Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
File: flyFKPgXh8SJxUqZODkmn1prH5Q.mft (raw, json)
Hash identifier: NHlCeZQssgBRvc/F1E/wFnThLPehCsupI8tn61SRU4I=
Subject key identifier: 3A:B7:0E:10:7E:12:08:B2:50:23:19:78:B1:E7:23:7F:E2:AB:4B:66
Authority key identifier: 7E:5C:85:28:F8:17:87:C4:89:C5:4A:99:38:39:26:9F:5A:6B:1F:94
Certificate issuer: /CN=7e5c8528f81787c489c54a993839269f5a6b1f94
Certificate serial: 01A18D54957F38F56C96E35F44099AFBA22A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flyFKPgXh8SJxUqZODkmn1prH5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
Manifest number: 1AD0
Signing time: Fri 30 Oct 2026 15:01:33 +0000
Manifest this update: Fri 30 Oct 2026 15:01:33 +0000
Manifest next update: Sat 31 Oct 2026 15:01:33 +0000
Files and hashes: 1: 3VErUqcZv3DSzuiOHFJ4NhVe-Sk.roa (hash: BPPxG6OZWKRPZ5HBoMHDDf4oiJwnIpeguHXGGr8zBaE=)
2: ADyxeKRZORLqwi8LQj6fHp5wGLo.roa (hash: KI7QNZ1tpSlDspBRe6V1C2CDD2eifh8F15Hlgzqa5Lo=)
3: flyFKPgXh8SJxUqZODkmn1prH5Q.crl (hash: VKRFJT+EG7xp7R7BwbJQw6Pg7qtjimKepAgCepzMdhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/flyFKPgXh8SJxUqZODkmn1prH5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 08:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8d:54:95:7f:38:f5:6c:96:e3:5f:44:09:9a:fb:a2:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e5c8528f81787c489c54a993839269f5a6b1f94
Validity
Not Before: Oct 30 15:01:33 2026 GMT
Not After : Oct 31 15:01:33 2026 GMT
Subject: CN=3ab70e107e1208b250231978b1e7237fe2ab4b66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:e1:78:47:5b:0d:0f:af:a3:31:f5:fc:04:3b:
d3:40:dc:84:34:b9:de:e8:0f:4c:a0:c2:3c:65:8c:
d1:3a:56:a4:57:2e:49:cb:6a:d2:7c:62:06:2a:71:
9e:d9:4b:21:fc:2d:8e:d9:82:61:1f:50:54:ea:8f:
cd:2a:46:7c:ed:5f:fd:15:d6:79:dc:17:4f:9b:46:
a7:e6:50:5d:9c:94:53:32:2e:43:cd:56:19:37:e3:
e3:ce:16:d6:a1:03:d2:01:c0:25:d6:74:63:14:3d:
47:7a:1d:76:54:38:4e:b2:e2:15:ed:f6:48:79:b7:
e6:e8:fd:5c:3e:01:5d:f5:c7:49:42:51:53:6b:bc:
59:f0:46:0a:3f:7a:78:9b:29:1c:1a:62:94:8a:59:
d7:ef:d7:96:d9:38:82:63:c5:4f:70:87:15:6b:a4:
c2:ab:a2:c3:b3:aa:b3:0e:18:52:1f:7e:1c:7d:31:
d4:6e:9a:51:98:d5:9b:8a:60:e1:3c:a6:6f:b3:93:
0b:9d:41:90:c7:b9:76:97:87:e1:19:83:f5:df:b0:
5d:8c:a4:fe:aa:65:8c:3c:0a:ed:77:65:92:a9:1e:
b9:3c:c9:4e:9c:59:21:ca:ae:b5:32:d3:b1:4d:66:
d6:cf:87:2a:4b:4c:1a:40:dd:ff:a8:4f:d5:56:97:
c5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B7:0E:10:7E:12:08:B2:50:23:19:78:B1:E7:23:7F:E2:AB:4B:66
X509v3 Authority Key Identifier:
keyid:7E:5C:85:28:F8:17:87:C4:89:C5:4A:99:38:39:26:9F:5A:6B:1F:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flyFKPgXh8SJxUqZODkmn1prH5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:55:5f:33:3e:e3:60:d5:d9:27:8c:93:05:2d:b1:03:4a:78:
79:d0:29:e9:aa:d2:8f:21:fc:96:0a:77:0a:f1:66:eb:1d:b1:
19:3c:b7:08:73:c6:80:b9:93:9c:e1:ae:a8:c1:ca:cc:bf:90:
ed:6b:8b:c5:67:a3:f0:0a:7c:31:51:83:68:3f:59:ac:c5:f0:
c2:ba:28:37:d0:3b:bd:2f:77:d0:de:51:b0:b4:85:e0:50:d6:
f7:fc:fc:9e:3a:b3:a9:5b:1b:56:6b:6d:ed:40:74:0b:78:48:
75:61:80:24:8b:5c:e1:3a:11:98:2c:ff:2b:69:6b:d0:21:f7:
bf:be:d8:a3:d1:7c:17:55:bf:41:44:54:53:e5:06:ec:ca:f9:
e9:54:db:e2:8c:47:8a:83:8c:6b:aa:03:07:bd:2a:98:6c:e3:
77:ff:e4:26:b9:e6:64:5f:36:3c:7c:a8:30:8b:6d:a0:81:e0:
2d:a7:61:1f:26:b0:d2:af:b6:3b:a9:57:cc:a6:87:56:e7:5b:
a9:df:9f:0e:0e:30:9c:e3:4f:e2:d2:ef:63:8a:b1:b0:6b:30:
d8:f5:ca:a9:71:75:1f:49:f9:bf:fe:f7:fc:81:3b:bb:9e:55:
a8:bf:c8:41:d5:d0:d3:d8:87:11:d9:cc:ab:e8:03:90:d8:4a:
18:f7:55:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 18:04:54 2026 by rpki-client