Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
File: flyFKPgXh8SJxUqZODkmn1prH5Q.mft (raw, json)
Hash identifier: Q1ABockLa39q2Gr7clWhJhiuGDKmPabjg9UJDTk/KS8=
Subject key identifier: 10:5C:2C:75:2C:62:D5:D3:04:39:94:2F:20:D8:95:D3:54:4B:AD:99
Authority key identifier: 7E:5C:85:28:F8:17:87:C4:89:C5:4A:99:38:39:26:9F:5A:6B:1F:94
Certificate issuer: /CN=7e5c8528f81787c489c54a993839269f5a6b1f94
Certificate serial: 01A08C7B334E019795656B6A99E4E0264EBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flyFKPgXh8SJxUqZODkmn1prH5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
Manifest number: 1A4B
Signing time: Thu 10 Sep 2026 18:01:19 +0000
Manifest this update: Thu 10 Sep 2026 18:01:19 +0000
Manifest next update: Fri 11 Sep 2026 18:01:19 +0000
Files and hashes: 1: 3VErUqcZv3DSzuiOHFJ4NhVe-Sk.roa (hash: BPPxG6OZWKRPZ5HBoMHDDf4oiJwnIpeguHXGGr8zBaE=)
2: ADyxeKRZORLqwi8LQj6fHp5wGLo.roa (hash: KI7QNZ1tpSlDspBRe6V1C2CDD2eifh8F15Hlgzqa5Lo=)
3: flyFKPgXh8SJxUqZODkmn1prH5Q.crl (hash: kSky+nBF2sxTPIANha4dDN/z7FB1r687Hgq8JmQ7s0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/flyFKPgXh8SJxUqZODkmn1prH5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:7b:33:4e:01:97:95:65:6b:6a:99:e4:e0:26:4e:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e5c8528f81787c489c54a993839269f5a6b1f94
Validity
Not Before: Sep 10 18:01:19 2026 GMT
Not After : Sep 11 18:01:19 2026 GMT
Subject: CN=105c2c752c62d5d30439942f20d895d3544bad99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:cd:f1:a3:6e:cb:96:08:b8:40:e9:d1:9e:22:
14:fb:db:3e:da:60:c0:4d:18:ed:2e:37:8f:5c:f3:
25:8d:3b:3b:5d:bc:7d:5f:83:3b:8c:71:b5:c4:b9:
3a:e7:dc:4f:c9:47:43:a6:84:5f:26:a0:56:cd:d4:
a6:d0:19:4c:bb:ad:cc:37:be:05:48:6b:e2:40:8c:
c2:ef:ca:fe:97:01:c2:bf:f3:e7:ee:52:cb:fb:17:
f9:1b:4a:94:a1:be:f5:0e:15:2f:c7:dd:98:78:2c:
55:02:62:a3:6b:c1:f1:e5:90:c0:47:c5:40:93:ca:
b4:99:c5:4f:a2:c7:9e:6d:79:76:2a:9d:a2:18:41:
b2:0c:26:26:2e:16:ce:0f:54:15:86:b2:3c:d9:71:
62:3c:a2:6e:0c:13:8d:27:51:1c:f7:77:11:02:eb:
8c:aa:d9:36:54:6c:ab:04:36:c3:d9:86:e0:1c:a3:
37:8e:4d:77:fe:0c:3c:fb:0e:28:b3:d8:54:e9:c5:
d3:db:9b:95:7e:f9:3e:59:7b:26:e6:bc:c5:8f:00:
76:62:8b:d2:fb:41:e4:2f:1c:04:63:2f:56:29:0d:
e9:1d:f1:0f:8f:5b:60:58:18:8f:9d:1a:5d:6f:1a:
f9:8f:8d:95:13:75:38:77:c5:ba:98:f1:4a:20:78:
2e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:5C:2C:75:2C:62:D5:D3:04:39:94:2F:20:D8:95:D3:54:4B:AD:99
X509v3 Authority Key Identifier:
keyid:7E:5C:85:28:F8:17:87:C4:89:C5:4A:99:38:39:26:9F:5A:6B:1F:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flyFKPgXh8SJxUqZODkmn1prH5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:2d:8a:fb:0c:43:96:8d:0f:f2:bd:14:7d:1c:f1:f5:24:ec:
73:13:08:c2:27:91:1e:82:ac:76:d3:a8:45:92:09:45:60:6e:
a4:2c:5d:93:09:fc:86:22:11:a4:2c:24:28:cd:22:a3:8a:89:
dc:83:a8:9c:a1:3e:7c:28:f9:c7:cf:3c:71:de:6e:f0:e3:06:
a2:39:43:36:3b:a0:8a:06:8d:4f:8e:dd:ce:6e:07:64:0c:5e:
de:60:bf:6c:bd:97:c8:7f:9a:4e:98:e6:9f:c5:f6:00:a9:e8:
fc:86:ed:1f:68:f0:32:ed:c0:ac:a4:55:36:a9:ec:9f:87:d8:
9c:51:5b:eb:7f:d6:f9:ba:a9:d7:f9:fd:cd:4d:a4:2b:85:af:
4b:ac:ce:84:cd:77:19:d3:69:a1:07:3d:ce:92:c7:d3:7e:a0:
27:ba:f0:5e:8c:70:ae:84:e1:cb:7a:fe:7f:65:89:72:1b:03:
15:ad:a5:b7:e7:4b:b8:23:85:74:12:60:1a:f0:88:a3:26:4d:
0f:94:7f:d6:66:b4:7f:32:4c:b7:4d:45:c6:a7:f6:00:7f:2c:
b8:94:da:19:15:83:45:5b:96:fc:74:43:79:02:8b:3d:2f:8d:
80:cb:52:c4:d7:73:24:ee:ee:2d:00:fa:dd:98:26:de:18:2d:
25:4e:8a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:49:46 2026 by rpki-client