Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/FyKJy7gXn9846fUyyc1ykbT1xC0.mft
File: FyKJy7gXn9846fUyyc1ykbT1xC0.mft (raw, json)
Hash identifier: 0QwPT1n8ohawvLVQqb7nSnkA11fV8nviJ+j0828UAks=
Subject key identifier: 39:29:46:E4:5F:A2:39:1B:4C:9F:C9:41:02:D3:E8:29:87:6E:14:BD
Authority key identifier: 17:22:89:CB:B8:17:9F:DF:38:E9:F5:32:C9:CD:72:91:B4:F5:C4:2D
Certificate issuer: /CN=172289cbb8179fdf38e9f532c9cd7291b4f5c42d
Certificate serial: 019D2AA9B6CA6DE13194B5E8501D9B34C56D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FyKJy7gXn9846fUyyc1ykbT1xC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/FyKJy7gXn9846fUyyc1ykbT1xC0.mft
Manifest number: 0E78
Signing time: Thu 26 Mar 2026 15:00:58 +0000
Manifest this update: Thu 26 Mar 2026 15:00:58 +0000
Manifest next update: Fri 27 Mar 2026 15:00:58 +0000
Files and hashes: 1: FyKJy7gXn9846fUyyc1ykbT1xC0.crl (hash: 6Xm9I0MjecJUE4MQHl619Lv4jl7hbjUpGNoprtT6cbI=)
2: G7sgYRFoJFayuqOiJkT4SvmLSC0.roa (hash: s14deS72G3vc/Z7LgUYqSMvuXanb2Xca7svdma5VBoI=)
3: pxS12DAcCwaW3ocjEXURu6Jiigc.roa (hash: ETa0HlY7Y1RquVwxDSRzexuULYuncZkEz0TP+kkZKZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/FyKJy7gXn9846fUyyc1ykbT1xC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/FyKJy7gXn9846fUyyc1ykbT1xC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/FyKJy7gXn9846fUyyc1ykbT1xC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:b6:ca:6d:e1:31:94:b5:e8:50:1d:9b:34:c5:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=172289cbb8179fdf38e9f532c9cd7291b4f5c42d
Validity
Not Before: Mar 26 15:00:58 2026 GMT
Not After : Mar 27 15:00:58 2026 GMT
Subject: CN=392946e45fa2391b4c9fc94102d3e829876e14bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:8b:e3:22:11:71:48:15:a9:8c:9e:19:6a:03:
06:a8:48:36:b0:23:a0:8f:89:1a:0a:f3:d1:dc:6d:
4f:d4:6c:65:fd:39:48:4b:c4:77:1b:66:f6:fc:90:
01:f6:50:24:5b:7f:60:3a:0f:8c:57:fa:0d:96:e1:
a2:89:a0:17:8e:b1:0a:c4:ea:ed:3e:f0:c0:12:32:
f1:70:1e:78:12:77:0e:ad:e5:14:66:a4:51:63:f9:
13:c2:69:d5:3f:da:c5:89:73:92:d5:14:6a:59:d2:
d1:f8:9a:c6:19:70:ce:fb:cd:d4:71:c7:3b:01:6e:
0a:08:61:9b:0d:f0:d1:31:a2:be:3b:74:28:84:83:
0d:55:ac:ce:53:63:05:f9:36:1b:ed:3e:dd:29:1d:
20:97:be:4d:77:fc:58:4a:1f:fa:cf:39:f0:93:e6:
93:50:d6:2e:ed:f2:e2:4c:f2:fc:47:46:e0:e2:7e:
19:1a:bb:fe:51:e3:ed:1e:ea:34:cb:ee:f3:65:3e:
b5:91:68:e2:0a:25:d6:26:72:62:16:cf:4d:81:c5:
95:93:1f:60:e3:58:c5:81:37:7c:0c:43:d9:84:eb:
50:f6:59:a9:8c:26:ef:91:13:27:39:c7:d6:16:31:
8b:4c:62:84:3b:46:40:78:e3:c0:b4:53:c4:98:a5:
17:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:29:46:E4:5F:A2:39:1B:4C:9F:C9:41:02:D3:E8:29:87:6E:14:BD
X509v3 Authority Key Identifier:
keyid:17:22:89:CB:B8:17:9F:DF:38:E9:F5:32:C9:CD:72:91:B4:F5:C4:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyKJy7gXn9846fUyyc1ykbT1xC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/FyKJy7gXn9846fUyyc1ykbT1xC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/FyKJy7gXn9846fUyyc1ykbT1xC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:3c:52:0f:b5:4a:34:dd:0a:76:f4:f8:01:f7:91:a8:95:d9:
09:fb:7c:22:d3:e8:59:7b:8f:df:78:3f:95:50:a5:fd:35:3e:
83:11:f2:1b:a6:94:f9:2f:02:41:34:34:a8:cd:62:e1:2b:ae:
20:49:18:3e:73:a9:2a:94:63:58:39:d4:63:66:55:6c:91:8f:
45:f5:99:7e:77:a0:0c:81:9f:05:ca:46:e4:8a:9e:18:6b:80:
a1:99:5b:78:68:d0:ea:32:0d:0f:e0:49:fb:19:fc:03:9d:a4:
40:b1:89:cf:87:8a:4c:ae:57:03:a6:76:3d:7b:99:64:4e:5c:
7c:05:3b:29:3d:e9:dd:ec:11:42:5f:b3:55:5b:93:18:0b:57:
72:ef:fb:9b:0e:4c:13:89:5e:55:71:66:d7:59:fd:dc:72:c5:
04:ae:54:a5:1e:8f:6f:79:da:b7:a1:ba:22:2e:51:4c:0c:d3:
30:80:c7:7b:c8:1a:5c:6f:16:a7:70:95:2b:9f:c5:2a:84:b8:
b5:a3:3e:8f:6a:78:1b:de:98:c8:db:db:7c:99:f5:8b:e4:4b:
5d:35:fa:16:fe:a2:14:cc:28:df:c3:81:91:61:f0:3d:55:e0:
ec:47:4a:72:0e:e2:a3:07:1c:4b:90:9a:84:08:81:22:fb:9d:
4a:c2:a9:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:26:42 2026 by rpki-client