Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/FyG3YLYPcilRuSUnqC_9Ol6jhFk.mft
File: FyG3YLYPcilRuSUnqC_9Ol6jhFk.mft (raw, json)
Hash identifier: FiUXZMWo5l7KHQd+/oB4gVyYhYxyNnDHmc9qwz2YiPk=
Subject key identifier: 68:6C:96:AC:95:FE:57:70:B7:1E:66:19:0A:EE:56:69:AA:3B:48:8D
Authority key identifier: 17:21:B7:60:B6:0F:72:29:51:B9:25:27:A8:2F:FD:3A:5E:A3:84:59
Certificate issuer: /CN=1721b760b60f722951b92527a82ffd3a5ea38459
Certificate serial: 019E1DC7523741D371BE83E20BEA5252BA8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FyG3YLYPcilRuSUnqC_9Ol6jhFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/FyG3YLYPcilRuSUnqC_9Ol6jhFk.mft
Manifest number: 0195
Signing time: Tue 12 May 2026 20:01:02 +0000
Manifest this update: Tue 12 May 2026 20:01:02 +0000
Manifest next update: Wed 13 May 2026 20:01:02 +0000
Files and hashes: 1: FyG3YLYPcilRuSUnqC_9Ol6jhFk.crl (hash: dfucxIXaqG+G3kZiP6Qv0qGLcrYLPK1zXPMYcucbHDI=)
2: Y1PRKyjCPvwdXNp-Fs65Ke41iwc.asa (hash: gAKM4vbSSXwOG7g6sThTXMB1jmEXB9/rJVWB4pw362Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/FyG3YLYPcilRuSUnqC_9Ol6jhFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/FyG3YLYPcilRuSUnqC_9Ol6jhFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FyG3YLYPcilRuSUnqC_9Ol6jhFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:52:37:41:d3:71:be:83:e2:0b:ea:52:52:ba:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1721b760b60f722951b92527a82ffd3a5ea38459
Validity
Not Before: May 12 20:01:02 2026 GMT
Not After : May 13 20:01:02 2026 GMT
Subject: CN=686c96ac95fe5770b71e66190aee5669aa3b488d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:04:51:a3:b5:79:3e:c7:23:7b:46:f4:21:33:
10:13:8d:5f:ec:dd:52:ae:85:2e:e1:05:70:ea:2b:
7d:92:ec:2f:d6:a2:89:b1:8f:95:24:65:a5:1e:d1:
95:71:7b:8d:3d:e6:e1:f9:42:35:cd:e5:a7:22:70:
ab:18:4c:6a:2e:9a:dc:2e:d2:67:5c:ab:95:1f:90:
63:1f:4f:46:b6:f8:4b:18:9a:f1:c3:02:07:5b:39:
de:9e:5e:3f:89:6f:71:55:12:a5:ea:d3:ec:86:e7:
a0:be:59:4c:c7:70:db:02:9f:3d:7c:28:f4:e5:a6:
e5:d1:c1:e4:e3:63:b3:06:3f:51:61:cd:53:88:14:
a5:0b:6c:c3:e1:75:49:5e:d7:29:ef:69:4f:c6:25:
2e:4e:af:63:f7:f5:0a:cd:55:a9:b3:54:b8:b4:50:
5a:52:42:b5:38:39:77:57:a7:1f:49:75:21:cd:3c:
01:db:9b:db:5d:a1:f4:ed:7a:b7:46:cd:14:80:e6:
c5:2d:f2:e5:94:df:61:c1:0e:0e:e8:ed:82:b9:1c:
76:1d:ef:80:cb:c2:82:9a:0f:9a:4d:bd:78:e3:ec:
f7:c5:05:56:d8:2d:f8:f9:4a:b0:a5:85:71:7e:b7:
dc:d3:f2:8d:ca:7d:3b:26:28:1c:b0:10:e6:4d:87:
a5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:6C:96:AC:95:FE:57:70:B7:1E:66:19:0A:EE:56:69:AA:3B:48:8D
X509v3 Authority Key Identifier:
keyid:17:21:B7:60:B6:0F:72:29:51:B9:25:27:A8:2F:FD:3A:5E:A3:84:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyG3YLYPcilRuSUnqC_9Ol6jhFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/FyG3YLYPcilRuSUnqC_9Ol6jhFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/FyG3YLYPcilRuSUnqC_9Ol6jhFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:4c:f8:cb:e4:c7:c9:8e:62:54:80:d1:5a:26:49:ef:14:ca:
d4:c6:a1:83:fe:16:21:2b:70:02:03:43:f9:ee:1e:de:d4:fc:
e1:a1:ef:67:b4:a5:29:de:5b:4b:75:b0:65:d4:05:c8:79:c1:
45:e1:be:c6:69:b3:2c:c0:16:ff:04:d5:ff:cb:bd:55:40:46:
1b:0a:0b:e5:ee:b2:a0:ef:0b:c1:e3:09:f5:03:ae:b4:10:d8:
21:56:71:6b:ef:dc:ef:87:2c:2d:5f:ec:f2:85:a1:d8:0b:b7:
67:a4:81:ce:e5:58:97:3d:37:cc:f4:37:11:f0:90:d3:63:04:
97:bd:d7:5a:ff:92:ab:9c:55:99:be:60:f4:ff:99:3e:bb:cd:
57:59:04:50:e4:82:d8:59:06:b8:4b:9e:e8:76:4e:5d:7c:b2:
66:e3:09:53:8c:68:3b:86:75:40:21:d1:4c:01:24:b9:24:f0:
53:3a:a2:f8:55:62:75:a3:64:2d:60:a8:0e:0f:e0:2b:d8:f7:
6f:16:ea:47:b0:c3:75:a2:9b:d8:63:60:6a:a3:b8:8e:7b:08:
88:34:1b:b0:05:9d:e9:70:f6:e1:ec:4a:4d:c9:db:25:98:f3:
d3:6c:91:d0:cb:6d:4a:7a:3b:55:31:47:78:fa:ed:2b:84:4f:
e5:6b:32:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:01:27 2026 by rpki-client