Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
File: flyFKPgXh8SJxUqZODkmn1prH5Q.mft (raw, json)
Hash identifier: VAJlBeonLCNMO1XPMvjMHEQKIbA337+ShR+u5fJ+sHk=
Subject key identifier: C3:6F:BB:C6:86:E3:B2:17:5F:C3:84:84:68:74:1B:76:22:1F:28:7F
Authority key identifier: 7E:5C:85:28:F8:17:87:C4:89:C5:4A:99:38:39:26:9F:5A:6B:1F:94
Certificate issuer: /CN=7e5c8528f81787c489c54a993839269f5a6b1f94
Certificate serial: 01A0D9BAC5A824C0046A3293CE8118861347
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flyFKPgXh8SJxUqZODkmn1prH5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
Manifest number: 1A73
Signing time: Fri 25 Sep 2026 18:01:31 +0000
Manifest this update: Fri 25 Sep 2026 18:01:31 +0000
Manifest next update: Sat 26 Sep 2026 18:01:31 +0000
Files and hashes: 1: 3VErUqcZv3DSzuiOHFJ4NhVe-Sk.roa (hash: BPPxG6OZWKRPZ5HBoMHDDf4oiJwnIpeguHXGGr8zBaE=)
2: ADyxeKRZORLqwi8LQj6fHp5wGLo.roa (hash: KI7QNZ1tpSlDspBRe6V1C2CDD2eifh8F15Hlgzqa5Lo=)
3: flyFKPgXh8SJxUqZODkmn1prH5Q.crl (hash: p2EpMab4JlfnnuYk2VL1S2SBD9JfzNgVWgifn1LVg3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/flyFKPgXh8SJxUqZODkmn1prH5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:ba:c5:a8:24:c0:04:6a:32:93:ce:81:18:86:13:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e5c8528f81787c489c54a993839269f5a6b1f94
Validity
Not Before: Sep 25 18:01:31 2026 GMT
Not After : Sep 26 18:01:31 2026 GMT
Subject: CN=c36fbbc686e3b2175fc3848468741b76221f287f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:27:64:64:11:75:2e:db:bd:d7:59:a7:02:27:
b7:48:a8:7f:80:6e:24:22:40:93:28:78:43:fe:2b:
db:2e:01:6e:c6:00:e6:fc:28:26:08:f5:7e:dc:11:
e4:63:44:57:1e:31:b0:28:2e:34:23:34:71:5c:64:
57:ed:6f:03:07:cd:b1:9f:54:87:70:f3:d5:48:6a:
de:a1:d6:b7:db:b6:32:6f:0e:94:12:0c:f1:98:2e:
f1:e2:b0:59:4d:85:f7:b3:72:40:c9:07:8f:53:33:
38:bd:33:4c:5a:c3:82:48:97:8b:eb:62:9e:d4:c2:
14:c8:0a:1f:82:c8:17:13:2b:db:48:31:d4:ad:d5:
a4:52:f6:1e:0c:1c:be:30:09:46:ec:d1:38:9f:56:
e5:be:62:7c:68:f7:4a:2f:93:9a:10:8f:11:43:00:
aa:d8:13:27:58:c7:9f:07:0b:c3:bf:d5:a9:65:f0:
04:e8:b5:df:fe:03:27:15:d2:06:c2:c3:bf:a1:89:
c7:bf:24:ab:c3:9b:04:a5:cb:0e:69:e1:03:dd:c7:
fd:1b:51:b3:0b:0f:04:28:99:f5:db:4a:00:26:74:
46:60:cb:24:82:ae:a0:f1:31:f2:0d:cd:7d:ab:eb:
69:e2:64:2f:68:8e:e2:bf:31:1a:00:00:04:a9:99:
22:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:6F:BB:C6:86:E3:B2:17:5F:C3:84:84:68:74:1B:76:22:1F:28:7F
X509v3 Authority Key Identifier:
keyid:7E:5C:85:28:F8:17:87:C4:89:C5:4A:99:38:39:26:9F:5A:6B:1F:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flyFKPgXh8SJxUqZODkmn1prH5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:23:42:c6:c2:6e:f2:36:39:2e:5a:1e:c7:3f:0b:62:5e:cf:
58:74:77:67:a4:3a:4c:c3:f9:66:4f:61:e4:5e:10:70:5a:27:
79:4d:1a:4d:b3:9d:8f:a2:8c:ba:6b:72:2f:16:5f:c5:ca:c0:
83:13:59:e2:c8:62:e2:da:7b:cf:77:8e:4f:ea:e5:7a:cb:1b:
8d:ca:3b:da:75:39:89:0a:73:65:a8:93:56:c8:83:8a:2c:c3:
01:e7:77:3b:e4:07:6a:54:02:b1:a6:c8:a1:1a:12:70:ba:32:
d0:fd:7f:23:19:34:b6:df:9c:c5:7a:f0:89:f2:ca:65:cb:ed:
06:b4:39:52:12:dd:12:da:8a:8d:66:2f:ec:d1:94:a8:1e:33:
ec:32:a6:68:8f:a1:59:e2:05:f2:a9:85:99:db:1e:c5:e2:53:
14:97:90:92:bc:fa:f3:a7:7b:b9:92:8c:92:32:64:32:61:9b:
48:c3:9d:5f:8b:3c:53:20:1e:d4:79:9b:e8:26:19:a4:04:3a:
d2:bd:dc:0f:a7:fe:ee:5e:cd:c7:16:f1:04:c1:1e:e8:a7:29:
30:78:0a:35:23:70:a9:df:fe:41:b8:40:7f:ac:89:56:ed:7a:
df:5a:39:e5:b5:3d:67:72:2a:45:d2:95:65:d0:57:8d:0f:b1:
17:fb:13:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:46:04 2026 by rpki-client