Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
File: FlnrYEAZPfBoE1CQXmOdDljV-d8.mft (raw, json)
Hash identifier: eea8lWhIl9l0aLeBWCrDG4we5mnCkFupYmK9XOHrIx8=
Subject key identifier: 08:3E:4D:65:EF:87:E0:62:98:CF:96:95:C5:92:6C:88:1B:7A:E1:27
Authority key identifier: 16:59:EB:60:40:19:3D:F0:68:13:50:90:5E:63:9D:0E:58:D5:F9:DF
Certificate issuer: /CN=1659eb6040193df0681350905e639d0e58d5f9df
Certificate serial: 019D28166AE8A033D4BAB94DEBD5FBDAA014
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
Manifest number: 16F0
Signing time: Thu 26 Mar 2026 03:00:50 +0000
Manifest this update: Thu 26 Mar 2026 03:00:50 +0000
Manifest next update: Fri 27 Mar 2026 03:00:50 +0000
Files and hashes: 1: Ebw7UmhhiZG_Nrfoble_YWsPVu4.roa (hash: 9BXqjTT23ZUPj2QuWTEKVvPbzIY1hciLXoi7NrQptsU=)
2: FlnrYEAZPfBoE1CQXmOdDljV-d8.crl (hash: hof/rXrfvyQIjPe0zvXzCn1DQc4tbPYtrhHR7LwLua8=)
3: aKt1IzaRyYfROpZHibRsZ71BdRE.roa (hash: oXZivLJhewPC3l7955mcOzVeeerdPRVG1F9b3jjovao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:6a:e8:a0:33:d4:ba:b9:4d:eb:d5:fb:da:a0:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1659eb6040193df0681350905e639d0e58d5f9df
Validity
Not Before: Mar 26 03:00:50 2026 GMT
Not After : Mar 27 03:00:50 2026 GMT
Subject: CN=083e4d65ef87e06298cf9695c5926c881b7ae127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6d:81:8d:9d:fd:53:11:fc:13:47:7d:97:16:
1f:f3:2b:65:ea:55:28:d2:29:8c:f2:75:5e:29:37:
fb:27:70:55:5d:51:69:72:4d:2d:8e:71:ed:df:49:
36:43:23:fb:95:44:2c:a9:ca:a3:1c:81:4a:3a:18:
70:af:ae:3a:33:f2:ad:f0:a1:09:d4:57:56:39:b8:
11:ee:cc:37:a5:2c:3e:5e:91:ce:e2:36:01:7e:3b:
c7:25:40:94:73:a8:f3:55:f3:82:a0:10:9f:d7:77:
83:ca:4f:9e:0e:da:78:fc:2c:c2:c3:6a:0a:91:8b:
01:24:88:d8:84:d2:38:df:b4:25:aa:15:f9:03:a8:
4a:1f:18:f5:45:e1:98:ca:51:50:a9:fb:a2:47:1c:
a6:7e:5f:ed:2a:35:49:b5:11:88:93:ee:b1:70:48:
4e:bc:af:94:98:c0:c2:9a:3a:84:27:10:b7:03:4c:
14:dd:ca:6c:88:83:54:c8:95:0f:62:59:5a:60:56:
2b:21:31:9b:c6:96:2b:2c:1a:6e:e7:61:1f:3b:68:
3b:74:e3:ea:e6:ea:9f:e0:f0:ea:35:60:82:1d:95:
d2:dd:9b:ee:6f:e5:7e:a6:47:b6:40:4f:82:24:d4:
75:3b:d7:3c:4f:b5:41:8b:ac:4e:f0:1f:f6:03:26:
aa:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:3E:4D:65:EF:87:E0:62:98:CF:96:95:C5:92:6C:88:1B:7A:E1:27
X509v3 Authority Key Identifier:
keyid:16:59:EB:60:40:19:3D:F0:68:13:50:90:5E:63:9D:0E:58:D5:F9:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:c6:2e:0b:2e:19:eb:63:9a:fe:87:01:ea:d0:82:63:b4:eb:
29:a1:77:87:bd:0f:07:6b:38:ce:94:60:4e:8b:9f:05:f0:77:
9d:4d:4d:48:aa:ed:55:a4:10:c3:a6:08:41:af:cf:fa:7a:3f:
d1:62:8c:7f:2c:e8:0c:6b:62:a0:28:48:ed:f3:ca:bd:3f:0f:
d3:c9:19:d8:ca:47:27:89:1a:5e:6a:1c:c1:01:12:d6:3e:b0:
d1:8b:65:f6:d2:30:a4:1d:12:79:b6:95:bc:21:2a:41:84:7b:
85:3a:c4:69:e0:63:85:b0:af:bf:9c:9f:e6:3c:98:cb:07:e7:
5e:d0:15:28:5d:25:f3:60:15:fa:ba:23:e4:6b:32:7c:1f:85:
11:b7:fd:8d:3e:d3:01:df:f0:e7:db:99:85:26:5a:04:66:1c:
93:9c:4f:d9:95:8d:df:54:35:82:0a:62:b5:19:2b:1f:9a:f7:
92:93:49:ac:02:a3:87:67:bc:ee:6d:69:9e:f7:0b:97:88:2c:
02:43:d4:f5:05:af:82:a9:2c:e8:3e:6a:91:2f:5a:dc:cb:81:
69:62:2a:31:47:e0:71:aa:71:c8:8c:f5:b3:f2:6d:c6:86:7f:
10:a8:fb:92:cc:37:cc:47:27:d2:36:66:c4:f9:d0:6b:bb:2a:
50:d4:55:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFmrooDPUurlN69X72qAUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2NTllYjYwNDAxOTNkZjA2ODEzNTA5MDVlNjM5ZDBlNThk
NWY5ZGYwHhcNMjYwMzI2MDMwMDUwWhcNMjYwMzI3MDMwMDUwWjAzMTEwLwYDVQQD
EygwODNlNGQ2NWVmODdlMDYyOThjZjk2OTVjNTkyNmM4ODFiN2FlMTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyW2BjZ39UxH8E0d9lxYf8ytl6lUo
0imM8nVeKTf7J3BVXVFpck0tjnHt30k2QyP7lUQsqcqjHIFKOhhwr646M/Kt8KEJ
1FdWObgR7sw3pSw+XpHO4jYBfjvHJUCUc6jzVfOCoBCf13eDyk+eDtp4/CzCw2oK
kYsBJIjYhNI437QlqhX5A6hKHxj1ReGYylFQqfuiRxymfl/tKjVJtRGIk+6xcEhO
vK+UmMDCmjqEJxC3A0wU3cpsiINUyJUPYllaYFYrITGbxpYrLBpu52EfO2g7dOPq
5uqf4PDqNWCCHZXS3Zvub+V+pke2QE+CJNR1O9c8T7VBi6xO8B/2Ayaq1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAg+TWXvh+BimM+WlcWSbIgbeuEnMB8GA1UdIwQY
MBaAFBZZ62BAGT3waBNQkF5jnQ5Y1fnfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmxucllFQVpQZkJvRTFDUVhtT2REbGpWLWQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9mZjUxMzMtY2ExMS00MmRiLWIwM2Qt
NTQ0ODU1Y2M0ZjU3LzEvRmxucllFQVpQZkJvRTFDUVhtT2REbGpWLWQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9mZjUxMzMtY2ExMS00MmRiLWIwM2QtNTQ0ODU1Y2M0ZjU3
LzEvRmxucllFQVpQZkJvRTFDUVhtT2REbGpWLWQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW8YuCy4Z
62Oa/ocB6tCCY7TrKaF3h70PB2s4zpRgToufBfB3nU1NSKrtVaQQw6YIQa/P+no/
0WKMfyzoDGtioChI7fPKvT8P08kZ2MpHJ4kaXmocwQES1j6w0Ytl9tIwpB0SebaV
vCEqQYR7hTrEaeBjhbCvv5yf5jyYywfnXtAVKF0l82AV+roj5GsyfB+FEbf9jT7T
Ad/w59uZhSZaBGYck5xP2ZWN31Q1ggpitRkrH5r3kpNJrAKjh2e87m1pnvcLl4gs
AkPU9QWvgqks6D5qkS9a3MuBaWIqMUfgcapxyIz1s/JtxoZ/EKj7ksw3zEcn0jZm
xPnQa7sqUNRVXg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:52:36 2026 by rpki-client