Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/flrIG7zPhS8irI7VLS6S2zHY1gY.mft
File: flrIG7zPhS8irI7VLS6S2zHY1gY.mft (raw, json)
Hash identifier: qNV4XElq5tPZAiz74YWYemLvrLTL6pQiGNd7rR85Oz4=
Subject key identifier: 17:AF:EF:F1:88:1D:A8:67:42:D5:E0:A1:AE:A7:26:0D:AD:D4:DD:BF
Authority key identifier: 7E:5A:C8:1B:BC:CF:85:2F:22:AC:8E:D5:2D:2E:92:DB:31:D8:D6:06
Certificate issuer: /CN=7e5ac81bbccf852f22ac8ed52d2e92db31d8d606
Certificate serial: 019D38D368B8B8DD8703567C8573FCD6E11D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flrIG7zPhS8irI7VLS6S2zHY1gY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/flrIG7zPhS8irI7VLS6S2zHY1gY.mft
Manifest number: 065A
Signing time: Sun 29 Mar 2026 09:01:12 +0000
Manifest this update: Sun 29 Mar 2026 09:01:12 +0000
Manifest next update: Mon 30 Mar 2026 09:01:12 +0000
Files and hashes: 1: 8crzujhFPcFtbV2lWsb3pVCUfzo.roa (hash: eQSvKYDMqkqsiIoj2XOwpx4q3L0IumCSy//x/1LUkR8=)
2: flrIG7zPhS8irI7VLS6S2zHY1gY.crl (hash: pDtLhpnthLLXHtoiDzInmWv4Fk8as7myosNBF5fy2eY=)
3: t__6136takHeUvRHDalHrBzgXQY.roa (hash: WD8+WaJGfN5reVo0Qs2GlcEq7iUcR3GPBrBgQRmS4a8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/flrIG7zPhS8irI7VLS6S2zHY1gY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/flrIG7zPhS8irI7VLS6S2zHY1gY.mft
rsync://rpki.ripe.net/repository/DEFAULT/flrIG7zPhS8irI7VLS6S2zHY1gY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:68:b8:b8:dd:87:03:56:7c:85:73:fc:d6:e1:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e5ac81bbccf852f22ac8ed52d2e92db31d8d606
Validity
Not Before: Mar 29 09:01:12 2026 GMT
Not After : Mar 30 09:01:12 2026 GMT
Subject: CN=17afeff1881da86742d5e0a1aea7260dadd4ddbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:84:27:ee:97:8d:74:ce:be:55:25:8b:56:2d:
f1:88:46:99:62:0b:78:7f:f3:b6:02:df:7e:b6:a0:
9f:aa:69:a0:f5:92:64:75:d8:ef:82:2c:01:4e:57:
d3:a6:ce:62:6a:83:2c:05:03:12:4a:bb:d6:31:14:
4a:70:a5:3d:1b:2e:f4:c2:2b:7b:f8:49:c7:6f:4b:
ce:c2:1b:c6:33:f7:52:df:74:b9:d5:c8:6b:ea:41:
8f:3b:48:9d:fd:62:00:c6:bd:24:21:11:75:80:02:
5f:03:4c:f2:2b:09:e0:e2:63:40:80:13:ff:c2:3a:
ac:8d:c0:b9:a3:00:3b:5d:73:e5:ab:7d:8e:95:20:
4b:8a:b8:88:e7:ff:60:4e:c6:bc:94:f2:15:6c:dc:
8e:22:14:a7:7d:93:16:1c:cb:fa:53:6c:69:0e:7e:
b3:a6:b3:a7:96:3a:ec:2e:e5:de:41:80:c4:48:27:
6a:d0:fc:ed:21:9b:9a:5c:3e:35:1c:e3:d2:1e:a1:
8f:a6:0b:d0:45:bd:e1:2a:0f:ea:15:ec:d0:f0:eb:
b8:af:8f:14:8e:12:e7:5a:dd:bc:88:55:8f:da:ad:
38:f5:33:39:3b:b3:e2:ec:b8:04:cb:e7:39:e7:6b:
ba:89:e7:9d:7e:c3:0a:1c:07:06:ab:05:2c:25:f5:
75:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:AF:EF:F1:88:1D:A8:67:42:D5:E0:A1:AE:A7:26:0D:AD:D4:DD:BF
X509v3 Authority Key Identifier:
keyid:7E:5A:C8:1B:BC:CF:85:2F:22:AC:8E:D5:2D:2E:92:DB:31:D8:D6:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flrIG7zPhS8irI7VLS6S2zHY1gY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/flrIG7zPhS8irI7VLS6S2zHY1gY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/flrIG7zPhS8irI7VLS6S2zHY1gY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:e3:9e:6b:e0:6c:94:4a:88:42:c1:d7:65:a1:6c:76:ca:0f:
33:d1:db:b8:2c:ca:a4:75:71:c2:15:eb:45:85:e8:2b:a9:b3:
4f:00:4a:1f:02:a5:9d:c8:75:46:25:02:6a:de:a0:7a:e1:f7:
0a:81:c9:dc:0e:23:38:81:b5:9c:56:9c:31:6b:1f:ff:93:28:
24:7d:87:af:42:68:c6:63:ff:08:68:a0:43:27:75:2d:87:5e:
33:f7:1a:f5:ff:8a:ff:a6:d2:5f:ba:32:27:6f:c9:1f:51:c2:
ad:19:83:80:c3:e7:82:7e:83:02:02:1b:6b:b6:00:49:a1:71:
59:3a:45:c5:12:a8:6f:00:65:54:da:6f:de:89:0f:0f:95:c6:
d1:69:63:cf:7a:b3:e2:25:c3:e7:66:2f:7d:7e:12:d6:5d:33:
a1:3d:1b:2d:df:37:a3:43:61:df:07:f8:1b:c7:f0:34:3c:6a:
f3:ea:93:f6:7e:e0:12:a4:35:80:1c:99:80:4c:08:36:af:ec:
4e:a4:f3:77:1c:fa:32:56:cb:c4:bc:29:d2:ca:54:7f:00:67:
33:9b:64:f8:8a:c9:4d:d0:85:3c:e9:d0:ec:70:77:05:a3:c6:
35:19:c3:89:c7:c3:d5:6f:1e:93:46:3d:47:71:5e:69:93:3d:
88:e1:b4:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:54 2026 by rpki-client