Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
File: flyFKPgXh8SJxUqZODkmn1prH5Q.mft (raw, json)
Hash identifier: Z6meAgpNXVKraSFsK6rG7u7x7C5fUXQDPi+ISW2LLC8=
Subject key identifier: BF:69:1E:E6:E8:3E:A3:49:24:0D:1B:97:15:F6:C0:2D:6A:91:60:87
Authority key identifier: 7E:5C:85:28:F8:17:87:C4:89:C5:4A:99:38:39:26:9F:5A:6B:1F:94
Certificate issuer: /CN=7e5c8528f81787c489c54a993839269f5a6b1f94
Certificate serial: 019F935C1AF0AA145C26EE4F74E6DAE9807D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flyFKPgXh8SJxUqZODkmn1prH5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 09:01:54 +0000
Manifest this update: Fri 24 Jul 2026 09:01:54 +0000
Manifest next update: Sat 25 Jul 2026 09:01:54 +0000
Files and hashes: 1: 3VErUqcZv3DSzuiOHFJ4NhVe-Sk.roa (hash: BPPxG6OZWKRPZ5HBoMHDDf4oiJwnIpeguHXGGr8zBaE=)
2: ADyxeKRZORLqwi8LQj6fHp5wGLo.roa (hash: KI7QNZ1tpSlDspBRe6V1C2CDD2eifh8F15Hlgzqa5Lo=)
3: flyFKPgXh8SJxUqZODkmn1prH5Q.crl (hash: 1lPNGCInIZOjNn0ZJQKlZGwcpEOAPv49QGg/CJlhzHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/flyFKPgXh8SJxUqZODkmn1prH5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5c:1a:f0:aa:14:5c:26:ee:4f:74:e6:da:e9:80:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e5c8528f81787c489c54a993839269f5a6b1f94
Validity
Not Before: Jul 24 09:01:54 2026 GMT
Not After : Jul 25 09:01:54 2026 GMT
Subject: CN=bf691ee6e83ea349240d1b9715f6c02d6a916087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:66:ec:1a:85:25:87:23:b2:97:a6:21:d4:d0:
3e:ba:43:b4:45:17:da:99:da:78:3e:58:bc:d9:ab:
2d:93:48:6c:af:ff:e9:13:5a:13:5e:70:a6:4a:99:
e8:28:94:2c:28:ae:65:ff:b6:93:57:31:b8:36:98:
8c:d7:8f:a2:e5:7e:0c:78:58:76:0d:f6:9d:a3:e7:
13:f5:0a:72:3c:67:3d:e1:ec:67:b6:fa:54:07:31:
1a:25:26:ee:65:07:e8:62:96:38:8e:45:3f:c5:3e:
00:5a:24:1d:1a:62:9d:dd:e3:a4:81:c7:4a:76:8f:
3a:14:c0:1b:70:b3:44:26:20:c1:28:6f:a2:09:91:
6a:f0:d9:ca:86:2f:8f:af:1f:94:05:1e:c7:35:c1:
ca:76:4c:d5:96:c8:19:9c:24:8e:96:c5:80:54:f4:
31:56:1d:ed:1f:8d:28:d9:e3:82:0d:26:eb:75:b9:
da:63:c3:44:80:e6:cd:3a:5c:ce:fa:98:2d:62:0b:
53:69:3d:f6:18:16:6b:11:ce:4b:a8:f4:25:3a:ac:
3d:5a:98:ec:09:18:7f:39:36:83:2b:0c:5e:e7:05:
2c:ea:20:dd:70:f5:35:bd:26:59:99:c0:f3:14:7c:
f4:c8:04:a7:4d:94:82:18:2f:5d:de:ee:70:f6:5a:
02:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:69:1E:E6:E8:3E:A3:49:24:0D:1B:97:15:F6:C0:2D:6A:91:60:87
X509v3 Authority Key Identifier:
keyid:7E:5C:85:28:F8:17:87:C4:89:C5:4A:99:38:39:26:9F:5A:6B:1F:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flyFKPgXh8SJxUqZODkmn1prH5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:db:f1:58:02:46:77:df:10:94:b8:5d:dd:06:36:12:d1:23:
e3:d5:b9:14:25:63:39:76:29:ac:f2:93:30:d8:af:01:19:30:
c1:d8:3f:54:26:e0:42:ec:73:63:83:84:38:81:30:8a:22:f7:
87:3c:d9:ca:47:1a:c8:24:23:2b:45:83:8f:68:45:91:d5:59:
7a:16:90:c4:32:dc:2a:a6:8f:fb:3d:4f:e5:05:f8:72:1e:fc:
0f:8c:a6:52:54:7c:53:83:e6:e5:b5:4c:2e:47:12:e2:a8:8e:
e1:8f:b5:d7:bf:35:0f:dc:d2:4d:bd:53:19:d2:1f:d6:44:0e:
3b:b2:f3:9d:28:b0:72:9c:80:3d:be:54:56:5e:a5:f6:37:5a:
88:ed:fa:67:b7:aa:64:4c:de:38:14:2e:c4:06:d8:59:a1:ff:
88:1c:50:74:80:ac:28:6b:53:cf:86:c2:4a:f9:51:6d:f6:7a:
65:4d:5d:9c:4f:c8:e6:d1:45:c7:b0:b4:ae:a2:99:d5:6b:a8:
a2:eb:77:44:fd:40:dc:19:9e:8c:18:9f:c3:71:0c:3b:4e:8d:
0e:aa:33:a9:3e:84:43:09:7d:84:09:2c:4b:1d:e5:29:0e:47:
00:3f:85:b0:3b:37:f1:b0:a9:d2:77:f9:6d:6c:0b:43:89:1b:
99:6f:0d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:17:33 2026 by rpki-client