Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.mft
File: Fl-tQQkoOzO287pT-ug6FF0ZNOI.mft (raw, json)
Hash identifier: BE4gCI52VhnvcSGCuWs3egFn+3MNzwm2KKGt45Daqaw=
Subject key identifier: 9B:ED:66:E5:C1:53:BE:FB:A2:2C:F3:6E:47:9A:9D:0E:65:2A:65:F7
Authority key identifier: 16:5F:AD:41:09:28:3B:33:B6:F3:BA:53:FA:E8:3A:14:5D:19:34:E2
Certificate issuer: /CN=165fad4109283b33b6f3ba53fae83a145d1934e2
Certificate serial: 019F8F4716D38A63D4ABE0ACB59DC587FC92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fl-tQQkoOzO287pT-ug6FF0ZNOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.mft
Manifest number: 06D0
Signing time: Thu 23 Jul 2026 14:00:28 +0000
Manifest this update: Thu 23 Jul 2026 14:00:28 +0000
Manifest next update: Fri 24 Jul 2026 14:00:28 +0000
Files and hashes: 1: 9bJWHvsD-dqBntAB20zO9CBt_Wc.roa (hash: 0W6NRPv1Nxc5Zsqyro6dwCeLDZh0yMAr5QQPzv2LCsU=)
2: Fl-tQQkoOzO287pT-ug6FF0ZNOI.crl (hash: pmvfqmyRFwVcJCz5as17YEnw9nsg0wRG1PGTZQNVKWk=)
3: yPmy2OvPneIoAhLD9gE1TBP3MwA.asa (hash: A9PQOXlu+etQnQ8jd/8UOZro+MQjl0GkxZpOe3jQx6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fl-tQQkoOzO287pT-ug6FF0ZNOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:47:16:d3:8a:63:d4:ab:e0:ac:b5:9d:c5:87:fc:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=165fad4109283b33b6f3ba53fae83a145d1934e2
Validity
Not Before: Jul 23 14:00:28 2026 GMT
Not After : Jul 24 14:00:28 2026 GMT
Subject: CN=9bed66e5c153befba22cf36e479a9d0e652a65f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:41:28:e7:29:64:f0:fc:5d:1d:7d:49:40:d8:
4d:ec:3b:9c:a0:75:3e:c4:84:df:41:5e:e1:c6:fe:
6f:f3:c8:3a:29:f4:31:c9:ee:2d:c4:c2:c8:2a:f4:
b5:0a:2e:71:f4:ac:57:aa:e4:dc:f8:ad:5f:17:e7:
56:9b:5f:46:8a:6d:9a:43:d1:18:eb:15:2f:5c:6c:
15:66:9f:71:b4:b4:24:13:5e:e4:dc:2c:74:24:7a:
72:dc:75:d1:11:57:ef:3c:00:5a:a3:14:42:31:8a:
48:69:b0:86:2c:ca:b3:ec:fa:14:6f:d3:e0:a1:92:
79:0b:d2:c7:6d:13:49:eb:f4:40:8d:a6:ed:70:e5:
b9:75:83:d0:59:2a:f2:bf:5c:e8:f3:a3:0a:2b:14:
40:54:a0:a4:8e:2d:dd:ef:40:bd:d6:c0:e5:2c:d2:
75:ac:8b:0b:57:3e:66:71:71:bf:22:b2:79:24:43:
e5:bc:1e:de:6a:32:63:4d:b7:e0:3e:6f:20:7d:fc:
cb:24:cd:41:2b:cc:26:7e:fa:3a:d4:88:9f:55:94:
7d:12:cb:25:42:34:b5:67:e2:4c:e7:0c:62:3e:2a:
04:83:c5:3d:01:f0:3e:4c:94:59:db:ba:c2:68:24:
ce:6d:d7:2d:79:85:74:62:09:4c:a4:cf:51:7e:3c:
ed:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:ED:66:E5:C1:53:BE:FB:A2:2C:F3:6E:47:9A:9D:0E:65:2A:65:F7
X509v3 Authority Key Identifier:
keyid:16:5F:AD:41:09:28:3B:33:B6:F3:BA:53:FA:E8:3A:14:5D:19:34:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fl-tQQkoOzO287pT-ug6FF0ZNOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:68:ec:47:80:3b:17:23:e2:9f:ea:23:64:4d:8d:a1:61:80:
5e:e2:fa:67:b9:84:fb:ce:50:29:62:17:c8:2a:f2:1c:fb:20:
56:db:98:af:1d:df:c2:08:da:a2:65:a4:d7:db:a6:b2:02:f4:
9a:54:2b:bd:60:6a:19:3c:d5:50:b7:ab:93:ba:19:b2:db:3d:
ae:86:1e:da:7e:21:75:15:13:83:2d:ea:8f:85:a3:85:3e:b6:
89:27:48:5c:86:19:c4:c7:28:20:0b:22:6a:25:dd:d2:ea:4a:
e6:0b:18:01:40:f0:ba:ff:93:1e:d2:a3:4c:df:49:ea:b4:f8:
e6:a0:d4:9e:f3:43:c1:f3:95:61:39:bf:c1:77:b4:ae:9e:a2:
d1:18:8a:f4:d5:78:98:7b:5d:31:29:b2:e2:26:84:6f:f1:a8:
be:60:a2:e6:c9:de:82:bc:9d:ca:14:7e:41:26:de:67:7e:24:
bc:81:33:43:44:38:e9:11:4f:c8:00:d1:ba:f1:e3:85:e5:ca:
46:4d:be:0d:b8:db:3f:24:9a:21:5f:e4:52:e5:88:b3:93:7b:
cd:35:47:53:bc:95:70:fc:19:dc:3c:17:ee:bf:27:9e:d7:fd:
77:ed:0d:1d:8d:55:34:f9:c0:b1:8f:23:ea:17:0e:f5:d7:57:
2f:6e:3f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:08:27 2026 by rpki-client