Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/FyKJy7gXn9846fUyyc1ykbT1xC0.mft
File: FyKJy7gXn9846fUyyc1ykbT1xC0.mft (raw, json)
Hash identifier: 4vIITobHl0kOI8qkILgA+T2BDddrp786MesAWxRCwO0=
Subject key identifier: 71:7B:66:67:8F:55:EC:36:BC:2F:2D:61:1F:E7:D5:44:74:AB:75:BD
Authority key identifier: 17:22:89:CB:B8:17:9F:DF:38:E9:F5:32:C9:CD:72:91:B4:F5:C4:2D
Certificate issuer: /CN=172289cbb8179fdf38e9f532c9cd7291b4f5c42d
Certificate serial: 019F92B63905DA4B1D262A709A15E9DDA751
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FyKJy7gXn9846fUyyc1ykbT1xC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/FyKJy7gXn9846fUyyc1ykbT1xC0.mft
Manifest number: 0FB7
Signing time: Fri 24 Jul 2026 06:00:43 +0000
Manifest this update: Fri 24 Jul 2026 06:00:43 +0000
Manifest next update: Sat 25 Jul 2026 06:00:43 +0000
Files and hashes: 1: FyKJy7gXn9846fUyyc1ykbT1xC0.crl (hash: PpkPfZASYT+X4zd9WsQPfCvsbsAHshVImkoM/IvVy+Q=)
2: G7sgYRFoJFayuqOiJkT4SvmLSC0.roa (hash: s14deS72G3vc/Z7LgUYqSMvuXanb2Xca7svdma5VBoI=)
3: pxS12DAcCwaW3ocjEXURu6Jiigc.roa (hash: ETa0HlY7Y1RquVwxDSRzexuULYuncZkEz0TP+kkZKZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/FyKJy7gXn9846fUyyc1ykbT1xC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/FyKJy7gXn9846fUyyc1ykbT1xC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/FyKJy7gXn9846fUyyc1ykbT1xC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:39:05:da:4b:1d:26:2a:70:9a:15:e9:dd:a7:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=172289cbb8179fdf38e9f532c9cd7291b4f5c42d
Validity
Not Before: Jul 24 06:00:43 2026 GMT
Not After : Jul 25 06:00:43 2026 GMT
Subject: CN=717b66678f55ec36bc2f2d611fe7d54474ab75bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:64:c1:30:14:4d:97:68:20:e6:5c:33:19:d2:
7e:b0:c1:a5:d8:d6:b1:6e:40:73:72:2a:75:7c:4d:
e3:52:8d:f4:c0:2c:3d:4b:be:8b:d3:fc:e9:17:cb:
3f:62:3b:bb:8f:55:70:55:a3:07:96:e7:c9:9c:34:
e3:66:f3:54:20:1d:e7:a7:fd:16:cb:0d:e8:6c:19:
24:51:04:f5:d3:38:7c:01:9b:11:96:2d:a3:41:0b:
f5:6d:67:ad:70:2d:75:0c:49:97:f0:7c:cd:f8:07:
de:a9:e8:ab:4b:4c:02:6b:3c:51:8b:69:4f:00:ae:
1f:51:af:59:9d:a1:ee:1f:0a:99:d3:9a:9a:58:46:
e5:0a:bd:9c:22:07:94:a8:06:2f:0a:6e:6b:72:14:
e6:6b:18:b2:78:3c:b6:52:ac:2e:d4:1d:f6:10:7b:
59:ad:74:be:1d:c6:4b:67:37:19:3f:10:09:36:9f:
8b:97:19:a5:10:13:32:8d:42:7b:6e:67:ae:0b:cf:
ad:23:5c:f8:53:6a:b8:c9:fe:4d:7e:81:03:8e:28:
b7:82:42:bb:be:b5:51:76:1e:7f:6f:99:d0:55:4d:
ca:65:ea:c6:93:18:e7:5e:77:9b:db:dd:4c:97:45:
b7:3b:92:c0:11:6e:bd:16:79:6e:bd:19:8f:59:0a:
59:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:7B:66:67:8F:55:EC:36:BC:2F:2D:61:1F:E7:D5:44:74:AB:75:BD
X509v3 Authority Key Identifier:
keyid:17:22:89:CB:B8:17:9F:DF:38:E9:F5:32:C9:CD:72:91:B4:F5:C4:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyKJy7gXn9846fUyyc1ykbT1xC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/FyKJy7gXn9846fUyyc1ykbT1xC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/FyKJy7gXn9846fUyyc1ykbT1xC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:f4:bc:d3:ab:22:0e:3f:ae:77:02:fc:cc:3f:4e:3f:46:32:
d7:36:7b:63:af:03:73:6c:8f:78:d5:f6:1d:d0:b1:ef:18:04:
42:81:61:2e:3a:a1:3a:42:fe:c2:b5:7d:0c:e8:ca:42:aa:f7:
ab:e3:06:b0:4c:cb:90:01:92:78:38:13:9c:e0:29:2d:7c:b8:
72:95:49:63:ab:39:8e:ee:8d:e1:e0:ee:c7:7c:f3:d3:60:fd:
04:09:3a:ca:ac:27:17:58:97:41:3b:f1:9e:fc:36:22:b2:85:
ac:f0:6c:d6:18:27:5a:08:9f:36:14:d4:46:d6:8e:d9:58:ae:
f1:84:95:bc:a1:0a:c5:eb:27:da:98:ca:70:94:3c:50:34:63:
2c:f4:11:cd:89:e9:e3:48:d2:75:d7:c2:79:3f:df:3c:a2:b3:
6e:cc:fe:26:cb:00:77:d3:ba:7b:74:05:b5:d1:99:20:6e:dd:
fa:0d:87:56:ae:0b:56:84:d5:52:ca:37:04:95:79:e5:3d:af:
7e:c0:68:56:61:12:c3:3f:d2:a5:ba:62:a4:59:cf:d0:91:8c:
4f:8c:f8:14:6b:34:75:66:03:79:62:8e:d3:65:54:e5:2f:68:
00:d4:34:f3:ee:24:8b:f2:a7:10:1d:c2:4a:0f:1b:83:d4:48:
55:0e:31:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+StjkF2ksdJipwmhXp3adRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3MjI4OWNiYjgxNzlmZGYzOGU5ZjUzMmM5Y2Q3MjkxYjRm
NWM0MmQwHhcNMjYwNzI0MDYwMDQzWhcNMjYwNzI1MDYwMDQzWjAzMTEwLwYDVQQD
Eyg3MTdiNjY2NzhmNTVlYzM2YmMyZjJkNjExZmU3ZDU0NDc0YWI3NWJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2TBMBRNl2gg5lwzGdJ+sMGl2Nax
bkBzcip1fE3jUo30wCw9S76L0/zpF8s/Yju7j1VwVaMHlufJnDTjZvNUIB3np/0W
yw3obBkkUQT10zh8AZsRli2jQQv1bWetcC11DEmX8HzN+AfeqeirS0wCazxRi2lP
AK4fUa9ZnaHuHwqZ05qaWEblCr2cIgeUqAYvCm5rchTmaxiyeDy2Uqwu1B32EHtZ
rXS+HcZLZzcZPxAJNp+LlxmlEBMyjUJ7bmeuC8+tI1z4U2q4yf5NfoEDjii3gkK7
vrVRdh5/b5nQVU3KZerGkxjnXneb291Ml0W3O5LAEW69FnluvRmPWQpZ2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHF7ZmePVew2vC8tYR/n1UR0q3W9MB8GA1UdIwQY
MBaAFBciicu4F5/fOOn1MsnNcpG09cQtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnlLSnk3Z1huOTg0NmZVeXljMXlrYlQxeEMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8yODllMzgtYWM5My00ZThiLWEwOGIt
Zjc0YmFhMTJmZGM5LzEvRnlLSnk3Z1huOTg0NmZVeXljMXlrYlQxeEMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni8yODllMzgtYWM5My00ZThiLWEwOGItZjc0YmFhMTJmZGM5
LzEvRnlLSnk3Z1huOTg0NmZVeXljMXlrYlQxeEMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH/S806si
Dj+udwL8zD9OP0Yy1zZ7Y68Dc2yPeNX2HdCx7xgEQoFhLjqhOkL+wrV9DOjKQqr3
q+MGsEzLkAGSeDgTnOApLXy4cpVJY6s5ju6N4eDux3zz02D9BAk6yqwnF1iXQTvx
nvw2IrKFrPBs1hgnWgifNhTURtaO2Viu8YSVvKEKxesn2pjKcJQ8UDRjLPQRzYnp
40jSddfCeT/fPKKzbsz+JssAd9O6e3QFtdGZIG7d+g2HVq4LVoTVUso3BJV55T2v
fsBoVmESwz/SpbpipFnP0JGMT4z4FGs0dWYDeWKO02VU5S9oANQ08+4ki/KnEB3C
Sg8bg9RIVQ4xVw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:21:45 2026 by rpki-client