Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft
File: FOKCz2FihLWPhexD5UyQv5WU5Jw.mft (raw, json)
Hash identifier: T2A0HGNLCtGHiMgWOZALuJt7zn7lMnXsOWJ+189CfSg=
Subject key identifier: 84:E1:5A:5A:1F:0F:D2:C8:FE:12:FD:6F:26:DA:6C:33:09:EA:8A:A2
Authority key identifier: 14:E2:82:CF:61:62:84:B5:8F:85:EC:43:E5:4C:90:BF:95:94:E4:9C
Certificate issuer: /CN=14e282cf616284b58f85ec43e54c90bf9594e49c
Certificate serial: 019D2A04BF037472E201BA836B85E5D433BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FOKCz2FihLWPhexD5UyQv5WU5Jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft
Manifest number: 17F3
Signing time: Thu 26 Mar 2026 12:00:47 +0000
Manifest this update: Thu 26 Mar 2026 12:00:47 +0000
Manifest next update: Fri 27 Mar 2026 12:00:47 +0000
Files and hashes: 1: FOKCz2FihLWPhexD5UyQv5WU5Jw.crl (hash: z+63mOWWSrvMclm/ZcRnN1H4Oyqj+eipt1Wm4FS80xg=)
2: ic08Zy2tp5ErO4fCUtcLYzoJ7HA.roa (hash: rUWPt9ieqVy+Gp/oD9EsBpO1X47eqDC+02qK6K5SPS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FOKCz2FihLWPhexD5UyQv5WU5Jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 12:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:bf:03:74:72:e2:01:ba:83:6b:85:e5:d4:33:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14e282cf616284b58f85ec43e54c90bf9594e49c
Validity
Not Before: Mar 26 12:00:47 2026 GMT
Not After : Mar 27 12:00:47 2026 GMT
Subject: CN=84e15a5a1f0fd2c8fe12fd6f26da6c3309ea8aa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:88:17:91:49:c6:25:4a:c6:28:2e:81:75:3d:
2f:3c:97:48:a0:a0:f2:84:77:71:f5:02:28:24:ad:
ac:96:e1:c1:b4:19:a9:a2:bc:21:4a:19:a8:3c:19:
b7:0a:eb:6d:ae:9a:23:c5:23:e1:b1:59:43:e8:b1:
49:d4:9e:85:e8:27:a5:37:34:dd:2c:30:80:a5:1b:
4d:68:1c:4a:ee:04:5c:ac:b8:d7:a9:15:b5:d1:4b:
8d:97:7e:96:0c:0e:d5:51:69:58:69:50:67:7d:9f:
33:4c:d1:ed:45:96:f4:f3:0f:a4:36:59:4d:32:46:
46:75:6f:a4:0c:ea:55:11:19:22:af:22:25:c9:33:
91:84:e2:f1:2e:b7:c4:cf:f8:b2:43:b1:3f:a5:45:
ca:f8:29:60:1f:82:74:ea:72:1f:5e:13:22:a7:29:
a2:ae:f0:47:16:9e:f4:4a:06:c3:ff:10:71:39:79:
d9:85:79:65:3c:88:b5:98:f6:d2:4b:49:c5:62:44:
e0:4e:6c:eb:45:78:77:b3:f4:05:0a:1a:cd:c7:07:
d2:39:88:92:38:cf:6b:0e:99:e6:6a:f8:26:a0:83:
f2:f3:9c:a3:37:f1:25:21:26:3f:3b:24:e2:ad:e2:
3a:c4:8a:d1:8e:c2:f0:24:61:d1:4a:65:dc:4d:fc:
b5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:E1:5A:5A:1F:0F:D2:C8:FE:12:FD:6F:26:DA:6C:33:09:EA:8A:A2
X509v3 Authority Key Identifier:
keyid:14:E2:82:CF:61:62:84:B5:8F:85:EC:43:E5:4C:90:BF:95:94:E4:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FOKCz2FihLWPhexD5UyQv5WU5Jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:e2:2c:5d:92:ae:1f:f5:0e:83:1f:de:22:49:72:aa:c1:65:
ae:3a:ca:62:73:d6:00:85:1e:68:fa:e3:95:10:1d:87:22:bb:
76:a3:fb:e4:e1:66:f8:d1:27:2a:ee:d1:47:27:0e:61:62:d0:
02:1e:a7:38:7a:07:88:aa:e7:61:ad:6d:fe:c1:ba:92:ad:95:
ad:7a:2d:88:56:82:47:76:05:be:cd:ff:f1:97:21:ae:d3:d4:
de:6b:03:72:23:a9:45:1c:b0:42:25:f2:e2:8a:aa:f2:99:d8:
39:8b:a5:c7:e5:fb:69:29:35:5e:20:d8:1b:e6:16:ac:65:93:
a7:78:74:43:9d:1f:ca:ce:83:b4:fa:4d:8f:d0:33:ee:49:56:
37:7d:0a:d1:55:d3:71:73:fc:ec:a1:fe:ba:72:77:3d:19:09:
0e:bd:01:fa:a7:59:38:4e:91:87:aa:36:3d:60:82:7f:79:58:
32:ad:74:59:14:c6:bd:eb:b8:7e:2b:4e:87:4a:b7:dc:d9:48:
ab:67:df:28:c4:ae:cc:29:4f:07:ee:5f:63:ae:2c:9a:20:5f:
dc:b8:23:76:d1:62:d8:8c:3b:64:28:05:18:d5:59:1d:2e:55:
07:03:ba:8a:52:d4:b9:10:52:ae:df:aa:49:a5:2d:f4:79:d8:
30:c7:79:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:15:04 2026 by rpki-client