Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/FyKJy7gXn9846fUyyc1ykbT1xC0.mft
File: FyKJy7gXn9846fUyyc1ykbT1xC0.mft (raw, json)
Hash identifier: 8jpXr4154iBQmO/KlxZFU0snal/zA6sQq8SU5LUlZR4=
Subject key identifier: 1C:D2:B3:60:47:2C:4C:99:31:22:49:45:64:B3:A0:3D:73:7A:C7:1B
Authority key identifier: 17:22:89:CB:B8:17:9F:DF:38:E9:F5:32:C9:CD:72:91:B4:F5:C4:2D
Certificate issuer: /CN=172289cbb8179fdf38e9f532c9cd7291b4f5c42d
Certificate serial: 019E1FECD8D32F1EF831CE64C21D2257690E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FyKJy7gXn9846fUyyc1ykbT1xC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/FyKJy7gXn9846fUyyc1ykbT1xC0.mft
Manifest number: 0EF7
Signing time: Wed 13 May 2026 06:01:16 +0000
Manifest this update: Wed 13 May 2026 06:01:16 +0000
Manifest next update: Thu 14 May 2026 06:01:16 +0000
Files and hashes: 1: FyKJy7gXn9846fUyyc1ykbT1xC0.crl (hash: pVUKxi4zHlDehkcsAHTrtl9Y21awhWCZ1v/nFofnlyo=)
2: G7sgYRFoJFayuqOiJkT4SvmLSC0.roa (hash: s14deS72G3vc/Z7LgUYqSMvuXanb2Xca7svdma5VBoI=)
3: pxS12DAcCwaW3ocjEXURu6Jiigc.roa (hash: ETa0HlY7Y1RquVwxDSRzexuULYuncZkEz0TP+kkZKZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/FyKJy7gXn9846fUyyc1ykbT1xC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/FyKJy7gXn9846fUyyc1ykbT1xC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/FyKJy7gXn9846fUyyc1ykbT1xC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:ec:d8:d3:2f:1e:f8:31:ce:64:c2:1d:22:57:69:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=172289cbb8179fdf38e9f532c9cd7291b4f5c42d
Validity
Not Before: May 13 06:01:16 2026 GMT
Not After : May 14 06:01:16 2026 GMT
Subject: CN=1cd2b360472c4c993122494564b3a03d737ac71b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:0b:fa:54:e8:04:e0:6e:74:48:9f:53:f7:fb:
fa:da:0d:bd:a9:ed:8e:e3:93:6e:b0:cf:aa:45:a2:
22:cd:84:ff:9b:3d:5e:00:40:1a:b7:d2:80:97:5f:
26:fd:f8:18:9f:32:cd:05:02:a2:f2:d4:38:4b:ab:
12:e2:4c:a2:4e:1a:2b:53:eb:f6:05:e4:46:0c:29:
c7:72:c1:ce:e8:b6:56:d1:f7:73:6b:74:8f:e3:98:
b6:6a:2f:ca:d5:63:c0:a1:bb:f3:0f:61:fb:a2:9b:
cf:ca:7c:43:5b:69:aa:2d:c3:24:a6:75:a8:a1:d9:
5a:d8:4e:8d:65:8c:45:d7:83:ae:fd:aa:db:ec:20:
08:29:8f:d7:c2:47:4a:1a:7f:66:e7:34:c0:49:50:
70:0f:bf:35:3b:3f:69:46:ef:bb:e4:eb:f9:e2:04:
4b:26:af:55:eb:f1:bc:62:1f:cc:7e:7e:bc:09:e5:
ae:fd:83:9f:6d:a5:3e:0a:56:c2:d6:c1:4b:4f:af:
c5:2a:8d:5b:ea:2b:3b:ee:be:6c:47:e9:fb:e2:bd:
35:52:d5:e8:47:87:45:34:a6:cf:4b:cc:3b:ad:7e:
8c:1c:e0:4e:63:dd:68:7b:b8:b2:f1:cc:07:45:1b:
6c:ca:9b:2d:ac:e3:38:a1:f2:a3:9b:82:33:bc:c7:
aa:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D2:B3:60:47:2C:4C:99:31:22:49:45:64:B3:A0:3D:73:7A:C7:1B
X509v3 Authority Key Identifier:
keyid:17:22:89:CB:B8:17:9F:DF:38:E9:F5:32:C9:CD:72:91:B4:F5:C4:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyKJy7gXn9846fUyyc1ykbT1xC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/FyKJy7gXn9846fUyyc1ykbT1xC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/FyKJy7gXn9846fUyyc1ykbT1xC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:97:af:df:45:88:c3:e4:47:55:62:d3:f7:33:36:b7:e6:68:
ae:c9:ef:b2:3e:cf:a7:4b:db:d6:4f:63:db:e7:a9:17:14:d2:
83:15:7b:7d:97:b4:cd:cc:c1:fb:1a:a5:3a:e8:b6:89:27:14:
37:94:f1:71:ad:c6:cd:59:91:1b:35:4e:93:41:09:de:af:a7:
76:74:65:2b:c2:33:98:e2:fe:1c:2f:40:21:4d:df:4c:32:cf:
a4:96:bd:35:55:1d:dd:41:e0:2a:df:a7:3b:b6:00:7c:f5:41:
df:9c:a3:de:fb:07:3f:e3:0d:6f:21:7e:f0:8b:b4:06:f8:ff:
7b:49:1c:63:13:d0:81:48:92:eb:65:43:42:07:e5:23:01:73:
a4:0b:3a:ae:53:05:b0:e4:7f:d4:eb:24:11:7f:51:09:33:05:
01:b8:81:5d:50:42:8f:ef:8b:cb:36:a7:c4:97:fa:a1:e9:f3:
e8:6c:48:24:ba:e7:7c:c7:d1:bc:79:39:7f:46:35:93:0b:ed:
4b:4a:d6:38:1c:46:2f:dc:e4:3f:26:e2:89:61:c1:30:02:ce:
50:c6:15:46:c8:04:c6:8e:bc:67:2d:01:90:46:14:74:14:06:
2e:12:6f:8b:19:ff:7b:eb:66:82:16:33:a6:b4:2f:43:82:1c:
1e:28:77:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:02:16 2026 by rpki-client