Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.mft
File: E-8y2L8VPATGOTviTwYyQ_fop-I.mft (raw, json)
Hash identifier: nZjgK0LU+i/enS2MIPhRfg+EVtlNqM9LUPdf7AytV6M=
Subject key identifier: 17:3A:D6:05:B6:83:0B:0E:2F:DD:A6:4A:0D:08:A4:3F:5A:36:32:66
Authority key identifier: 13:EF:32:D8:BF:15:3C:04:C6:39:3B:E2:4F:06:32:43:F7:E8:A7:E2
Certificate issuer: /CN=13ef32d8bf153c04c6393be24f063243f7e8a7e2
Certificate serial: 019D2AA9F1222304B7D28E78FDE226443F3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-8y2L8VPATGOTviTwYyQ_fop-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.mft
Manifest number: 0AEC
Signing time: Thu 26 Mar 2026 15:01:13 +0000
Manifest this update: Thu 26 Mar 2026 15:01:13 +0000
Manifest next update: Fri 27 Mar 2026 15:01:13 +0000
Files and hashes: 1: E-8y2L8VPATGOTviTwYyQ_fop-I.crl (hash: thC+VuOszf7Efwg2ZmGUGaiDSBrh42ayLaQTVK9j9IM=)
2: gXqLoCjch24SvYMMr4ERE1p3TXY.roa (hash: iUQ1Oys+V4y+EkeTDwfkNa5H0Gsu8L8N4uEAk+c5TDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/E-8y2L8VPATGOTviTwYyQ_fop-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:f1:22:23:04:b7:d2:8e:78:fd:e2:26:44:3f:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ef32d8bf153c04c6393be24f063243f7e8a7e2
Validity
Not Before: Mar 26 15:01:13 2026 GMT
Not After : Mar 27 15:01:13 2026 GMT
Subject: CN=173ad605b6830b0e2fdda64a0d08a43f5a363266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8b:43:43:37:08:00:23:d1:12:0f:b3:b2:c4:
4e:7b:95:26:78:ff:95:56:7f:bc:f2:c0:11:43:f5:
91:c2:94:60:08:ed:e7:58:58:07:68:d3:3a:12:32:
15:9f:0b:35:a3:7e:c5:f1:3c:da:27:3d:c6:ce:e6:
c3:8f:cc:5b:eb:ff:6a:9c:f3:e9:89:48:43:a9:2a:
5a:54:a4:b2:29:59:9a:03:69:a1:18:13:15:59:f3:
06:c5:96:71:e0:ee:1e:26:0a:6b:24:b2:55:a7:4a:
05:59:f2:13:bd:22:cf:c4:b1:39:e6:8f:01:57:bf:
de:a8:7c:01:2a:b5:3e:9b:08:95:de:4f:cd:c6:92:
94:b0:ae:15:ee:6f:70:b3:80:11:d5:f8:5d:f7:86:
1a:be:b1:ad:f6:f5:11:3e:c4:cd:7f:7a:6d:77:21:
a1:bc:d6:57:81:c8:71:3f:91:c0:0e:03:42:91:dd:
d7:12:97:8e:ab:f5:c1:4a:0b:d9:46:2a:1d:f6:3b:
f8:48:e1:6e:f3:d0:00:03:6e:7f:c6:61:09:27:62:
96:61:1f:d4:1a:5b:e1:9a:71:82:f4:84:e7:a3:c6:
92:3f:c3:06:a4:54:9a:9c:e2:66:f8:94:b7:8d:68:
b5:92:a5:4e:78:56:f9:92:e1:30:35:52:e6:22:fc:
14:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:3A:D6:05:B6:83:0B:0E:2F:DD:A6:4A:0D:08:A4:3F:5A:36:32:66
X509v3 Authority Key Identifier:
keyid:13:EF:32:D8:BF:15:3C:04:C6:39:3B:E2:4F:06:32:43:F7:E8:A7:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-8y2L8VPATGOTviTwYyQ_fop-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:b3:0a:01:32:f4:19:31:2b:4e:4e:42:0f:2c:0e:ef:c2:b7:
d4:c9:d7:b7:13:e0:d1:cf:d0:79:26:7b:4a:47:f9:4a:5d:70:
4c:a4:54:e2:34:de:6c:ca:f7:d4:03:fc:bb:b8:41:b3:15:b9:
ae:6c:24:e1:67:1f:1c:d0:98:bd:af:cc:13:6c:01:fb:69:22:
2e:b8:99:5a:5a:b2:c3:3c:ac:23:9d:00:87:2b:aa:a9:69:02:
b7:54:c8:af:ff:43:26:74:6e:ee:6f:b6:78:16:5a:20:e4:e5:
e8:ec:5b:02:73:97:e5:3c:ff:75:cb:d7:1a:c2:12:1b:13:de:
cc:6f:06:51:c0:0d:9a:a7:c6:07:5e:dc:c9:b1:88:c2:69:bd:
aa:dd:c8:10:b4:8c:0b:10:bd:ee:ae:f9:76:8d:e7:53:70:85:
d7:46:72:d2:20:0c:7a:35:17:38:68:69:37:f1:a1:a0:e4:df:
fa:5c:93:01:54:81:b3:f5:56:54:ab:8f:f2:ba:06:48:1f:53:
66:e0:a5:4d:a4:af:7a:62:15:7b:ee:a8:c4:b8:c9:f9:0a:58:
e5:b8:82:69:af:85:25:0a:56:4a:fe:ec:04:be:d2:4c:97:0b:
48:fa:90:9a:21:ef:e8:3d:00:7f:52:53:fe:89:23:db:fb:a6:
d0:49:16:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qqfEiIwS30o54/eImRD88MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZWYzMmQ4YmYxNTNjMDRjNjM5M2JlMjRmMDYzMjQzZjdl
OGE3ZTIwHhcNMjYwMzI2MTUwMTEzWhcNMjYwMzI3MTUwMTEzWjAzMTEwLwYDVQQD
EygxNzNhZDYwNWI2ODMwYjBlMmZkZGE2NGEwZDA4YTQzZjVhMzYzMjY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0otDQzcIACPREg+zssROe5UmeP+V
Vn+88sARQ/WRwpRgCO3nWFgHaNM6EjIVnws1o37F8TzaJz3GzubDj8xb6/9qnPPp
iUhDqSpaVKSyKVmaA2mhGBMVWfMGxZZx4O4eJgprJLJVp0oFWfITvSLPxLE55o8B
V7/eqHwBKrU+mwiV3k/NxpKUsK4V7m9ws4AR1fhd94YavrGt9vURPsTNf3ptdyGh
vNZXgchxP5HADgNCkd3XEpeOq/XBSgvZRiod9jv4SOFu89AAA25/xmEJJ2KWYR/U
GlvhmnGC9ITno8aSP8MGpFSanOJm+JS3jWi1kqVOeFb5kuEwNVLmIvwUYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBc61gW2gwsOL92mSg0IpD9aNjJmMB8GA1UdIwQY
MBaAFBPvMti/FTwExjk74k8GMkP36KfiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRS04eTJMOFZQQVRHT1R2aVR3WXlRX2ZvcC1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8xNDgyMWEtMjExOS00NzcxLThjNzYt
Mzg3NzA2YzJhODQ5LzEvRS04eTJMOFZQQVRHT1R2aVR3WXlRX2ZvcC1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC8xNDgyMWEtMjExOS00NzcxLThjNzYtMzg3NzA2YzJhODQ5
LzEvRS04eTJMOFZQQVRHT1R2aVR3WXlRX2ZvcC1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqrMKATL0
GTErTk5CDywO78K31MnXtxPg0c/QeSZ7Skf5Sl1wTKRU4jTebMr31AP8u7hBsxW5
rmwk4WcfHNCYva/ME2wB+2kiLriZWlqywzysI50AhyuqqWkCt1TIr/9DJnRu7m+2
eBZaIOTl6OxbAnOX5Tz/dcvXGsISGxPezG8GUcANmqfGB17cybGIwmm9qt3IELSM
CxC97q75do3nU3CF10Zy0iAMejUXOGhpN/GhoOTf+lyTAVSBs/VWVKuP8roGSB9T
ZuClTaSvemIVe+6oxLjJ+QpY5biCaa+FJQpWSv7sBL7STJcLSPqQmiHv6D0Af1JT
/okj2/um0EkWPA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:16:10 2026 by rpki-client