Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
File: FlnrYEAZPfBoE1CQXmOdDljV-d8.mft (raw, json)
Hash identifier: M9SfVkjRCdRH/zEBWR9pHJi3On/3E1du04oZxTTTjUM=
Subject key identifier: E6:77:D5:13:A1:A5:5B:84:11:7F:66:3C:BF:95:56:01:3B:D7:22:96
Authority key identifier: 16:59:EB:60:40:19:3D:F0:68:13:50:90:5E:63:9D:0E:58:D5:F9:DF
Certificate issuer: /CN=1659eb6040193df0681350905e639d0e58d5f9df
Certificate serial: 019E1F48314FF9F64FD99C66511A08878B27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
Manifest number: 1770
Signing time: Wed 13 May 2026 03:01:25 +0000
Manifest this update: Wed 13 May 2026 03:01:25 +0000
Manifest next update: Thu 14 May 2026 03:01:25 +0000
Files and hashes: 1: Ebw7UmhhiZG_Nrfoble_YWsPVu4.roa (hash: 9BXqjTT23ZUPj2QuWTEKVvPbzIY1hciLXoi7NrQptsU=)
2: FlnrYEAZPfBoE1CQXmOdDljV-d8.crl (hash: C5wvhH75mBHSD2B4tKVt+JkV3PAnYan9DHzJAZDiq8U=)
3: aKt1IzaRyYfROpZHibRsZ71BdRE.roa (hash: oXZivLJhewPC3l7955mcOzVeeerdPRVG1F9b3jjovao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:48:31:4f:f9:f6:4f:d9:9c:66:51:1a:08:87:8b:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1659eb6040193df0681350905e639d0e58d5f9df
Validity
Not Before: May 13 03:01:25 2026 GMT
Not After : May 14 03:01:25 2026 GMT
Subject: CN=e677d513a1a55b84117f663cbf9556013bd72296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cc:1e:3c:dc:c4:13:5d:03:2e:78:5d:19:25:
46:84:72:2d:ac:2e:63:b6:27:9f:22:40:b6:ee:51:
b0:99:f7:f9:37:cc:26:f2:ea:11:b1:d6:7e:10:30:
95:ea:6c:36:96:9d:92:e8:70:66:76:c8:61:21:e8:
50:04:3b:3c:69:74:c1:56:b7:7e:f0:7a:5b:e2:38:
fa:fc:c4:68:55:b7:12:45:e2:80:f1:d1:fd:55:5e:
94:64:71:a5:f8:ec:b7:c5:17:32:97:e1:76:bf:05:
e1:88:72:c5:a0:a0:c0:7a:07:fc:4d:88:5a:93:ca:
a2:a3:a0:03:bc:ac:71:e6:49:12:e8:73:97:f2:4e:
fd:fa:70:ba:34:fc:e0:f6:20:28:c3:1f:18:d1:36:
f0:af:cb:6c:47:f2:b9:79:56:ef:99:db:9b:45:fb:
91:48:86:9a:96:d9:76:10:76:68:9e:52:1b:6f:e8:
13:b1:f9:53:ce:0c:6f:1c:a1:64:bf:dc:1e:74:42:
2c:60:e4:1e:3a:1e:d4:61:c8:2a:32:4b:30:07:60:
48:60:a4:ac:16:6a:79:98:e9:e9:d1:4c:b4:24:96:
18:ab:35:ba:82:07:ce:54:92:49:47:aa:3b:ea:2c:
34:95:5c:49:c4:c4:41:2a:52:a9:f3:4f:48:1a:4c:
aa:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:77:D5:13:A1:A5:5B:84:11:7F:66:3C:BF:95:56:01:3B:D7:22:96
X509v3 Authority Key Identifier:
keyid:16:59:EB:60:40:19:3D:F0:68:13:50:90:5E:63:9D:0E:58:D5:F9:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:1e:91:33:ae:a2:4b:3a:96:86:5f:4f:fe:5e:2a:36:b6:7f:
ff:8c:9a:34:f9:70:f3:8d:91:22:16:ff:c5:3d:b9:07:b0:56:
93:a7:b5:5a:a8:2d:e3:c9:32:36:ea:78:7f:90:94:86:19:dd:
e0:7d:9a:fa:d6:38:1e:d9:a1:dc:bd:85:34:c0:59:7b:0a:6c:
41:89:05:bd:87:54:d3:38:24:d3:82:e7:2e:80:aa:ad:4e:6b:
7b:f5:51:e6:b6:e3:c4:ac:d9:b6:bd:66:96:8a:49:40:4f:1a:
02:81:c9:56:3e:28:9e:2d:39:2e:a6:a5:32:3f:e8:da:3b:c8:
a8:c1:f9:45:49:94:99:f5:b2:6b:03:2c:86:5b:62:50:42:63:
eb:5a:ac:82:3a:4c:81:61:08:1b:0e:ca:3c:75:4d:0b:f6:87:
bb:50:ae:ed:98:28:f9:d7:9f:4a:39:dd:23:26:8a:bf:4f:57:
4d:cc:38:6c:7b:4f:d0:d7:b2:b7:67:26:95:c6:80:8a:ba:07:
b0:2a:4b:a9:f0:54:d4:6d:fe:df:de:e2:f2:f6:2d:e1:a4:96:
c6:45:26:3e:23:9b:4f:23:49:8b:22:87:65:b0:13:b4:b7:d9:
e4:7c:da:d3:dd:66:e8:e6:a0:07:c6:3c:42:7d:cb:33:e3:36:
cf:a6:29:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fSDFP+fZP2ZxmURoIh4snMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2NTllYjYwNDAxOTNkZjA2ODEzNTA5MDVlNjM5ZDBlNThk
NWY5ZGYwHhcNMjYwNTEzMDMwMTI1WhcNMjYwNTE0MDMwMTI1WjAzMTEwLwYDVQQD
EyhlNjc3ZDUxM2ExYTU1Yjg0MTE3ZjY2M2NiZjk1NTYwMTNiZDcyMjk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMwePNzEE10DLnhdGSVGhHItrC5j
tiefIkC27lGwmff5N8wm8uoRsdZ+EDCV6mw2lp2S6HBmdshhIehQBDs8aXTBVrd+
8Hpb4jj6/MRoVbcSReKA8dH9VV6UZHGl+Oy3xRcyl+F2vwXhiHLFoKDAegf8TYha
k8qio6ADvKxx5kkS6HOX8k79+nC6NPzg9iAowx8Y0Tbwr8tsR/K5eVbvmdubRfuR
SIaaltl2EHZonlIbb+gTsflTzgxvHKFkv9wedEIsYOQeOh7UYcgqMkswB2BIYKSs
Fmp5mOnp0Uy0JJYYqzW6ggfOVJJJR6o76iw0lVxJxMRBKlKp809IGkyq0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOZ31ROhpVuEEX9mPL+VVgE71yKWMB8GA1UdIwQY
MBaAFBZZ62BAGT3waBNQkF5jnQ5Y1fnfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmxucllFQVpQZkJvRTFDUVhtT2REbGpWLWQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9mZjUxMzMtY2ExMS00MmRiLWIwM2Qt
NTQ0ODU1Y2M0ZjU3LzEvRmxucllFQVpQZkJvRTFDUVhtT2REbGpWLWQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9mZjUxMzMtY2ExMS00MmRiLWIwM2QtNTQ0ODU1Y2M0ZjU3
LzEvRmxucllFQVpQZkJvRTFDUVhtT2REbGpWLWQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeh6RM66i
SzqWhl9P/l4qNrZ//4yaNPlw842RIhb/xT25B7BWk6e1Wqgt48kyNup4f5CUhhnd
4H2a+tY4Htmh3L2FNMBZewpsQYkFvYdU0zgk04LnLoCqrU5re/VR5rbjxKzZtr1m
lopJQE8aAoHJVj4oni05LqalMj/o2jvIqMH5RUmUmfWyawMshltiUEJj61qsgjpM
gWEIGw7KPHVNC/aHu1Cu7Zgo+defSjndIyaKv09XTcw4bHtP0Neyt2cmlcaAiroH
sCpLqfBU1G3+397i8vYt4aSWxkUmPiObTyNJiyKHZbATtLfZ5Hza091m6OagB8Y8
Qn3LM+M2z6YpHw==
-----END CERTIFICATE-----
Generated at Wed May 13 06:29:42 2026 by rpki-client