Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/FyG3YLYPcilRuSUnqC_9Ol6jhFk.mft
File: FyG3YLYPcilRuSUnqC_9Ol6jhFk.mft (raw, json)
Hash identifier: shR/2K7Yxo9tFBppQ+mz/qsQTyckuewtCdLZDrZ0A8I=
Subject key identifier: 99:3B:EE:66:3E:10:07:22:90:4F:75:7C:AE:83:50:58:98:89:61:50
Authority key identifier: 17:21:B7:60:B6:0F:72:29:51:B9:25:27:A8:2F:FD:3A:5E:A3:84:59
Certificate issuer: /CN=1721b760b60f722951b92527a82ffd3a5ea38459
Certificate serial: 019D254C9C4B88D5415B93008E0548017A1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FyG3YLYPcilRuSUnqC_9Ol6jhFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/FyG3YLYPcilRuSUnqC_9Ol6jhFk.mft
Manifest number: 0112
Signing time: Wed 25 Mar 2026 14:01:10 +0000
Manifest this update: Wed 25 Mar 2026 14:01:10 +0000
Manifest next update: Thu 26 Mar 2026 14:01:10 +0000
Files and hashes: 1: FyG3YLYPcilRuSUnqC_9Ol6jhFk.crl (hash: 0JnV09/Q/zpTGzTUzMbtBg4yWg3f3829YTJHgZ6anu8=)
2: PRSuuvH26xT5-o54onKQLtr_Yyc.asa (hash: oaFOFjQ9m4CifADB9zFA8Nh1K294y+NsTbFx9uaW4rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/FyG3YLYPcilRuSUnqC_9Ol6jhFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/FyG3YLYPcilRuSUnqC_9Ol6jhFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FyG3YLYPcilRuSUnqC_9Ol6jhFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:9c:4b:88:d5:41:5b:93:00:8e:05:48:01:7a:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1721b760b60f722951b92527a82ffd3a5ea38459
Validity
Not Before: Mar 25 14:01:10 2026 GMT
Not After : Mar 26 14:01:10 2026 GMT
Subject: CN=993bee663e100722904f757cae83505898896150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d6:f4:2a:9a:a6:dc:31:6b:f8:b5:b0:af:9c:
ca:b8:c7:06:44:c5:4d:d7:e4:56:ac:f9:91:87:0a:
e5:15:e6:97:15:48:3a:8d:63:f5:f7:5b:45:32:02:
ce:be:c7:70:96:6c:21:8f:15:41:b3:cf:dc:1b:bc:
16:85:cd:df:57:8f:a6:16:c1:af:26:18:6f:c4:42:
17:c7:51:fc:2a:14:6e:5e:fc:49:85:42:d6:cd:d5:
ae:90:e6:8e:50:67:c4:ca:45:0b:1b:2d:c8:c8:d1:
57:9b:a4:95:82:f4:dc:ac:87:9b:1e:0a:f5:1d:44:
74:41:8a:b3:9a:f4:0e:32:10:31:cf:a4:fe:01:58:
6c:73:9c:1d:05:f8:3f:8e:0f:31:11:09:d4:41:88:
a2:0f:be:ef:40:97:47:f9:a7:6d:53:44:af:a3:23:
83:9c:eb:a0:c2:55:f1:14:dd:60:c9:14:f7:3f:26:
d7:0f:76:29:5b:cb:0f:f1:fd:37:06:29:23:39:1e:
2c:f6:82:74:cf:49:57:b4:59:1a:2d:f0:31:af:53:
4d:1e:77:db:35:1a:d0:af:a2:d0:06:45:9b:d2:a7:
d5:24:df:b0:1e:ef:67:bb:6c:4e:96:8a:b0:ce:5d:
5a:f6:29:df:fc:94:ce:75:a4:65:62:96:b7:23:54:
8f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:3B:EE:66:3E:10:07:22:90:4F:75:7C:AE:83:50:58:98:89:61:50
X509v3 Authority Key Identifier:
keyid:17:21:B7:60:B6:0F:72:29:51:B9:25:27:A8:2F:FD:3A:5E:A3:84:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyG3YLYPcilRuSUnqC_9Ol6jhFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/FyG3YLYPcilRuSUnqC_9Ol6jhFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/FyG3YLYPcilRuSUnqC_9Ol6jhFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:09:4d:d6:4f:1c:06:5e:79:82:d2:df:d2:81:03:0b:56:83:
6b:38:85:c3:cb:e0:6e:1f:68:d9:e3:55:61:d2:72:fe:d4:8a:
1f:f9:9e:5b:7c:f0:ff:24:4e:30:a9:22:52:7d:5c:1f:f0:52:
7b:1b:d3:d8:d1:5e:43:87:ce:9e:67:3d:92:15:20:80:2f:d2:
cc:2a:3a:19:84:5c:fe:95:6d:b5:a8:5c:b4:3d:13:da:31:34:
28:74:7e:73:0c:f7:d9:0f:84:56:4d:12:26:12:2c:af:5d:17:
e6:67:f2:1a:4d:64:f5:a1:24:2b:18:de:c3:a4:56:fd:9d:70:
b3:55:09:d1:23:14:08:61:ba:c7:29:3c:6c:26:9d:7b:7b:0e:
50:6d:ae:cd:3c:12:71:ef:a2:43:ca:82:30:33:99:02:da:7e:
5c:99:49:57:df:30:2a:4d:46:2a:dc:c5:1c:de:cb:7c:43:f2:
5d:68:90:24:3b:56:14:74:d6:5a:a3:3e:e5:80:c0:a9:47:6b:
a6:e4:e3:56:b2:e4:19:bb:45:22:4b:e5:7e:c1:44:4a:9a:6a:
26:52:f5:f0:fc:dd:13:4e:d0:ec:b9:b9:f5:15:62:5f:88:1c:
04:d8:a5:5a:b4:41:c7:61:6e:0e:7c:d5:3c:e1:57:47:d0:32:
57:b2:1d:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lTJxLiNVBW5MAjgVIAXodMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3MjFiNzYwYjYwZjcyMjk1MWI5MjUyN2E4MmZmZDNhNWVh
Mzg0NTkwHhcNMjYwMzI1MTQwMTEwWhcNMjYwMzI2MTQwMTEwWjAzMTEwLwYDVQQD
Eyg5OTNiZWU2NjNlMTAwNzIyOTA0Zjc1N2NhZTgzNTA1ODk4ODk2MTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9b0Kpqm3DFr+LWwr5zKuMcGRMVN
1+RWrPmRhwrlFeaXFUg6jWP191tFMgLOvsdwlmwhjxVBs8/cG7wWhc3fV4+mFsGv
JhhvxEIXx1H8KhRuXvxJhULWzdWukOaOUGfEykULGy3IyNFXm6SVgvTcrIebHgr1
HUR0QYqzmvQOMhAxz6T+AVhsc5wdBfg/jg8xEQnUQYiiD77vQJdH+adtU0SvoyOD
nOugwlXxFN1gyRT3PybXD3YpW8sP8f03BikjOR4s9oJ0z0lXtFkaLfAxr1NNHnfb
NRrQr6LQBkWb0qfVJN+wHu9nu2xOloqwzl1a9inf/JTOdaRlYpa3I1SPNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJk77mY+EAcikE91fK6DUFiYiWFQMB8GA1UdIwQY
MBaAFBcht2C2D3IpUbklJ6gv/Tpeo4RZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnlHM1lMWVBjaWxSdVNVbnFDXzlPbDZqaEZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC80NGY0YjYtOTlhNS00YWFkLTk3MTUt
YTY1YTY3MjA3YTU0LzEvRnlHM1lMWVBjaWxSdVNVbnFDXzlPbDZqaEZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC80NGY0YjYtOTlhNS00YWFkLTk3MTUtYTY1YTY3MjA3YTU0
LzEvRnlHM1lMWVBjaWxSdVNVbnFDXzlPbDZqaEZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoQlN1k8c
Bl55gtLf0oEDC1aDaziFw8vgbh9o2eNVYdJy/tSKH/meW3zw/yROMKkiUn1cH/BS
exvT2NFeQ4fOnmc9khUggC/SzCo6GYRc/pVttahctD0T2jE0KHR+cwz32Q+EVk0S
JhIsr10X5mfyGk1k9aEkKxjew6RW/Z1ws1UJ0SMUCGG6xyk8bCade3sOUG2uzTwS
ce+iQ8qCMDOZAtp+XJlJV98wKk1GKtzFHN7LfEPyXWiQJDtWFHTWWqM+5YDAqUdr
puTjVrLkGbtFIkvlfsFESppqJlL18PzdE07Q7Lm59RViX4gcBNilWrRBx2FuDnzV
POFXR9AyV7IdGQ==
-----END CERTIFICATE-----
Generated at Wed Mar 25 22:28:34 2026 by rpki-client