Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/flrIG7zPhS8irI7VLS6S2zHY1gY.mft
File: flrIG7zPhS8irI7VLS6S2zHY1gY.mft (raw, json)
Hash identifier: Fruu/k89B6AGVACQBjurPziRn6srGKhyr+y31cioGMQ=
Subject key identifier: BD:76:34:CF:92:1C:7A:67:A1:D5:38:1A:1B:93:95:1F:C3:98:D7:51
Authority key identifier: 7E:5A:C8:1B:BC:CF:85:2F:22:AC:8E:D5:2D:2E:92:DB:31:D8:D6:06
Certificate issuer: /CN=7e5ac81bbccf852f22ac8ed52d2e92db31d8d606
Certificate serial: 019D2960A34D59954BAD5DACDE17AA85B7E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flrIG7zPhS8irI7VLS6S2zHY1gY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/flrIG7zPhS8irI7VLS6S2zHY1gY.mft
Manifest number: 0652
Signing time: Thu 26 Mar 2026 09:01:32 +0000
Manifest this update: Thu 26 Mar 2026 09:01:32 +0000
Manifest next update: Fri 27 Mar 2026 09:01:32 +0000
Files and hashes: 1: 8crzujhFPcFtbV2lWsb3pVCUfzo.roa (hash: eQSvKYDMqkqsiIoj2XOwpx4q3L0IumCSy//x/1LUkR8=)
2: flrIG7zPhS8irI7VLS6S2zHY1gY.crl (hash: 6Z2zocwPfYKijdP53LjyNG/sP7Mh1KAR9LA6KY2sIew=)
3: t__6136takHeUvRHDalHrBzgXQY.roa (hash: WD8+WaJGfN5reVo0Qs2GlcEq7iUcR3GPBrBgQRmS4a8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/flrIG7zPhS8irI7VLS6S2zHY1gY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/flrIG7zPhS8irI7VLS6S2zHY1gY.mft
rsync://rpki.ripe.net/repository/DEFAULT/flrIG7zPhS8irI7VLS6S2zHY1gY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:a3:4d:59:95:4b:ad:5d:ac:de:17:aa:85:b7:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e5ac81bbccf852f22ac8ed52d2e92db31d8d606
Validity
Not Before: Mar 26 09:01:32 2026 GMT
Not After : Mar 27 09:01:32 2026 GMT
Subject: CN=bd7634cf921c7a67a1d5381a1b93951fc398d751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ab:b8:5e:37:ce:68:bf:01:bc:4a:08:63:c5:
51:37:61:09:a6:74:b4:8d:d0:aa:57:f5:d2:22:97:
9f:14:6f:05:5e:55:bc:ea:9d:95:d9:85:92:4f:bf:
c9:de:ba:e7:59:46:ad:79:de:4a:8f:06:86:e7:c6:
8d:6e:3f:b6:a1:05:0e:73:c5:10:44:9b:4f:d4:42:
21:e2:95:a2:9d:8c:da:fb:bb:d0:f9:0a:5c:ca:18:
1b:f6:2a:63:11:b9:a4:87:ae:59:46:2e:e2:66:7f:
08:f2:22:3d:b1:a5:35:25:79:19:ee:e0:7d:33:5a:
2f:1a:ee:75:74:7d:51:a1:60:42:2a:a1:f2:91:f7:
65:d7:d0:37:f5:74:c0:a6:2b:58:6f:ee:6b:fc:0c:
58:94:84:21:04:17:ac:3d:49:49:43:64:c7:39:af:
54:7f:5f:54:dd:b1:99:99:b4:9c:05:d6:45:75:27:
6f:c0:e9:24:b8:84:67:0b:0d:81:50:05:44:29:c4:
55:58:47:ea:61:28:ce:8e:bd:5c:1f:0a:97:dc:8a:
e4:3c:77:98:58:9c:a8:a7:94:76:8f:7f:43:7c:38:
f2:46:2b:cc:6f:c1:0a:74:34:9f:59:ea:d4:fa:dd:
56:9a:99:1e:82:21:5d:29:4d:f6:6d:54:aa:6d:7e:
a5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:76:34:CF:92:1C:7A:67:A1:D5:38:1A:1B:93:95:1F:C3:98:D7:51
X509v3 Authority Key Identifier:
keyid:7E:5A:C8:1B:BC:CF:85:2F:22:AC:8E:D5:2D:2E:92:DB:31:D8:D6:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flrIG7zPhS8irI7VLS6S2zHY1gY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/flrIG7zPhS8irI7VLS6S2zHY1gY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/flrIG7zPhS8irI7VLS6S2zHY1gY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:5f:05:c3:c9:89:7b:83:c9:f7:aa:16:ca:42:4f:25:9b:dc:
12:ed:ec:e8:e3:e7:e9:22:02:7b:7f:5b:59:80:1c:04:92:69:
39:eb:fa:15:a5:11:54:e2:20:6a:74:df:26:b9:3d:ed:64:64:
c0:15:33:c7:8b:3b:f5:cd:08:b1:87:e8:bc:ce:92:6e:1a:65:
e6:3b:58:12:a8:07:76:79:ac:9d:ee:7a:0c:88:78:e1:af:8f:
2c:89:06:66:1a:9e:49:16:60:d0:72:85:24:db:34:ab:e2:26:
4d:d5:5d:30:d8:ce:02:6b:71:0f:d4:15:7a:5c:f9:22:b8:c1:
be:d7:bd:e5:bd:8d:14:55:6a:2a:a7:88:69:2c:a7:2f:e7:07:
cc:5a:8e:dd:37:b4:ca:17:7e:11:18:61:08:90:c8:45:85:3d:
c9:86:f5:0c:4b:bb:57:67:c0:94:cb:29:04:6f:28:2a:76:66:
ff:e9:dd:57:4c:ef:bb:08:6f:28:a5:94:13:80:4f:89:25:3a:
e3:3e:2f:31:d0:07:4e:62:37:cc:ab:a3:f1:7c:a9:3d:1c:10:
2f:18:3e:11:9d:dd:e3:89:13:d2:a8:91:69:fe:4b:e4:20:bb:
25:d1:1b:fe:63:63:6d:69:ff:65:66:c7:ed:f5:e0:12:cd:0b:
06:d0:ed:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:41:30 2026 by rpki-client