Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/415d4b-f7a6-49d6-a7ad-ddf0b8b09616/1/FLcYAN3cSX9g-e23gzyUlzq33Bw.mft
File: FLcYAN3cSX9g-e23gzyUlzq33Bw.mft (raw, json)
Hash identifier: iAsCugypGrzlBaHMgGewCwq0L5LUgrl4mKQRijn4TfM=
Subject key identifier: D1:7B:85:43:E6:2F:89:00:50:1B:A5:A7:AC:9D:A1:F2:90:63:10:70
Authority key identifier: 14:B7:18:00:DD:DC:49:7F:60:F9:ED:B7:83:3C:94:97:3A:B7:DC:1C
Certificate issuer: /CN=14b71800dddc497f60f9edb7833c94973ab7dc1c
Certificate serial: 019D29CE852A1DD4D91BE8E0117DC2ADC693
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FLcYAN3cSX9g-e23gzyUlzq33Bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/415d4b-f7a6-49d6-a7ad-ddf0b8b09616/1/FLcYAN3cSX9g-e23gzyUlzq33Bw.mft
Manifest number: 1774
Signing time: Thu 26 Mar 2026 11:01:33 +0000
Manifest this update: Thu 26 Mar 2026 11:01:33 +0000
Manifest next update: Fri 27 Mar 2026 11:01:33 +0000
Files and hashes: 1: CmtFVtO9hzZe40i8krBc2erjmj0.roa (hash: zXgMe4Op7B660E2hvvLX+Q3KPKDasJwTTDrEF1VufuM=)
2: FLcYAN3cSX9g-e23gzyUlzq33Bw.crl (hash: cJoPoPWHMMdfxWg2legxS7DazZxCqYdlF6Nf9FZcyCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/415d4b-f7a6-49d6-a7ad-ddf0b8b09616/1/FLcYAN3cSX9g-e23gzyUlzq33Bw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/415d4b-f7a6-49d6-a7ad-ddf0b8b09616/1/FLcYAN3cSX9g-e23gzyUlzq33Bw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FLcYAN3cSX9g-e23gzyUlzq33Bw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:85:2a:1d:d4:d9:1b:e8:e0:11:7d:c2:ad:c6:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14b71800dddc497f60f9edb7833c94973ab7dc1c
Validity
Not Before: Mar 26 11:01:33 2026 GMT
Not After : Mar 27 11:01:33 2026 GMT
Subject: CN=d17b8543e62f8900501ba5a7ac9da1f290631070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b2:bb:49:07:61:3f:3e:2e:7c:9d:ab:b0:0c:
96:76:58:52:d2:91:87:a4:ba:4e:1f:44:bc:26:cd:
47:a9:e1:8d:02:9f:55:5f:18:36:b5:1d:f3:26:56:
7b:66:41:84:4a:f5:76:9e:1b:ae:47:08:d0:07:c9:
01:97:40:7d:76:ac:e7:89:84:a0:1a:fe:90:c9:ca:
c6:d5:8a:2c:a9:2e:fb:41:77:5d:44:ca:ab:f9:61:
17:42:80:de:18:6a:c3:55:51:bf:9e:88:a5:a6:a2:
a7:65:33:b4:72:48:73:b7:ab:7a:ed:b2:02:3a:7b:
b2:85:75:c3:10:cc:67:ea:14:47:2d:2a:8d:79:75:
2b:22:90:1c:54:45:4e:3d:c2:da:17:ea:3d:b9:cd:
32:4a:c8:30:fa:86:32:b4:52:15:0c:74:f0:e4:f6:
9b:a3:5b:4b:01:4a:9c:4a:bb:71:fe:40:6c:fe:dd:
1a:1f:c1:a3:e3:9c:7a:a4:48:43:66:5e:b1:81:80:
0c:9d:6d:16:5a:f0:76:dc:e7:12:1f:89:a4:66:69:
57:5a:15:d6:c7:59:ce:50:b8:02:a6:87:bd:ae:18:
4f:08:b2:24:8b:ae:90:14:8f:54:48:35:38:68:8b:
11:29:49:2a:d5:c3:a6:fb:a3:d9:7b:ad:61:66:cd:
d8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:7B:85:43:E6:2F:89:00:50:1B:A5:A7:AC:9D:A1:F2:90:63:10:70
X509v3 Authority Key Identifier:
keyid:14:B7:18:00:DD:DC:49:7F:60:F9:ED:B7:83:3C:94:97:3A:B7:DC:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FLcYAN3cSX9g-e23gzyUlzq33Bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/415d4b-f7a6-49d6-a7ad-ddf0b8b09616/1/FLcYAN3cSX9g-e23gzyUlzq33Bw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/415d4b-f7a6-49d6-a7ad-ddf0b8b09616/1/FLcYAN3cSX9g-e23gzyUlzq33Bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:e8:4d:f9:c6:c8:bf:d2:11:66:83:62:eb:ab:6d:e8:6a:4c:
cf:aa:9c:26:4f:f3:a3:19:b6:a8:ef:29:65:fb:db:96:20:0b:
14:9c:96:08:32:99:6c:fb:35:08:d1:04:7f:7f:dd:2f:18:98:
a3:f5:aa:0f:b0:f6:87:b7:7d:1d:45:93:5d:34:7c:22:7d:77:
87:d8:e4:a1:26:1d:b2:dc:a4:d7:a1:86:ff:05:3b:43:2c:ad:
95:d8:9b:52:13:8a:57:17:0e:1c:8c:6c:92:47:58:a4:a7:28:
c3:ca:16:67:f9:f0:69:09:52:e5:ea:70:09:45:5b:61:7b:74:
eb:32:ae:62:c9:9e:e0:ea:79:af:d9:de:0d:98:67:ec:ee:d9:
b0:a3:40:09:aa:c3:84:50:34:f7:12:e7:09:7a:0e:04:77:7f:
71:71:cf:9d:0b:6d:fb:41:04:35:18:b0:c8:a1:68:81:6e:3a:
ce:0a:fc:e4:18:86:54:94:13:d5:8f:ea:8c:52:5d:d1:c5:95:
53:17:93:b1:8e:1d:ad:56:3c:ce:53:59:e1:67:1a:b9:38:6d:
76:85:ff:8e:a2:12:0a:68:4d:38:fb:d5:3d:0e:51:48:07:34:
ed:13:40:c7:a5:59:ed:21:82:d7:be:c5:52:7d:51:67:56:2e:
66:93:84:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:57:47 2026 by rpki-client