Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.mft
File: Fl-tQQkoOzO287pT-ug6FF0ZNOI.mft (raw, json)
Hash identifier: nY22dylb9IhK2+Hu3cColZJ4e6jkbJHQH0Zrmd/f0VE=
Subject key identifier: 27:A1:0B:E2:C8:82:A7:C8:1C:4A:83:CB:37:8B:2D:0C:DD:EC:39:13
Authority key identifier: 16:5F:AD:41:09:28:3B:33:B6:F3:BA:53:FA:E8:3A:14:5D:19:34:E2
Certificate issuer: /CN=165fad4109283b33b6f3ba53fae83a145d1934e2
Certificate serial: 019D28F25BE7459291C1D752731388A356F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fl-tQQkoOzO287pT-ug6FF0ZNOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.mft
Manifest number: 0591
Signing time: Thu 26 Mar 2026 07:01:04 +0000
Manifest this update: Thu 26 Mar 2026 07:01:04 +0000
Manifest next update: Fri 27 Mar 2026 07:01:04 +0000
Files and hashes: 1: 9bJWHvsD-dqBntAB20zO9CBt_Wc.roa (hash: 0W6NRPv1Nxc5Zsqyro6dwCeLDZh0yMAr5QQPzv2LCsU=)
2: Fl-tQQkoOzO287pT-ug6FF0ZNOI.crl (hash: rvNQafiFjP3xoqa6tZzD0o1AeskHzWJJGbswnBW5ZS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fl-tQQkoOzO287pT-ug6FF0ZNOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:5b:e7:45:92:91:c1:d7:52:73:13:88:a3:56:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=165fad4109283b33b6f3ba53fae83a145d1934e2
Validity
Not Before: Mar 26 07:01:04 2026 GMT
Not After : Mar 27 07:01:04 2026 GMT
Subject: CN=27a10be2c882a7c81c4a83cb378b2d0cddec3913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:6a:6a:9f:f5:b5:3a:68:fe:fd:75:09:2e:48:
4b:7a:38:e4:0e:e7:ed:62:7e:a7:d7:72:af:e2:af:
65:4f:a7:16:d3:2e:30:cf:83:59:1d:2c:1c:36:70:
ed:34:21:85:c7:c3:ea:5c:12:25:12:3f:da:a3:a8:
1c:ad:b8:8a:4d:8d:06:41:2e:d1:b7:f3:75:03:9c:
17:b0:66:c6:d1:2b:fe:53:9f:88:96:77:9f:e8:95:
a3:cc:4d:73:60:f9:c6:da:a5:26:ad:1c:02:cb:5b:
75:77:52:b5:02:c9:8a:97:c1:90:68:3f:09:03:12:
7d:99:53:ba:02:3f:7f:09:24:50:37:3a:be:8f:c1:
5a:a3:21:7f:0d:de:cf:40:1e:2e:f1:93:c0:16:18:
2b:bb:c7:11:a3:47:31:b8:81:7b:83:30:5f:6e:6d:
09:ab:47:1d:4c:9a:9c:54:a2:2e:db:2e:27:00:33:
a8:fc:e2:8c:62:ec:b0:14:ea:fe:f2:51:96:8c:25:
e2:0c:10:50:5f:d8:96:62:ad:cf:9b:e7:07:34:f4:
d2:90:51:ba:a0:aa:4e:ff:a2:08:f7:fc:a2:56:5a:
22:37:a6:0c:23:5a:69:97:79:87:af:db:39:bb:f4:
42:85:89:53:39:85:b0:17:9c:85:aa:3e:98:07:3d:
95:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:A1:0B:E2:C8:82:A7:C8:1C:4A:83:CB:37:8B:2D:0C:DD:EC:39:13
X509v3 Authority Key Identifier:
keyid:16:5F:AD:41:09:28:3B:33:B6:F3:BA:53:FA:E8:3A:14:5D:19:34:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fl-tQQkoOzO287pT-ug6FF0ZNOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:37:56:9e:0f:87:0c:34:0d:ef:d5:b0:b8:5f:85:af:69:cc:
3d:8f:55:02:be:d3:85:ff:73:cb:67:85:55:5a:e2:ea:72:3c:
0e:8d:11:13:51:d8:c0:a5:a0:19:b4:aa:73:cd:06:aa:55:37:
c1:6b:53:fb:d8:71:2a:3e:b7:00:41:06:e3:65:35:f8:97:b4:
d5:ea:c8:05:1a:67:7c:f5:70:4a:fc:e6:27:03:5c:8b:93:73:
f8:7c:69:23:07:5f:e1:9b:c6:5b:ed:86:5a:92:5f:7b:ce:42:
65:4a:c2:2f:3b:3b:68:b9:06:18:cc:bc:b6:cd:de:ff:02:0d:
56:e0:7f:cf:d8:33:7f:80:9f:0e:4c:a8:8f:ed:6c:50:c2:5c:
3f:4a:6e:69:54:25:07:07:3b:f9:e2:ad:a4:09:7a:b9:f1:f8:
47:c0:92:83:33:dc:41:5d:41:03:e9:9d:7e:fa:ac:b6:17:17:
03:d1:c3:f4:de:ff:83:96:86:bb:e0:03:4f:3b:ee:25:73:91:
71:b4:ff:9f:80:6c:12:8b:52:cc:2e:c8:92:b2:3d:09:fa:cd:
0d:06:00:11:de:6c:ed:86:c0:9a:64:ff:a9:b5:88:0e:e5:59:
b2:55:a3:a6:61:66:42:36:2e:71:12:bb:ef:4a:df:65:e3:96:
63:ad:c2:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:00:48 2026 by rpki-client