
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/0e36e6-dfb7-4d02-83b0-562498c68a78/1/FY0qX1LN_xWulqxfTJdhDkRLYrQ.mft
File: FY0qX1LN_xWulqxfTJdhDkRLYrQ.mft (raw, json)
Hash identifier: igd2V8UlJ5ZHhMemh3CRkCfwlzj9m3ti09lqM2li4tk=
Subject key identifier: 80:46:F7:82:3B:AC:02:29:F7:3A:E6:D2:42:01:AF:D3:D8:32:63:7E
Authority key identifier: 15:8D:2A:5F:52:CD:FF:15:AE:96:AC:5F:4C:97:61:0E:44:4B:62:B4
Certificate issuer: /CN=158d2a5f52cdff15ae96ac5f4c97610e444b62b4
Certificate serial: 019E1E35C0DD441FBECAD39773939D19F259
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FY0qX1LN_xWulqxfTJdhDkRLYrQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/0e36e6-dfb7-4d02-83b0-562498c68a78/1/FY0qX1LN_xWulqxfTJdhDkRLYrQ.mft
Manifest number: 01DC
Signing time: Tue 12 May 2026 22:01:39 +0000
Manifest this update: Tue 12 May 2026 22:01:39 +0000
Manifest next update: Wed 13 May 2026 22:01:39 +0000
Files and hashes: 1: 6Qw2qfKOtpd_LKkKsTDZ3ejOc18.roa (hash: bj0QwSywJCHEKu3qq7k1s6hD+djiOxQDSPNiFdM0bYw=)
2: FY0qX1LN_xWulqxfTJdhDkRLYrQ.crl (hash: 1wlwbC6FzmSecUqNPnmknWzoPEb4rKrywSq3blsD2Ek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/0e36e6-dfb7-4d02-83b0-562498c68a78/1/FY0qX1LN_xWulqxfTJdhDkRLYrQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/0e36e6-dfb7-4d02-83b0-562498c68a78/1/FY0qX1LN_xWulqxfTJdhDkRLYrQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/FY0qX1LN_xWulqxfTJdhDkRLYrQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:c0:dd:44:1f:be:ca:d3:97:73:93:9d:19:f2:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=158d2a5f52cdff15ae96ac5f4c97610e444b62b4
Validity
Not Before: May 12 22:01:39 2026 GMT
Not After : May 13 22:01:39 2026 GMT
Subject: CN=8046f7823bac0229f73ae6d24201afd3d832637e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d0:2c:b1:4b:6b:e4:15:50:40:3e:60:29:a2:
e9:39:a8:3f:93:c6:5d:66:d2:d2:7b:15:37:2d:d8:
10:72:7e:85:06:ed:1a:55:17:19:ae:dd:fa:cb:76:
16:23:4c:da:44:d9:18:b3:b4:62:3d:fa:a5:1b:a0:
54:3e:a4:e0:62:e4:3e:02:01:5d:55:e2:4a:7c:b8:
a6:12:37:6c:4a:f8:b8:3b:b2:7b:80:57:75:c0:41:
b4:52:0e:d7:0d:c1:cb:a4:dd:bb:bb:02:6e:f8:15:
4e:47:0f:54:71:d7:95:4c:fb:c6:35:b3:26:43:61:
21:9b:32:fc:cd:fc:07:3c:a0:23:eb:02:97:1a:66:
e8:e5:ad:1e:50:8f:5f:40:41:ac:d4:f9:69:02:20:
b8:0e:66:86:22:d5:4b:04:3b:85:76:6c:13:16:08:
9e:69:d1:3b:4e:71:70:c2:88:ae:9c:bb:c8:5a:6e:
91:42:4c:10:59:76:82:e8:be:d5:ba:9e:e9:07:16:
73:22:35:85:f1:6e:e7:44:61:89:09:03:aa:67:cf:
a3:70:da:d8:9f:de:ee:f1:2d:5c:3e:4a:12:a3:c8:
f9:5e:77:bc:fd:ae:15:8b:87:c0:8f:99:57:dd:4b:
be:d6:f1:b6:e5:46:5b:ed:c3:5f:a6:37:99:81:4a:
de:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:46:F7:82:3B:AC:02:29:F7:3A:E6:D2:42:01:AF:D3:D8:32:63:7E
X509v3 Authority Key Identifier:
keyid:15:8D:2A:5F:52:CD:FF:15:AE:96:AC:5F:4C:97:61:0E:44:4B:62:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FY0qX1LN_xWulqxfTJdhDkRLYrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0e36e6-dfb7-4d02-83b0-562498c68a78/1/FY0qX1LN_xWulqxfTJdhDkRLYrQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0e36e6-dfb7-4d02-83b0-562498c68a78/1/FY0qX1LN_xWulqxfTJdhDkRLYrQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:1f:05:6c:3e:22:6a:13:5d:48:6b:ec:50:3c:b0:69:58:d3:
74:0f:3e:5e:8e:e0:ff:37:84:43:9c:76:85:8f:ab:ac:a0:ab:
11:08:26:0b:7d:05:2b:77:a5:fe:aa:e5:fe:96:91:d2:d5:c8:
f0:86:25:53:10:58:64:f1:0f:be:f8:4b:44:2f:d6:5f:20:b7:
8d:e4:a2:40:13:a7:8a:5c:f9:a3:02:b5:54:c6:cb:47:46:25:
1a:d5:3e:a5:d5:bf:b9:83:09:43:ed:20:ad:3f:93:c4:2f:c3:
c4:58:3f:53:1d:92:1f:59:1b:fd:8e:23:27:13:38:02:e4:c6:
ab:31:e0:b7:af:91:bd:20:4e:ea:ed:80:c6:62:ee:c8:98:11:
5b:40:3e:fe:a6:37:28:f4:55:36:50:46:45:92:e6:96:2d:76:
2f:7c:8c:33:f5:5d:5f:ba:21:ef:bf:c9:48:cc:97:c6:66:70:
c7:a3:57:4a:80:70:03:ee:66:ab:b0:03:14:2f:36:f8:ee:e4:
be:e7:20:93:d7:84:e5:0c:c4:ea:66:ca:e8:4d:17:a2:dd:64:
71:06:33:b2:3d:69:15:23:34:07:08:ab:e4:cc:da:ad:02:3f:
3d:b4:f6:4a:51:cb:1a:97:59:5c:83:30:c7:17:d0:16:85:e3:
a3:7d:07:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:05:58 2026 by rpki-client