Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.mft
File: FyLpZ4-w1BTS3fvSQgxMdIJj80s.mft (raw, json)
Hash identifier: LRMadUX6USMc/J8YW9YAnNyStj7fZCXg0a2SsMG5pVI=
Subject key identifier: 20:F7:92:27:3A:1F:40:D2:31:E1:CF:1B:24:28:40:0B:61:77:11:E3
Authority key identifier: 17:22:E9:67:8F:B0:D4:14:D2:DD:FB:D2:42:0C:4C:74:82:63:F3:4B
Certificate issuer: /CN=1722e9678fb0d414d2ddfbd2420c4c748263f34b
Certificate serial: 019D28F30CDEA76E9A0A49678DBB781772AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FyLpZ4-w1BTS3fvSQgxMdIJj80s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.mft
Manifest number: 10FB
Signing time: Thu 26 Mar 2026 07:01:50 +0000
Manifest this update: Thu 26 Mar 2026 07:01:50 +0000
Manifest next update: Fri 27 Mar 2026 07:01:50 +0000
Files and hashes: 1: 12e7WnFZjJg5d5fvA7KK7iZMkcY.roa (hash: X98CVhIUdgJwE//yVec86D5pD0Tnuzv1MB8J4RaBu5M=)
2: FyLpZ4-w1BTS3fvSQgxMdIJj80s.crl (hash: o90lwS0JggYQSqMsb1Gi+ETJPAOZCVU9VeUdltM18gY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.mft
rsync://rpki.ripe.net/repository/DEFAULT/FyLpZ4-w1BTS3fvSQgxMdIJj80s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f3:0c:de:a7:6e:9a:0a:49:67:8d:bb:78:17:72:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1722e9678fb0d414d2ddfbd2420c4c748263f34b
Validity
Not Before: Mar 26 07:01:50 2026 GMT
Not After : Mar 27 07:01:50 2026 GMT
Subject: CN=20f792273a1f40d231e1cf1b2428400b617711e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:70:3f:49:86:ce:4d:ea:10:01:7b:ba:dd:13:
1a:5b:e1:e0:73:62:81:b4:0a:2e:9f:44:23:38:39:
76:4c:a3:48:1f:c8:19:a9:bc:c2:60:bc:43:e2:34:
b5:9d:ab:d7:01:d6:fc:38:97:97:fc:96:9c:e0:a2:
c1:7c:84:b3:d2:34:c0:15:a9:14:2a:e7:22:69:62:
d1:3a:09:d8:e9:33:47:c7:c2:45:e4:cf:45:ec:8e:
13:da:be:31:e7:f8:c1:fc:dc:4a:fe:ea:31:eb:83:
f2:7a:f0:cf:88:1c:43:5f:e0:59:ad:63:94:b1:2c:
1e:3f:b7:c3:de:2e:2d:6e:54:62:16:df:9f:b6:3a:
31:6c:c3:9a:eb:84:ca:9b:43:35:bc:9c:15:b0:8a:
b1:ee:5e:6e:69:9b:71:22:a5:be:eb:61:2b:a1:8e:
7c:38:12:b8:d2:8d:f5:d0:2a:60:fd:17:44:14:6a:
a5:5a:ae:d8:26:42:33:0a:94:b0:53:02:ae:f3:99:
7c:d1:57:18:58:fe:6e:67:53:c8:80:99:0e:35:34:
f2:2d:32:da:26:a4:0a:1c:25:6c:2c:14:46:13:35:
e1:23:ba:2d:bc:ac:41:65:a4:06:f3:8d:20:ed:78:
17:8e:00:36:bf:74:3e:7e:70:db:35:43:28:48:1a:
69:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F7:92:27:3A:1F:40:D2:31:E1:CF:1B:24:28:40:0B:61:77:11:E3
X509v3 Authority Key Identifier:
keyid:17:22:E9:67:8F:B0:D4:14:D2:DD:FB:D2:42:0C:4C:74:82:63:F3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyLpZ4-w1BTS3fvSQgxMdIJj80s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:dc:09:16:f8:63:c3:76:1e:9a:d7:7f:41:25:e2:2f:78:6c:
01:63:6c:c8:30:a3:3f:da:50:57:1e:9b:f9:6f:5f:69:8f:b3:
06:c1:43:6f:04:c3:60:09:37:83:4b:d5:60:c7:71:64:77:79:
a1:c2:82:c3:55:94:37:0b:7e:38:50:ab:9e:43:92:5b:98:18:
ee:d8:c9:4b:aa:e6:3f:74:07:a0:34:bb:fb:e4:02:c4:cb:b9:
86:c9:2e:fa:c3:7d:e6:a0:ea:16:4a:34:e8:13:1b:dd:7e:71:
c4:3d:8a:b2:4b:5b:46:b1:84:df:9a:e7:5b:d5:5d:78:55:fe:
46:95:62:37:6d:46:f1:01:09:c4:39:06:40:e9:0c:03:64:2a:
4e:a6:02:9f:fa:09:22:f8:92:27:93:52:72:08:4d:cc:66:e7:
bf:19:cd:63:07:d6:89:d2:cc:19:61:22:72:a2:54:c7:0d:f2:
51:c2:53:39:b5:81:f3:55:b6:dc:f7:d8:bd:ac:bf:f9:20:64:
da:52:70:05:49:b2:ea:dd:3b:08:76:ed:af:fa:8d:f8:a6:82:
d5:40:06:6d:54:07:c1:38:54:81:de:2b:0f:64:97:4e:ec:ee:
cf:bd:f4:60:e9:d2:c9:1d:44:7f:0d:f3:b0:de:ad:30:e1:94:
68:9c:1e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:36:26 2026 by rpki-client