Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/95/38ec76-e6a9-4327-b322-50f1a8585f09/1/FO-9HV4axzX28jUJzyoOtKH5tOk.mft
File: FO-9HV4axzX28jUJzyoOtKH5tOk.mft (raw, json)
Hash identifier: NKNqJLcu8bqft28qJvZfUvRh9DovnU7z34xus5OnzSU=
Subject key identifier: 97:44:24:29:5A:52:BE:CE:1B:24:9E:0A:E9:E5:DC:AE:69:03:76:58
Authority key identifier: 14:EF:BD:1D:5E:1A:C7:35:F6:F2:35:09:CF:2A:0E:B4:A1:F9:B4:E9
Certificate issuer: /CN=14efbd1d5e1ac735f6f23509cf2a0eb4a1f9b4e9
Certificate serial: 01A11A50B7AB367B951B1751F7A8900660E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FO-9HV4axzX28jUJzyoOtKH5tOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/38ec76-e6a9-4327-b322-50f1a8585f09/1/FO-9HV4axzX28jUJzyoOtKH5tOk.mft
Manifest number: 1A21
Signing time: Thu 08 Oct 2026 07:00:59 +0000
Manifest this update: Thu 08 Oct 2026 07:00:59 +0000
Manifest next update: Fri 09 Oct 2026 07:00:59 +0000
Files and hashes: 1: FO-9HV4axzX28jUJzyoOtKH5tOk.crl (hash: tWY8YOpTe9cPDbzU+QjK67xjqZX+w7u1r0OqBlZtl6M=)
2: i34QcCXHBTz4i7dARxhxMvU6cMI.roa (hash: cLmYe2PhCggVytEcDwfmBz/hTRq+Jq4kQ9LDTbCEPVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/38ec76-e6a9-4327-b322-50f1a8585f09/1/FO-9HV4axzX28jUJzyoOtKH5tOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/38ec76-e6a9-4327-b322-50f1a8585f09/1/FO-9HV4axzX28jUJzyoOtKH5tOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FO-9HV4axzX28jUJzyoOtKH5tOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:50:b7:ab:36:7b:95:1b:17:51:f7:a8:90:06:60:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14efbd1d5e1ac735f6f23509cf2a0eb4a1f9b4e9
Validity
Not Before: Oct 8 07:00:59 2026 GMT
Not After : Oct 9 07:00:59 2026 GMT
Subject: CN=974424295a52bece1b249e0ae9e5dcae69037658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:82:a4:bc:4a:ae:00:fb:c0:3f:cb:7a:f3:1e:
1e:c3:02:ee:ae:9e:1b:d7:53:b3:8b:5a:e4:1e:e4:
8f:bc:7b:37:64:48:87:e8:fc:be:d4:d2:df:75:e2:
d1:20:93:d9:cd:a1:7e:28:b3:63:d2:98:45:61:c7:
cf:c5:25:65:95:2a:52:52:37:43:5e:81:eb:6e:7b:
dc:93:74:aa:30:92:31:e5:16:65:ad:22:c9:ae:5d:
56:86:32:f1:41:87:19:ec:45:a4:15:11:a5:38:b2:
94:8e:03:9e:54:b2:0f:df:80:8e:72:c7:8c:76:df:
77:02:18:70:7e:93:67:3d:54:0e:4c:bd:fb:68:73:
b9:c9:43:9e:2d:41:af:33:71:70:c9:25:8b:68:3f:
42:ad:c0:36:a8:77:ef:46:44:9d:43:8c:46:a4:82:
73:1c:b5:fb:b8:99:e4:e3:31:51:7f:50:4a:b8:0f:
62:94:90:c2:c7:fe:b3:7a:4b:bd:49:7c:d4:16:79:
ef:ea:93:6f:ca:80:84:73:bd:a2:1a:00:00:92:04:
a0:25:94:3e:81:cd:05:6b:d9:71:55:ac:27:66:e2:
d9:ec:ba:b9:ea:9b:1e:c1:50:8c:25:17:f7:a7:9c:
6f:89:e5:c4:b6:5d:ad:78:d5:61:ff:bf:27:eb:ed:
40:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:44:24:29:5A:52:BE:CE:1B:24:9E:0A:E9:E5:DC:AE:69:03:76:58
X509v3 Authority Key Identifier:
keyid:14:EF:BD:1D:5E:1A:C7:35:F6:F2:35:09:CF:2A:0E:B4:A1:F9:B4:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FO-9HV4axzX28jUJzyoOtKH5tOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/38ec76-e6a9-4327-b322-50f1a8585f09/1/FO-9HV4axzX28jUJzyoOtKH5tOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/38ec76-e6a9-4327-b322-50f1a8585f09/1/FO-9HV4axzX28jUJzyoOtKH5tOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:7e:8d:d1:37:ef:ed:14:cf:fb:3c:53:1a:30:97:cb:8e:11:
46:b7:d9:9a:02:6e:e5:30:9e:14:46:4c:11:4b:3f:de:21:b1:
ca:7e:01:05:22:5e:7d:aa:96:8a:94:da:ef:7a:d5:ab:e9:00:
84:8f:9e:ac:af:a7:31:ca:8a:2a:53:9e:08:d7:02:44:73:ba:
aa:b7:e1:2e:18:74:77:57:61:f2:b7:27:18:d6:be:de:fb:ba:
a3:a0:01:89:0b:b3:18:b0:c1:84:cf:35:06:5f:1d:cb:0b:4f:
f3:da:48:54:9b:f2:2e:e5:54:b5:cb:0a:02:e4:5e:1f:fa:fd:
c7:12:92:38:81:30:12:a6:5b:20:1d:6b:04:b6:b8:5c:3a:c1:
7e:e3:a6:54:25:f4:5a:dd:f1:44:e2:8d:99:68:de:be:69:b0:
21:4a:07:40:c8:88:49:c5:a7:bc:27:a1:c1:42:2c:aa:68:b7:
f4:56:12:d7:72:81:ae:a9:58:fa:81:b9:92:54:42:d3:db:3d:
90:6f:c2:64:7c:15:5e:dc:98:34:06:e9:8a:dc:3f:c5:ab:48:
4e:6b:48:de:b4:03:3e:fd:43:b9:13:20:f2:b4:11:76:c6:ae:
51:b5:cf:c9:16:e9:43:96:e3:a5:37:46:ae:e9:e6:c8:14:dd:
7c:d7:67:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 13:50:35 2026 by rpki-client