Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
File: flyFKPgXh8SJxUqZODkmn1prH5Q.mft (raw, json)
Hash identifier: 92ioPa0hpA5bS9JzxMp9Kt+Yvxskg1HlbCTodiSC67c=
Subject key identifier: D0:FC:2E:AC:6D:57:5D:D5:81:CC:0E:0E:04:57:98:5B:4D:E3:9C:33
Authority key identifier: 7E:5C:85:28:F8:17:87:C4:89:C5:4A:99:38:39:26:9F:5A:6B:1F:94
Certificate issuer: /CN=7e5c8528f81787c489c54a993839269f5a6b1f94
Certificate serial: 019FA2CF301FFA6C5CEEB9BC44ECFB4F247A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flyFKPgXh8SJxUqZODkmn1prH5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
Manifest number: 19D2
Signing time: Mon 27 Jul 2026 09:01:54 +0000
Manifest this update: Mon 27 Jul 2026 09:01:54 +0000
Manifest next update: Tue 28 Jul 2026 09:01:54 +0000
Files and hashes: 1: 3VErUqcZv3DSzuiOHFJ4NhVe-Sk.roa (hash: BPPxG6OZWKRPZ5HBoMHDDf4oiJwnIpeguHXGGr8zBaE=)
2: ADyxeKRZORLqwi8LQj6fHp5wGLo.roa (hash: KI7QNZ1tpSlDspBRe6V1C2CDD2eifh8F15Hlgzqa5Lo=)
3: flyFKPgXh8SJxUqZODkmn1prH5Q.crl (hash: 4M0cW429kLMNnMTdBaWz4FbKYhgRj8qDwwj5WJ82/Do=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/flyFKPgXh8SJxUqZODkmn1prH5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:cf:30:1f:fa:6c:5c:ee:b9:bc:44:ec:fb:4f:24:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e5c8528f81787c489c54a993839269f5a6b1f94
Validity
Not Before: Jul 27 09:01:54 2026 GMT
Not After : Jul 28 09:01:54 2026 GMT
Subject: CN=d0fc2eac6d575dd581cc0e0e0457985b4de39c33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:bc:e2:f1:0a:75:94:f0:ad:71:bc:c0:15:df:
0d:f4:c7:1a:9f:16:4c:41:67:da:20:c1:8c:4c:ed:
f5:d8:03:93:77:b0:2e:97:76:f1:1d:55:f4:33:37:
1e:98:1c:67:aa:01:cf:bc:b0:f8:56:a8:d7:77:71:
1b:06:7f:b7:ad:14:d2:10:7f:41:d7:c0:5e:ab:ee:
e4:c2:73:5d:6c:d4:e2:68:07:33:54:d9:d3:79:60:
86:02:6a:ba:98:b7:2a:d6:aa:29:be:08:39:b0:33:
3c:d7:e7:f3:9e:1a:7c:2e:ce:0b:ce:94:11:df:a5:
55:da:6a:be:a6:17:c7:bd:bd:9c:78:e8:2b:5c:b9:
cb:8f:9b:35:a7:01:bb:ef:49:07:0b:0c:c3:03:ab:
b0:37:0e:43:5d:76:0c:1d:27:32:bc:03:1a:85:29:
d8:af:19:71:e8:c9:67:dd:8a:a4:c9:27:19:3a:12:
e8:07:73:bd:18:79:2b:98:0e:4a:c6:51:c3:15:b0:
08:f6:af:7b:8e:79:69:40:9c:4d:6f:49:1e:c7:1e:
a8:be:76:59:52:66:53:ae:93:33:7c:f1:a1:cf:ba:
01:2f:77:8e:35:69:15:a8:83:ae:9f:79:be:56:34:
92:a1:7b:07:c6:30:5e:1a:74:9f:7f:01:a6:40:be:
7d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:FC:2E:AC:6D:57:5D:D5:81:CC:0E:0E:04:57:98:5B:4D:E3:9C:33
X509v3 Authority Key Identifier:
keyid:7E:5C:85:28:F8:17:87:C4:89:C5:4A:99:38:39:26:9F:5A:6B:1F:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flyFKPgXh8SJxUqZODkmn1prH5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:ad:c2:98:e0:9c:f1:a2:c3:40:e6:71:0a:95:09:2b:af:71:
1d:17:c5:7c:4c:cc:68:63:41:27:e7:5b:02:96:21:50:74:22:
88:b2:a4:7e:ea:84:9d:1d:60:c1:90:a8:bc:30:bc:52:66:e3:
2e:26:89:bb:3a:77:9a:e8:7e:5f:8f:ae:f1:54:c2:ff:d8:97:
78:ac:9c:af:aa:e6:e7:d7:bc:ad:5d:26:74:50:cc:9e:a5:2e:
99:cf:a2:d4:8d:f9:b9:9a:3c:5d:01:36:23:02:5e:6e:c8:ed:
2a:0c:09:e3:76:e5:91:18:e8:36:c5:08:a9:b4:ff:ee:54:f6:
6b:5b:70:f6:3e:b8:2f:37:12:9a:39:00:60:dd:c5:87:e7:8e:
ca:c7:a9:a2:e9:40:e2:67:bf:36:6d:94:52:48:91:75:70:ee:
50:47:bc:1d:25:16:74:47:04:6a:27:ac:56:2a:9f:e1:1b:92:
7a:7a:34:1f:b0:5f:c9:d7:8a:67:87:db:a0:b9:c0:49:fe:18:
e6:58:e9:37:1a:47:e7:fe:20:70:23:ff:dd:06:37:12:f1:3a:
f5:02:d9:f1:93:a6:f0:72:1e:57:58:a6:6e:31:72:98:3c:88:
71:34:e7:2c:3c:28:4a:5c:76:51:09:34:31:da:46:00:2d:c8:
87:69:34:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:51:34 2026 by rpki-client