:94:14:b1:b6:1b:ab:88:3d:25:6c:ba:83:2e:
e4:f8:d8:0b:2a:97:76:c5:bb:ba:b8:77:97:d4:1d:
83:3e:fe:38:eb:65:e6:91:41:f4:4e:50:bb:6c:e9:
ef:b3:4b:05:10:0f:fc:d0:01:22:8e:07:c9:b3:11:
b1:2a:3b:65:7c:89:70:3f:48:c0:b6:ce:34:0e:b4:
09:c9:7e:ad:d6:f3:c1:23:79:eb:9e:e7:e6:87:6e:
a8:1b:4d:72:eb:0f:ee:dd:3a:1a:2e:87:e6:27:7e:
c9:05:07:8c:7e:e2:cb:4d:72:00:40:02:08:7c:2d:
1c:79:86:71:c6:8a:ac:a1:96:e3:80:71:09:2e:96:
bf:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:E3:7A:80:33:B4:1F:FF:12:C1:98:E7:F1:BA:D5:17:05:79:43:21
X509v3 Authority Key Identifier:
keyid:16:5F:AD:41:09:28:3B:33:B6:F3:BA:53:FA:E8:3A:14:5D:19:34:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fl-tQQkoOzO287pT-ug6FF0ZNOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:97:a7:11:3c:46:30:33:66:42:24:67:aa:2c:9a:81:05:2a:
0a:ea:1a:0b:ce:1a:2c:ad:4c:27:ae:e7:98:81:29:93:4f:88:
eb:9b:70:d1:5d:39:28:8b:0a:b8:f2:37:58:8e:9a:86:d6:54:
6f:90:3b:42:a8:13:c5:57:1e:ce:a0:b5:50:87:52:49:be:04:
2d:25:93:e2:6a:9c:d9:49:ae:c1:88:54:e5:91:34:27:4d:65:
b4:94:ef:30:c7:72:02:5c:dd:fa:fe:a6:f8:00:f6:f7:02:7c:
65:03:52:ae:31:84:74:66:ff:8c:fd:b8:5f:4e:0c:c7:70:ee:
bf:00:6e:ae:5f:16:ca:bf:db:4f:de:3c:51:09:a0:ce:6a:d8:
01:e5:79:f2:f6:f8:fd:f1:1f:c6:db:e3:8a:fc:a7:ed:88:a6:
fb:e1:53:08:5c:9c:2c:f8:1c:63:9a:01:68:19:88:49:7b:17:
60:71:92:f3:4d:2c:49:f7:9d:b5:d9:a0:39:4d:8e:28:68:c3:
24:2b:14:63:23:8c:03:8c:3b:74:28:94:92:ba:e8:da:c7:b6:
5b:2d:11:51:bc:9a:c4:f4:f2:05:e6:d4:46:6d:7b:cb:14:f1:
27:86:e8:4c:be:3d:1d:7d:9d:25:85:fd:a8:ba:7a:04:ad:43:
88:df:2f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 22:30:56 2026 by rpki-client