Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
File: flyFKPgXh8SJxUqZODkmn1prH5Q.mft (raw, json)
Hash identifier: xylqVJtpVEXvg4UlDdrNPDzh6mLoSmkM5J67Sp0MPpc=
Subject key identifier: 02:DB:98:EC:09:F4:35:C6:04:B6:32:06:28:AB:EC:E8:FA:FC:78:73
Authority key identifier: 7E:5C:85:28:F8:17:87:C4:89:C5:4A:99:38:39:26:9F:5A:6B:1F:94
Certificate issuer: /CN=7e5c8528f81787c489c54a993839269f5a6b1f94
Certificate serial: 01A1DC827DAEEE23D71EEC676F13371F201D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flyFKPgXh8SJxUqZODkmn1prH5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
Manifest number: 1AF9
Signing time: Sun 15 Nov 2026 00:01:41 +0000
Manifest this update: Sun 15 Nov 2026 00:01:41 +0000
Manifest next update: Mon 16 Nov 2026 00:01:41 +0000
Files and hashes: 1: 3VErUqcZv3DSzuiOHFJ4NhVe-Sk.roa (hash: BPPxG6OZWKRPZ5HBoMHDDf4oiJwnIpeguHXGGr8zBaE=)
2: ADyxeKRZORLqwi8LQj6fHp5wGLo.roa (hash: KI7QNZ1tpSlDspBRe6V1C2CDD2eifh8F15Hlgzqa5Lo=)
3: flyFKPgXh8SJxUqZODkmn1prH5Q.crl (hash: d6EnAFyA/9WgPNJizRwwv6XMr0JCAfRuwPe0Bv+K6x0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/flyFKPgXh8SJxUqZODkmn1prH5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 00:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:82:7d:ae:ee:23:d7:1e:ec:67:6f:13:37:1f:20:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e5c8528f81787c489c54a993839269f5a6b1f94
Validity
Not Before: Nov 15 00:01:41 2026 GMT
Not After : Nov 16 00:01:41 2026 GMT
Subject: CN=02db98ec09f435c604b6320628abece8fafc7873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c2:9a:56:ae:1e:34:ad:35:f1:97:b4:5e:8a:
a8:af:47:4b:62:92:73:53:cf:8f:1d:80:39:71:1a:
b5:21:8a:cf:1e:5f:24:b7:9d:46:58:1b:7c:75:f2:
17:b7:60:01:e4:fe:a1:f9:1b:f0:6d:40:33:02:b5:
41:9c:50:a9:cc:67:f0:48:25:64:fa:bd:b6:f8:93:
bd:a1:81:2a:cd:b5:4c:b2:02:00:bd:03:46:0c:2c:
e7:a5:19:2a:4c:8d:a2:61:d5:9b:02:54:49:67:e7:
33:3e:b0:cf:da:76:ef:7f:31:9a:9d:81:53:78:5c:
6a:3c:36:9f:bb:b4:ec:33:79:05:ca:5b:e4:87:14:
fc:8e:79:d4:6b:55:a1:e8:72:b0:90:27:c1:ba:fa:
e6:18:8c:f9:0a:8a:d5:5d:f5:7a:94:91:b3:98:47:
17:1a:66:5c:1e:78:8b:4d:59:a6:18:e9:c6:04:46:
ec:d9:b6:e5:1d:86:ae:72:0d:79:58:bd:58:37:5c:
aa:f7:23:6f:2e:38:1c:73:b9:04:30:e6:7c:dc:e5:
33:55:a2:9e:f8:f4:45:7b:b8:3c:e7:b6:fe:46:93:
0e:a3:09:0e:58:2d:ad:ce:99:8c:94:61:d7:4b:f8:
c8:65:16:41:44:ca:37:5f:77:34:35:88:0d:e2:21:
c8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:DB:98:EC:09:F4:35:C6:04:B6:32:06:28:AB:EC:E8:FA:FC:78:73
X509v3 Authority Key Identifier:
keyid:7E:5C:85:28:F8:17:87:C4:89:C5:4A:99:38:39:26:9F:5A:6B:1F:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flyFKPgXh8SJxUqZODkmn1prH5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:f0:59:58:6c:c4:93:e3:e7:82:bc:25:1e:82:19:ef:06:29:
ba:09:ce:b9:03:5a:02:15:df:21:b4:ae:17:41:f6:6a:a7:5e:
99:7c:73:f5:cc:67:c8:31:58:03:4f:c1:fc:e2:8d:fe:22:da:
d6:8b:c6:44:a3:98:ff:6c:c3:75:3d:73:8c:35:9f:2a:92:8b:
a4:2c:ed:23:35:24:97:8e:86:41:db:8c:23:f0:1d:51:0e:c4:
c1:ac:a4:81:3f:87:c0:c4:c0:b2:55:ae:2d:15:88:fc:62:7f:
6f:84:53:37:23:17:4a:48:03:45:dd:32:36:6f:45:12:e5:6a:
7a:62:26:0d:53:f7:b2:3c:31:4d:32:3c:25:ef:4e:ae:74:8b:
4b:f1:19:37:40:d2:e0:57:d2:50:0f:6f:11:79:a3:a1:b7:99:
96:c9:5a:19:8c:04:f5:2f:78:2e:fd:c0:36:92:cc:bb:b2:70:
72:10:5c:dc:d6:ec:26:18:a4:5a:a7:e1:cb:ca:86:af:6f:7c:
db:42:44:f4:1e:71:e0:48:27:c5:9e:dc:5f:3c:99:65:67:a5:
87:64:c7:03:5f:36:3f:0f:9d:b2:7d:84:6d:e8:e0:56:44:b3:
9b:d0:01:c0:aa:9b:fe:79:6e:ea:32:79:7a:de:ae:98:d5:e5:
2a:79:94:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 08:45:19 2026 by rpki-client