Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
File: flyFKPgXh8SJxUqZODkmn1prH5Q.mft (raw, json)
Hash identifier: Mc7Vc00U4U79vIqyEkQAzg/0mxzmKqBJFoNEldGE+gI=
Subject key identifier: B0:66:EB:4A:C4:67:32:3C:A1:D6:77:17:55:AF:85:A6:9A:C6:C6:D5
Authority key identifier: 7E:5C:85:28:F8:17:87:C4:89:C5:4A:99:38:39:26:9F:5A:6B:1F:94
Certificate issuer: /CN=7e5c8528f81787c489c54a993839269f5a6b1f94
Certificate serial: 019D38D3286A04512B1823FDAB519B1B0754
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flyFKPgXh8SJxUqZODkmn1prH5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 09:00:55 +0000
Manifest this update: Sun 29 Mar 2026 09:00:55 +0000
Manifest next update: Mon 30 Mar 2026 09:00:55 +0000
Files and hashes: 1: 3VErUqcZv3DSzuiOHFJ4NhVe-Sk.roa (hash: BPPxG6OZWKRPZ5HBoMHDDf4oiJwnIpeguHXGGr8zBaE=)
2: ADyxeKRZORLqwi8LQj6fHp5wGLo.roa (hash: KI7QNZ1tpSlDspBRe6V1C2CDD2eifh8F15Hlgzqa5Lo=)
3: flyFKPgXh8SJxUqZODkmn1prH5Q.crl (hash: R+WINGBroHY73qk1xUtaEkGVsXNMPRUfACCTUxuqDkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/flyFKPgXh8SJxUqZODkmn1prH5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:28:6a:04:51:2b:18:23:fd:ab:51:9b:1b:07:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e5c8528f81787c489c54a993839269f5a6b1f94
Validity
Not Before: Mar 29 09:00:55 2026 GMT
Not After : Mar 30 09:00:55 2026 GMT
Subject: CN=b066eb4ac467323ca1d6771755af85a69ac6c6d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:15:7d:58:a7:73:5f:1a:d8:dd:3d:81:75:dd:
d4:fe:22:09:32:60:86:c6:db:2c:a2:bd:02:50:05:
1f:ce:1f:3f:ef:99:2b:50:97:c4:e7:f7:57:2e:6a:
4e:a6:02:3f:55:1c:50:c2:48:e9:fb:5a:dc:d9:69:
bb:62:d2:b8:30:49:fd:14:7e:3e:f1:bb:4b:94:64:
58:76:d8:df:af:17:eb:86:44:31:7c:f9:79:f0:ed:
33:7f:dd:19:a4:99:83:86:21:6e:42:30:65:d9:0e:
65:69:21:0e:63:b3:00:c0:9a:6a:d6:bc:a6:0a:a3:
bd:5c:39:39:76:a0:01:e3:3c:5b:4b:19:25:03:76:
a2:3d:4a:7e:9c:99:35:a4:f7:c3:0c:4c:ca:0c:13:
c0:ac:17:70:9f:40:71:9d:cd:fe:2f:4e:07:ee:cf:
16:4b:5b:5d:5b:70:26:de:df:ac:8c:08:f7:bd:1f:
40:1c:1a:01:17:03:e8:ac:2f:9e:21:a0:0d:12:02:
8a:16:b7:e3:5a:53:bc:b0:a5:ef:4c:71:7d:01:71:
01:de:fb:04:18:f8:84:44:0f:24:44:d8:e5:02:be:
ac:49:1c:9f:7f:4e:0e:7f:95:26:39:0f:8c:c0:34:
7d:b1:f8:f1:5a:db:e3:4e:ae:3b:dc:35:4b:35:8e:
8e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:66:EB:4A:C4:67:32:3C:A1:D6:77:17:55:AF:85:A6:9A:C6:C6:D5
X509v3 Authority Key Identifier:
keyid:7E:5C:85:28:F8:17:87:C4:89:C5:4A:99:38:39:26:9F:5A:6B:1F:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flyFKPgXh8SJxUqZODkmn1prH5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:8f:0d:0d:19:35:af:40:01:aa:1b:42:99:11:83:41:ae:28:
83:14:79:6f:f4:28:b0:45:94:dd:07:d8:86:f8:cf:6d:5a:0d:
ed:08:5e:04:3d:4a:19:ba:4d:90:37:db:e2:1c:f3:d1:c9:d1:
d5:9e:78:f4:87:d6:e8:da:a7:d9:e9:98:dd:d6:54:51:bc:2c:
55:f5:27:42:03:08:16:5b:09:b6:4e:09:5e:4e:8e:b7:5d:f5:
62:f7:08:97:3e:e2:fd:b6:73:fa:12:c6:16:fc:90:36:b1:8f:
17:21:c4:d0:04:d5:fe:2d:5d:a0:67:aa:90:60:0e:ee:46:2a:
46:ea:43:3c:82:0c:e3:3f:a6:cc:ef:fc:1a:c5:a4:c2:f1:7b:
a9:bb:c2:8b:df:70:be:55:22:b3:82:a1:a9:25:80:04:25:22:
6d:fd:25:4c:3a:ff:ec:5a:da:aa:68:14:74:6b:b9:41:0f:ff:
56:a0:d7:22:e4:95:ad:33:b6:20:b6:cd:c5:2f:b3:af:8a:7f:
aa:b0:cd:58:8d:e3:77:62:0e:8a:2e:84:47:23:72:48:90:e6:
e4:e9:9a:27:51:08:72:24:8d:69:46:0b:1b:40:6b:90:26:39:
05:ae:dc:f4:09:18:b9:64:77:ac:73:75:85:13:83:11:b1:c1:
e8:8c:65:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:47 2026 by rpki-client