Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
File: flyFKPgXh8SJxUqZODkmn1prH5Q.mft (raw, json)
Hash identifier: tGAj2a+5ug9TBs18zEbeZkoHBJmvFMyw2KTsCEzPG6M=
Subject key identifier: 47:20:4A:10:89:8F:0E:7E:79:EE:3C:C7:3E:C8:B1:87:C3:9F:E2:B4
Authority key identifier: 7E:5C:85:28:F8:17:87:C4:89:C5:4A:99:38:39:26:9F:5A:6B:1F:94
Certificate issuer: /CN=7e5c8528f81787c489c54a993839269f5a6b1f94
Certificate serial: 019D2B4E73A583C93E6AFCA5DA1A0DECE7CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flyFKPgXh8SJxUqZODkmn1prH5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
Manifest number: 188B
Signing time: Thu 26 Mar 2026 18:00:54 +0000
Manifest this update: Thu 26 Mar 2026 18:00:54 +0000
Manifest next update: Fri 27 Mar 2026 18:00:54 +0000
Files and hashes: 1: 3VErUqcZv3DSzuiOHFJ4NhVe-Sk.roa (hash: BPPxG6OZWKRPZ5HBoMHDDf4oiJwnIpeguHXGGr8zBaE=)
2: ADyxeKRZORLqwi8LQj6fHp5wGLo.roa (hash: KI7QNZ1tpSlDspBRe6V1C2CDD2eifh8F15Hlgzqa5Lo=)
3: flyFKPgXh8SJxUqZODkmn1prH5Q.crl (hash: jNQ9O97zWvVJPsTs7xmGPR+S4APBy4eLSBLcnTaSVLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/flyFKPgXh8SJxUqZODkmn1prH5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:73:a5:83:c9:3e:6a:fc:a5:da:1a:0d:ec:e7:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e5c8528f81787c489c54a993839269f5a6b1f94
Validity
Not Before: Mar 26 18:00:54 2026 GMT
Not After : Mar 27 18:00:54 2026 GMT
Subject: CN=47204a10898f0e7e79ee3cc73ec8b187c39fe2b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:eb:aa:c2:c2:c1:dc:97:de:33:ad:48:1e:6c:
8b:d0:d3:00:73:86:6a:2a:f4:6e:3a:48:51:0a:95:
f4:93:98:57:d4:82:65:57:0a:66:bc:5d:14:97:9a:
9f:e8:77:cc:5d:f7:3f:0a:6d:e3:ce:59:05:0b:01:
be:3b:85:01:d8:48:dc:9c:33:d9:10:f7:76:46:9a:
1d:cf:27:6d:1a:7f:50:d7:03:f3:40:c1:f9:0b:dd:
6b:f3:df:ba:a9:94:a7:f6:a0:3b:04:2b:e6:95:32:
aa:06:b1:27:2c:86:4e:6a:36:be:aa:33:2e:b7:19:
33:60:bf:46:15:38:53:aa:aa:95:51:42:52:63:04:
28:a1:d1:bb:d2:44:fc:61:4a:43:fd:66:82:17:11:
53:7a:c7:6d:a3:c4:40:2c:d0:fd:95:1b:e5:bd:b7:
d4:fc:8e:6a:a5:e5:2e:87:47:f8:0a:8a:c0:f4:e2:
dd:c7:e9:02:25:9c:91:55:35:6f:a1:0a:55:0e:44:
23:0b:0f:4e:40:f2:db:8f:f9:7a:7a:2d:9d:d1:a6:
b6:6f:51:91:c9:48:85:70:f9:c2:13:4a:83:f4:0e:
73:44:6e:43:46:86:97:ff:3e:08:6d:ed:9a:0b:00:
22:d8:a1:23:36:dd:92:0f:cd:65:a7:77:a1:f8:c2:
0e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:20:4A:10:89:8F:0E:7E:79:EE:3C:C7:3E:C8:B1:87:C3:9F:E2:B4
X509v3 Authority Key Identifier:
keyid:7E:5C:85:28:F8:17:87:C4:89:C5:4A:99:38:39:26:9F:5A:6B:1F:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flyFKPgXh8SJxUqZODkmn1prH5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:6a:5f:8d:00:d4:fc:17:03:03:7e:dc:b9:3d:70:7b:9c:11:
f9:1e:c3:83:55:0e:dd:2e:90:6f:44:e8:b6:8a:2d:b8:11:c2:
a4:c9:4a:55:93:52:88:f9:eb:e7:e1:78:d5:44:93:33:70:a9:
0e:01:48:85:31:ce:67:26:08:4e:a7:43:f1:e0:9f:b9:9a:9f:
22:d8:6b:6e:61:7d:a6:ad:14:a3:1b:48:62:86:45:78:50:74:
73:bf:15:52:41:23:5d:14:33:fc:50:a9:57:e0:e6:0d:b2:9b:
6a:e0:39:90:de:af:ef:46:d8:b7:19:db:7f:4a:3e:57:24:0d:
57:c8:3e:f1:2d:ce:c8:68:af:1b:4f:a0:d3:fc:33:1d:80:9a:
86:69:cd:31:5d:01:69:7d:7f:08:d8:aa:4a:7e:14:5f:99:f8:
e6:d1:b6:a8:27:17:1b:37:b4:18:1d:49:0c:97:a1:78:e5:0e:
8c:1c:ba:54:06:e7:41:46:f5:c2:0c:69:a0:fd:af:c0:72:3a:
a7:49:e3:d1:cb:b1:c9:40:d2:21:6b:41:9b:46:65:47:f8:de:
49:4b:bf:e5:75:9f:d2:ab:d9:e9:d0:d4:ee:02:ca:f3:83:f4:
c4:ab:77:9f:b2:e8:9c:fa:80:7f:ca:e7:42:a6:3c:29:80:e6:
af:1a:0d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:58:45 2026 by rpki-client