Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft
File: FOKCz2FihLWPhexD5UyQv5WU5Jw.mft (raw, json)
Hash identifier: ztUhidOdqWvvxW6lAPDlticdoZpr7ioYrNgp97jibEI=
Subject key identifier: 9A:0C:A1:C0:1F:C0:7F:00:A9:8C:46:CD:1B:81:C6:0B:21:8F:B7:97
Authority key identifier: 14:E2:82:CF:61:62:84:B5:8F:85:EC:43:E5:4C:90:BF:95:94:E4:9C
Certificate issuer: /CN=14e282cf616284b58f85ec43e54c90bf9594e49c
Certificate serial: 019E1D594EB6A5E55A7A3F87586C1020AD65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FOKCz2FihLWPhexD5UyQv5WU5Jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft
Manifest number: 1871
Signing time: Tue 12 May 2026 18:00:52 +0000
Manifest this update: Tue 12 May 2026 18:00:52 +0000
Manifest next update: Wed 13 May 2026 18:00:52 +0000
Files and hashes: 1: FOKCz2FihLWPhexD5UyQv5WU5Jw.crl (hash: ZRmsrNAiEejrcPvlXkWP0VV6JYfbeTVvPJPh5iVqbVU=)
2: ic08Zy2tp5ErO4fCUtcLYzoJ7HA.roa (hash: rUWPt9ieqVy+Gp/oD9EsBpO1X47eqDC+02qK6K5SPS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FOKCz2FihLWPhexD5UyQv5WU5Jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:4e:b6:a5:e5:5a:7a:3f:87:58:6c:10:20:ad:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14e282cf616284b58f85ec43e54c90bf9594e49c
Validity
Not Before: May 12 18:00:52 2026 GMT
Not After : May 13 18:00:52 2026 GMT
Subject: CN=9a0ca1c01fc07f00a98c46cd1b81c60b218fb797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:68:a9:28:e3:60:7f:bf:51:2d:aa:7e:59:e6:
b8:11:3c:27:e8:78:b3:e2:e7:a1:44:06:de:33:9b:
37:94:07:03:fa:83:46:0d:33:f1:f4:68:33:fa:51:
13:bf:60:65:c2:de:2d:f9:f2:1c:ca:7a:52:5b:04:
69:8f:59:ce:b1:97:b1:a5:ee:a1:4e:e1:7e:8b:a3:
10:32:09:67:ce:49:08:a9:b2:4d:5d:1d:99:79:0f:
d3:a7:81:9a:0f:99:0c:cb:83:6a:54:aa:f9:b8:f2:
fc:77:7b:9f:81:b0:9a:d9:9b:9a:b4:b3:42:fe:f0:
ce:d6:85:71:0f:8c:e2:11:99:30:65:b2:b1:8d:56:
42:72:72:5c:fe:2f:cc:f5:e6:32:7e:41:34:22:ad:
78:fd:d3:9a:af:e2:fd:c3:b0:e2:08:04:90:f7:76:
ae:2e:42:c1:df:6a:79:dc:97:f4:24:71:86:ca:69:
a9:a6:f9:33:ec:07:6a:4e:5e:b3:77:3c:e7:a7:d8:
3e:05:3c:54:fd:28:bb:c4:81:2a:18:6e:75:40:83:
e3:60:b1:77:b1:17:6c:b5:ae:7d:88:27:10:46:de:
c5:b1:93:e7:b0:ed:90:d5:3c:86:c2:ed:72:8e:4f:
7c:8f:84:7b:27:56:1a:b1:c2:0e:ac:ef:3a:f4:00:
04:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:0C:A1:C0:1F:C0:7F:00:A9:8C:46:CD:1B:81:C6:0B:21:8F:B7:97
X509v3 Authority Key Identifier:
keyid:14:E2:82:CF:61:62:84:B5:8F:85:EC:43:E5:4C:90:BF:95:94:E4:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FOKCz2FihLWPhexD5UyQv5WU5Jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:c8:38:a3:f9:89:ca:97:8d:b1:b9:9f:d7:b0:5f:6f:eb:cb:
73:14:e5:b4:06:b2:a5:aa:3d:25:7f:e5:0f:aa:65:9b:af:be:
4f:d0:8a:01:8f:01:ae:77:db:e4:e6:79:c3:2a:78:5d:2c:0a:
7d:ee:eb:ad:01:16:fc:1d:f3:7a:77:54:03:19:a0:fb:7a:60:
08:25:42:02:bd:ec:df:00:76:47:a7:dc:b8:7a:10:e1:d9:9f:
ee:cb:af:e6:e3:e2:b1:d2:53:46:8b:b4:51:76:54:47:38:13:
e0:b2:7a:e8:9c:17:f5:16:a3:7d:a0:40:3d:1b:36:48:1a:c8:
c5:35:6c:c0:59:71:ba:dd:6c:47:e2:0f:fa:fa:fa:12:72:da:
c1:58:f0:b9:50:7d:36:2b:38:b8:75:1e:0f:82:cd:84:b1:92:
91:f6:3d:b3:7b:b9:04:a0:8c:52:9f:c9:43:f0:76:e8:cc:91:
b7:10:43:84:b4:1f:87:c3:e6:db:72:32:b5:21:b0:ad:8e:d4:
7a:f5:00:2c:20:30:08:ee:0d:e2:a9:39:f7:87:9a:07:48:67:
0e:2a:af:32:c4:5f:dd:cd:c3:87:88:f0:12:cf:6e:1e:ec:93:
e0:b6:99:e4:c6:47:7e:be:e3:25:f0:48:84:7e:5c:27:c8:d3:
44:e3:13:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:11:54 2026 by rpki-client