Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/98277d-12b1-488c-ae35-8879b7116da6/1/FOxcZFb_9aWbEMXLpcBl-8vMhg0.mft
File: FOxcZFb_9aWbEMXLpcBl-8vMhg0.mft (raw, json)
Hash identifier: N+Zhuc/tLJ8VGJj5wBh1Oe9cR9uWwmrmsHHBa7cyG+I=
Subject key identifier: 8C:40:3B:AE:BE:4C:9A:9E:C1:76:11:87:AA:1F:CA:80:9D:48:70:C1
Authority key identifier: 14:EC:5C:64:56:FF:F5:A5:9B:10:C5:CB:A5:C0:65:FB:CB:CC:86:0D
Certificate issuer: /CN=14ec5c6456fff5a59b10c5cba5c065fbcbcc860d
Certificate serial: 01A0DD29E615E40EB06164E02C02FD911713
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FOxcZFb_9aWbEMXLpcBl-8vMhg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/98277d-12b1-488c-ae35-8879b7116da6/1/FOxcZFb_9aWbEMXLpcBl-8vMhg0.mft
Manifest number: 57
Signing time: Sat 26 Sep 2026 10:01:45 +0000
Manifest this update: Sat 26 Sep 2026 10:01:45 +0000
Manifest next update: Sun 27 Sep 2026 10:01:45 +0000
Files and hashes: 1: 1cpw9dbUrtknizd-rffhTFR8Ji0.roa (hash: vZ/+72EdcWabpps15UEov7kxWkSE33QxgTZ0hz4DZsk=)
2: FOxcZFb_9aWbEMXLpcBl-8vMhg0.crl (hash: WgQ8z662tadUgG5cHxiQf8wc7tE/G9Cf2OJqvEsZnxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/98277d-12b1-488c-ae35-8879b7116da6/1/FOxcZFb_9aWbEMXLpcBl-8vMhg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/98277d-12b1-488c-ae35-8879b7116da6/1/FOxcZFb_9aWbEMXLpcBl-8vMhg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/FOxcZFb_9aWbEMXLpcBl-8vMhg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 10:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:29:e6:15:e4:0e:b0:61:64:e0:2c:02:fd:91:17:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14ec5c6456fff5a59b10c5cba5c065fbcbcc860d
Validity
Not Before: Sep 26 10:01:45 2026 GMT
Not After : Sep 27 10:01:45 2026 GMT
Subject: CN=8c403baebe4c9a9ec1761187aa1fca809d4870c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:30:5e:4b:53:12:99:d3:70:61:9c:75:e7:3f:
63:0c:87:2c:a4:9c:df:a7:a1:fb:fb:c7:69:f5:55:
d5:72:da:45:8e:38:b0:19:86:84:89:fe:e9:a2:8b:
7d:01:01:59:18:b5:df:c4:24:e0:fc:e6:4b:5c:45:
42:df:90:ab:dd:61:d7:c5:b3:5b:0f:43:eb:55:6c:
ec:99:b0:ed:36:14:ca:71:32:70:09:99:8c:6f:a9:
2f:1f:0e:a0:28:41:81:54:a4:23:9d:f8:86:f8:a1:
ae:11:a4:87:63:3c:9a:c9:a6:5e:11:55:8e:eb:ff:
67:c7:46:96:4e:c1:bb:4d:b0:a6:69:71:af:08:85:
e8:43:6d:16:4f:6f:0d:12:34:d7:17:af:2e:89:43:
58:d8:33:76:23:b9:2a:d1:ff:7d:e6:45:45:fe:ca:
f2:ea:a6:30:dc:c5:19:23:48:ff:5b:14:30:bf:12:
e5:ca:97:c6:eb:46:d4:7f:c4:e7:9a:90:8e:59:07:
fa:2e:2d:0d:2a:d9:b2:68:78:51:8a:ac:17:5e:2d:
af:57:cd:b4:15:ed:83:b2:be:de:ca:59:b0:17:99:
d0:8c:47:05:b2:ef:b1:f6:50:2f:14:71:bf:15:a0:
a2:4e:2b:48:2d:a6:30:a6:a9:81:66:5d:d9:46:b0:
f5:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:40:3B:AE:BE:4C:9A:9E:C1:76:11:87:AA:1F:CA:80:9D:48:70:C1
X509v3 Authority Key Identifier:
keyid:14:EC:5C:64:56:FF:F5:A5:9B:10:C5:CB:A5:C0:65:FB:CB:CC:86:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FOxcZFb_9aWbEMXLpcBl-8vMhg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/98277d-12b1-488c-ae35-8879b7116da6/1/FOxcZFb_9aWbEMXLpcBl-8vMhg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/98277d-12b1-488c-ae35-8879b7116da6/1/FOxcZFb_9aWbEMXLpcBl-8vMhg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:c9:43:31:f1:e1:43:0b:74:ab:76:de:bb:97:14:77:44:0f:
f0:9d:a0:3e:90:e4:d0:2f:5b:7b:de:90:de:bd:79:9c:27:42:
cb:08:10:c2:d2:83:6e:c3:8c:c7:f2:35:83:c3:7d:d4:82:a7:
22:d5:0f:f0:3d:29:60:22:39:7a:3b:31:a1:4f:cd:24:99:f8:
d7:6b:29:99:3d:fe:33:c3:5c:fa:7f:de:fd:99:f6:9a:20:09:
4d:14:b3:9d:fc:61:31:3b:69:c1:f3:46:bf:80:91:28:f5:25:
d6:2d:d8:a6:62:f0:86:e7:b8:bd:7b:b5:95:24:a1:30:fd:8c:
4c:2f:75:00:3c:30:25:cf:6b:9a:85:c5:6b:39:c8:19:b8:3d:
9d:3b:23:66:43:94:c5:87:47:6a:e4:7a:f2:af:73:57:5a:8c:
da:34:93:37:32:82:6c:93:cf:3d:03:d2:e3:13:70:be:b6:0f:
e8:69:f1:7d:09:77:99:81:d4:c1:38:66:72:f6:4e:46:74:19:
53:7c:3b:a1:89:56:40:f7:06:1a:11:2b:22:bb:ef:79:ae:d6:
dd:ff:96:6b:05:8b:ac:23:3e:95:50:9e:0d:52:50:18:4e:6e:
74:d2:ed:ff:5f:a5:ae:71:be:e7:44:02:e1:28:b3:8e:a1:89:
22:00:a2:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 23:50:53 2026 by rpki-client