
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/FyG3YLYPcilRuSUnqC_9Ol6jhFk.mft
File: FyG3YLYPcilRuSUnqC_9Ol6jhFk.mft (raw, json)
Hash identifier: H0hGf0r/eHNTMzJ6TxUcF8dTcXat0yWPOiQA15DRSkU=
Subject key identifier: D8:31:0C:58:E4:CB:DC:4C:FF:EA:40:11:3C:65:6A:82:69:63:0D:50
Authority key identifier: 17:21:B7:60:B6:0F:72:29:51:B9:25:27:A8:2F:FD:3A:5E:A3:84:59
Certificate issuer: /CN=1721b760b60f722951b92527a82ffd3a5ea38459
Certificate serial: 019F94DB415A3D15ED3862992F0085032D57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FyG3YLYPcilRuSUnqC_9Ol6jhFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/FyG3YLYPcilRuSUnqC_9Ol6jhFk.mft
Manifest number: 0258
Signing time: Fri 24 Jul 2026 16:00:24 +0000
Manifest this update: Fri 24 Jul 2026 16:00:24 +0000
Manifest next update: Sat 25 Jul 2026 16:00:24 +0000
Files and hashes: 1: FyG3YLYPcilRuSUnqC_9Ol6jhFk.crl (hash: OVCnMr+o9edeWAjAIG15FKRr7i7IjEJgGSHhgURDJa4=)
2: oCNYl0B5qMoFF8XmPK7f1Xws4VI.asa (hash: 8vDowMTHL6DoKrD1U42McYTkIGnu+IPbUjRCF114GTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/FyG3YLYPcilRuSUnqC_9Ol6jhFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/FyG3YLYPcilRuSUnqC_9Ol6jhFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FyG3YLYPcilRuSUnqC_9Ol6jhFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:db:41:5a:3d:15:ed:38:62:99:2f:00:85:03:2d:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1721b760b60f722951b92527a82ffd3a5ea38459
Validity
Not Before: Jul 24 16:00:24 2026 GMT
Not After : Jul 25 16:00:24 2026 GMT
Subject: CN=d8310c58e4cbdc4cffea40113c656a8269630d50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4a:b7:b5:cb:54:e6:4e:f5:38:11:ed:81:3e:
42:d2:6c:80:19:cd:3d:a7:9a:e3:8b:9c:0b:38:d9:
e3:2d:ec:28:24:00:bf:e3:77:59:f5:2e:1d:42:39:
b1:a1:b5:78:8c:50:27:d5:38:69:86:7e:51:38:ee:
24:30:48:9c:54:fb:f6:c1:0c:69:10:b8:80:51:98:
a5:7e:ff:4f:36:b3:99:b3:38:07:b9:00:53:8c:fc:
e2:56:57:dc:96:40:1b:cf:97:75:62:e1:ce:c5:b7:
83:16:cf:bc:16:90:3e:71:9c:e1:ab:83:d4:84:b4:
9f:f8:13:44:52:fe:fc:a5:ef:ae:41:82:81:d7:14:
1b:7d:4e:e7:90:40:ee:fb:05:c2:af:a4:7a:27:98:
08:b2:9e:80:b5:be:58:b3:b6:36:3f:bb:b3:2f:62:
d9:38:de:56:98:db:36:bb:63:d8:8c:43:e9:8d:b6:
71:2b:6c:66:32:48:a1:c6:3d:b3:94:99:41:f0:6c:
2b:ff:30:98:a5:04:58:43:07:67:70:97:86:ed:ce:
ef:b4:3f:fc:9b:d2:5b:28:1c:6a:d9:41:e5:07:68:
77:a5:9f:31:9f:80:c9:ff:db:59:b3:1d:3b:6c:30:
80:00:d6:02:d7:e1:9c:29:0e:bc:fa:d7:94:64:57:
68:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:31:0C:58:E4:CB:DC:4C:FF:EA:40:11:3C:65:6A:82:69:63:0D:50
X509v3 Authority Key Identifier:
keyid:17:21:B7:60:B6:0F:72:29:51:B9:25:27:A8:2F:FD:3A:5E:A3:84:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyG3YLYPcilRuSUnqC_9Ol6jhFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/FyG3YLYPcilRuSUnqC_9Ol6jhFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/FyG3YLYPcilRuSUnqC_9Ol6jhFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:91:6a:ab:02:de:99:25:3b:36:17:e1:66:76:e0:40:73:17:
4b:f8:a0:7b:8c:26:28:6c:9d:40:c2:0d:a1:45:37:35:4b:15:
32:e1:7c:3a:8b:34:96:ae:b1:75:80:44:c4:ed:59:60:33:c3:
63:6c:d8:a6:15:30:f8:e8:c2:fe:de:53:24:77:82:21:73:33:
22:30:04:37:45:3e:0d:e7:70:f8:60:5f:ed:01:78:6e:2e:2c:
18:fd:28:59:0b:f5:48:31:58:db:c5:e2:02:2a:4e:5e:70:fc:
f5:14:e0:46:96:fe:f8:cc:aa:7b:69:10:32:3f:6b:43:9b:b2:
39:3c:6e:d2:0c:c9:34:37:a8:89:91:10:e6:8a:6c:83:4f:2f:
58:88:42:30:8e:53:4b:01:49:72:3c:83:f6:eb:52:a5:0a:0c:
c4:ba:5b:1f:d4:92:d4:2c:52:2d:c6:e2:b8:d4:69:46:b3:6e:
2a:c6:2a:51:b2:70:04:4a:a0:e1:b4:d7:ca:83:32:c3:3f:1c:
b2:b8:df:ea:84:96:78:7a:24:66:b1:54:f5:5f:e8:a5:41:e7:
61:9b:79:fe:09:dd:ac:13:14:83:8f:6b:8d:55:d9:88:2f:aa:
b6:67:ce:ad:4b:42:3c:51:85:e5:3c:79:22:e7:96:04:48:c4:
cb:e0:a8:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:26:48 2026 by rpki-client