Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/38ec76-e6a9-4327-b322-50f1a8585f09/1/FO-9HV4axzX28jUJzyoOtKH5tOk.mft
File: FO-9HV4axzX28jUJzyoOtKH5tOk.mft (raw, json)
Hash identifier: 2VIe6wPiegjCPcyu6ckb8L5FrQ2tfr6OmmD9Tqr2c6w=
Subject key identifier: 38:9A:3B:D6:38:95:05:97:CF:14:48:9E:82:30:6D:8F:1B:86:BE:59
Authority key identifier: 14:EF:BD:1D:5E:1A:C7:35:F6:F2:35:09:CF:2A:0E:B4:A1:F9:B4:E9
Certificate issuer: /CN=14efbd1d5e1ac735f6f23509cf2a0eb4a1f9b4e9
Certificate serial: 019D2A3BA157AC314A3FD5AF5E343288B465
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FO-9HV4axzX28jUJzyoOtKH5tOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/38ec76-e6a9-4327-b322-50f1a8585f09/1/FO-9HV4axzX28jUJzyoOtKH5tOk.mft
Manifest number: 1817
Signing time: Thu 26 Mar 2026 13:00:44 +0000
Manifest this update: Thu 26 Mar 2026 13:00:44 +0000
Manifest next update: Fri 27 Mar 2026 13:00:44 +0000
Files and hashes: 1: FO-9HV4axzX28jUJzyoOtKH5tOk.crl (hash: vsVna1bICuHBXTIShyHRwgq9hnN4IkZzZfwB4jzdaq0=)
2: i34QcCXHBTz4i7dARxhxMvU6cMI.roa (hash: cLmYe2PhCggVytEcDwfmBz/hTRq+Jq4kQ9LDTbCEPVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/38ec76-e6a9-4327-b322-50f1a8585f09/1/FO-9HV4axzX28jUJzyoOtKH5tOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/38ec76-e6a9-4327-b322-50f1a8585f09/1/FO-9HV4axzX28jUJzyoOtKH5tOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FO-9HV4axzX28jUJzyoOtKH5tOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:a1:57:ac:31:4a:3f:d5:af:5e:34:32:88:b4:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14efbd1d5e1ac735f6f23509cf2a0eb4a1f9b4e9
Validity
Not Before: Mar 26 13:00:44 2026 GMT
Not After : Mar 27 13:00:44 2026 GMT
Subject: CN=389a3bd638950597cf14489e82306d8f1b86be59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:bb:e0:b9:a1:9c:06:83:1f:99:34:64:54:fa:
46:fe:90:96:b2:eb:5b:59:60:37:5e:0d:22:a3:ed:
8a:f7:88:6e:f2:b0:ca:db:55:00:b9:3c:5b:e5:bc:
9c:a4:ec:6b:8a:10:8c:29:ed:11:99:86:11:24:60:
ac:64:a9:61:ba:e1:57:fd:c4:35:cf:ef:24:0e:bd:
0f:79:2c:20:d6:61:32:9b:a6:6c:c7:3d:cb:a8:3b:
dc:84:67:57:b0:0b:66:dc:8c:46:53:97:e1:82:b0:
75:7a:fa:b0:db:c3:61:7b:59:78:6f:87:20:78:95:
27:18:62:8e:c8:38:67:01:04:87:d0:6e:ed:76:75:
1d:d9:27:75:32:88:e7:45:4c:b1:f7:05:58:41:e7:
22:77:fd:7f:41:dc:92:bb:af:aa:ef:ab:6e:98:7c:
4f:02:7c:a8:6b:33:c6:2f:b9:44:72:0f:47:e3:14:
df:a4:c0:0e:ea:8a:46:1f:60:ee:a5:7d:4a:c4:97:
e5:45:ad:5f:6b:5c:e0:31:1b:2a:8e:26:54:f6:c9:
54:c6:a8:e7:10:48:94:ed:0c:8e:a1:db:06:b3:b4:
f5:f8:71:23:42:6f:16:47:2a:c8:22:db:63:70:16:
bd:d1:12:95:33:22:c0:00:d5:26:54:58:d6:2c:4f:
55:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:9A:3B:D6:38:95:05:97:CF:14:48:9E:82:30:6D:8F:1B:86:BE:59
X509v3 Authority Key Identifier:
keyid:14:EF:BD:1D:5E:1A:C7:35:F6:F2:35:09:CF:2A:0E:B4:A1:F9:B4:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FO-9HV4axzX28jUJzyoOtKH5tOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/38ec76-e6a9-4327-b322-50f1a8585f09/1/FO-9HV4axzX28jUJzyoOtKH5tOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/38ec76-e6a9-4327-b322-50f1a8585f09/1/FO-9HV4axzX28jUJzyoOtKH5tOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:96:c6:18:83:6b:d6:1e:8e:f8:22:ba:72:58:36:23:ec:46:
b4:07:26:27:68:46:6f:82:a2:b1:c3:c6:ca:f0:37:9c:17:8a:
e2:c8:71:1b:dd:65:86:cc:ec:a4:cb:7c:1e:16:37:03:3b:39:
4d:53:09:dd:83:b2:bc:96:6e:ef:d7:f8:60:18:a7:f4:ed:bb:
d1:d3:ff:02:78:59:4c:06:72:c3:68:a1:fa:ba:35:ed:f0:e0:
3b:a0:c2:ff:98:7a:70:0f:90:02:e1:da:1a:57:54:c4:72:21:
2e:9b:3b:2c:8d:52:58:c8:4b:36:8b:a0:4e:db:54:be:9c:a4:
b3:3d:1e:3b:89:34:0d:93:86:7e:d4:b7:43:a3:11:72:6a:b0:
2b:aa:34:51:32:49:ab:14:d4:5d:ad:7a:5f:a9:57:d8:f0:ad:
ef:59:a6:9c:db:19:52:4d:8f:b7:f8:46:0e:fb:70:b4:5d:2f:
06:f0:14:bf:45:c4:39:32:7b:f7:ec:a5:3b:ad:d3:c7:85:e2:
ef:e9:c1:b5:53:a3:61:f1:44:4c:29:8b:7b:71:09:5c:d0:17:
61:6a:33:3d:bd:04:bb:1c:c9:2a:d8:bb:ca:64:f5:83:eb:10:
76:e6:e4:b5:58:2d:08:c8:f4:74:11:78:4b:01:91:cb:6e:77:
62:0d:d3:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:56:25 2026 by rpki-client