Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
File: FlnrYEAZPfBoE1CQXmOdDljV-d8.mft (raw, json)
Hash identifier: SEbBytjyDIjsC3wkAJCPZ8a2LgDElcZ3q2b7zWDKcxY=
Subject key identifier: A9:EA:E5:4F:A3:D8:3C:58:03:44:20:2D:9E:FF:7D:24:26:9F:31:E0
Authority key identifier: 16:59:EB:60:40:19:3D:F0:68:13:50:90:5E:63:9D:0E:58:D5:F9:DF
Certificate issuer: /CN=1659eb6040193df0681350905e639d0e58d5f9df
Certificate serial: 01A0D49441D3DFC7DBF70A5FA5C203FD070B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
Manifest number: 18D7
Signing time: Thu 24 Sep 2026 18:01:20 +0000
Manifest this update: Thu 24 Sep 2026 18:01:20 +0000
Manifest next update: Fri 25 Sep 2026 18:01:20 +0000
Files and hashes: 1: Ebw7UmhhiZG_Nrfoble_YWsPVu4.roa (hash: 9BXqjTT23ZUPj2QuWTEKVvPbzIY1hciLXoi7NrQptsU=)
2: FlnrYEAZPfBoE1CQXmOdDljV-d8.crl (hash: YSvKNeiPKxVapOAINtIztZROdXCCP0TuZ4AS6V3tkXY=)
3: aKt1IzaRyYfROpZHibRsZ71BdRE.roa (hash: oXZivLJhewPC3l7955mcOzVeeerdPRVG1F9b3jjovao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 18:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:94:41:d3:df:c7:db:f7:0a:5f:a5:c2:03:fd:07:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1659eb6040193df0681350905e639d0e58d5f9df
Validity
Not Before: Sep 24 18:01:20 2026 GMT
Not After : Sep 25 18:01:20 2026 GMT
Subject: CN=a9eae54fa3d83c580344202d9eff7d24269f31e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5d:d4:6e:c2:22:5f:3c:be:a4:48:8e:8c:3a:
c8:ca:23:58:dd:00:b3:78:99:9d:dd:6e:10:6d:b5:
6d:00:05:3f:7f:0c:fb:a8:a6:95:c0:23:a8:96:5e:
19:ee:6f:25:24:79:14:66:bd:6b:c0:93:15:6a:c3:
07:74:f2:a9:00:4d:21:1c:8b:f2:ce:fd:ae:65:3f:
3d:cb:fc:01:46:39:42:15:7b:c6:ea:48:20:f1:8a:
e3:0b:71:20:a5:a1:90:35:e1:8a:fd:d9:bd:45:f3:
a5:d7:b6:34:a6:aa:ab:a0:45:86:74:46:6c:2a:fb:
43:f9:f6:a2:96:41:d3:09:e0:83:ca:9b:33:42:51:
2f:ce:06:de:36:07:47:c9:c4:c3:77:d6:33:02:2f:
1f:1b:5e:68:a2:9f:7e:16:a1:65:63:da:61:5f:f9:
85:47:10:ab:bf:5b:13:fe:6d:87:63:d1:ce:d8:a7:
24:8a:2c:b2:a4:a0:23:71:71:b8:1c:6c:09:22:72:
98:67:b1:87:dd:dc:18:cd:5d:93:f9:04:05:cc:38:
a8:58:97:b9:31:24:da:2a:53:22:91:25:d0:ee:1d:
16:dc:14:05:17:ee:56:d6:9a:a0:a7:1e:7a:ac:90:
20:b2:6c:bd:80:4a:ee:7b:d0:58:99:bc:c2:68:9b:
5b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:EA:E5:4F:A3:D8:3C:58:03:44:20:2D:9E:FF:7D:24:26:9F:31:E0
X509v3 Authority Key Identifier:
keyid:16:59:EB:60:40:19:3D:F0:68:13:50:90:5E:63:9D:0E:58:D5:F9:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:18:c3:54:28:e6:30:82:1b:b4:f6:8a:7a:b2:8b:58:56:0f:
7e:af:c1:fc:a5:fb:fe:d2:c9:88:82:a2:e6:4e:4e:0d:3d:26:
b3:5f:02:01:d7:fc:77:af:56:58:db:4c:7b:0b:f2:5a:d5:ea:
74:a4:ef:7d:76:d2:a1:b3:63:ff:b9:c1:5f:df:09:55:a6:bb:
37:ff:08:ca:16:1a:df:d4:cf:0e:e2:75:98:0b:1e:5b:59:ed:
67:5e:3e:dd:11:ce:b1:28:f1:f2:b3:c5:ae:cd:8d:52:ad:5a:
4d:1e:e8:58:5e:5c:74:75:39:77:65:d4:bd:e7:10:98:d5:73:
71:8f:e8:7a:ed:25:7b:6e:95:16:3b:68:b6:47:2c:fb:70:be:
d4:75:cb:a7:f6:1d:b3:94:75:0f:cb:87:71:f9:eb:dd:c1:3e:
0c:ef:2d:b5:39:36:9b:e9:bb:92:cb:60:0f:75:b6:61:34:5a:
e5:bc:44:34:c5:ca:3b:58:c6:ba:01:b5:69:ba:37:7e:45:cd:
05:06:98:fd:d1:14:c6:67:82:dd:18:f7:f1:a4:39:c1:7a:cc:
57:fc:db:99:18:cd:b8:5e:43:5d:13:3b:8e:2b:4f:fb:37:e9:
01:96:3c:4b:24:ef:43:1c:58:48:87:ca:83:cc:21:b9:58:95:
a2:3c:11:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDUlEHT38fb9wpfpcID/QcLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2NTllYjYwNDAxOTNkZjA2ODEzNTA5MDVlNjM5ZDBlNThk
NWY5ZGYwHhcNMjYwOTI0MTgwMTIwWhcNMjYwOTI1MTgwMTIwWjAzMTEwLwYDVQQD
EyhhOWVhZTU0ZmEzZDgzYzU4MDM0NDIwMmQ5ZWZmN2QyNDI2OWYzMWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxl3UbsIiXzy+pEiOjDrIyiNY3QCz
eJmd3W4QbbVtAAU/fwz7qKaVwCOoll4Z7m8lJHkUZr1rwJMVasMHdPKpAE0hHIvy
zv2uZT89y/wBRjlCFXvG6kgg8YrjC3EgpaGQNeGK/dm9RfOl17Y0pqqroEWGdEZs
KvtD+failkHTCeCDypszQlEvzgbeNgdHycTDd9YzAi8fG15oop9+FqFlY9phX/mF
RxCrv1sT/m2HY9HO2KckiiyypKAjcXG4HGwJInKYZ7GH3dwYzV2T+QQFzDioWJe5
MSTaKlMikSXQ7h0W3BQFF+5W1pqgpx56rJAgsmy9gErue9BYmbzCaJtbPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKnq5U+j2DxYA0QgLZ7/fSQmnzHgMB8GA1UdIwQY
MBaAFBZZ62BAGT3waBNQkF5jnQ5Y1fnfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmxucllFQVpQZkJvRTFDUVhtT2REbGpWLWQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9mZjUxMzMtY2ExMS00MmRiLWIwM2Qt
NTQ0ODU1Y2M0ZjU3LzEvRmxucllFQVpQZkJvRTFDUVhtT2REbGpWLWQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9mZjUxMzMtY2ExMS00MmRiLWIwM2QtNTQ0ODU1Y2M0ZjU3
LzEvRmxucllFQVpQZkJvRTFDUVhtT2REbGpWLWQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWRjDVCjm
MIIbtPaKerKLWFYPfq/B/KX7/tLJiIKi5k5ODT0ms18CAdf8d69WWNtMewvyWtXq
dKTvfXbSobNj/7nBX98JVaa7N/8IyhYa39TPDuJ1mAseW1ntZ14+3RHOsSjx8rPF
rs2NUq1aTR7oWF5cdHU5d2XUvecQmNVzcY/oeu0le26VFjtotkcs+3C+1HXLp/Yd
s5R1D8uHcfnr3cE+DO8ttTk2m+m7kstgD3W2YTRa5bxENMXKO1jGugG1abo3fkXN
BQaY/dEUxmeC3Rj38aQ5wXrMV/zbmRjNuF5DXRM7jitP+zfpAZY8SyTvQxxYSIfK
g8whuViVojwRvQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 04:02:43 2026 by rpki-client