Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.mft
File: FOEoPa4LC5l4ZyZcssAIPFETbto.mft (raw, json)
Hash identifier: cFiQOAMvubY6R3yvVNqTtDzQHL+jjSGN5L/SiBl73Rk=
Subject key identifier: 17:59:95:84:7C:6A:E6:FE:8D:2A:7C:91:71:78:CE:31:55:C8:EA:27
Authority key identifier: 14:E1:28:3D:AE:0B:0B:99:78:67:26:5C:B2:C0:08:3C:51:13:6E:DA
Certificate issuer: /CN=14e1283dae0b0b997867265cb2c0083c51136eda
Certificate serial: 019D296087CE356398581FF12F77CF62E148
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FOEoPa4LC5l4ZyZcssAIPFETbto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.mft
Manifest number: 019F
Signing time: Thu 26 Mar 2026 09:01:25 +0000
Manifest this update: Thu 26 Mar 2026 09:01:25 +0000
Manifest next update: Fri 27 Mar 2026 09:01:25 +0000
Files and hashes: 1: FOEoPa4LC5l4ZyZcssAIPFETbto.crl (hash: 3YzwfenEI+LVGaWF9c5Q4pI7kSafkDjCPmL9m5/emAc=)
2: LdLsv-q2C4Pbf9GxWCyaIF5HbLc.roa (hash: 9N8HiCQDKmL6vVupPuazpXqAGCKxU6fFpoiaBLlmwPI=)
3: lgEFYTQnRHqqMwP4s3KsomJeD7g.roa (hash: 4Ag8vOKyZPCZGgR17Gsq8fIgU5DZpoD4F55HJ+y+s5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.mft
rsync://rpki.ripe.net/repository/DEFAULT/FOEoPa4LC5l4ZyZcssAIPFETbto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:87:ce:35:63:98:58:1f:f1:2f:77:cf:62:e1:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14e1283dae0b0b997867265cb2c0083c51136eda
Validity
Not Before: Mar 26 09:01:25 2026 GMT
Not After : Mar 27 09:01:25 2026 GMT
Subject: CN=175995847c6ae6fe8d2a7c917178ce3155c8ea27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6f:89:df:8a:b9:21:73:96:0a:5b:18:b3:ee:
f5:11:67:fa:bf:87:2b:7f:87:eb:44:cd:58:e2:92:
f4:64:ca:86:e4:6a:aa:76:23:92:0e:13:a1:e7:42:
77:a6:e6:d0:7c:81:14:0b:83:c4:a5:d5:f2:59:f2:
3a:20:e1:4f:e5:87:17:84:03:b0:cc:43:a3:c9:0a:
c1:59:c9:25:93:d1:fb:0a:05:fd:21:26:42:b9:98:
7a:cd:f7:51:b8:f8:15:00:8f:36:38:d0:80:1a:1f:
e9:75:30:1e:1d:47:8e:50:a6:9c:19:eb:83:22:eb:
42:1a:03:d0:8f:34:7f:8b:1f:9e:3c:c0:59:f1:69:
06:23:bf:72:48:43:3b:80:97:42:60:f9:d0:cf:16:
f0:e4:12:13:15:42:2b:b3:bc:f0:87:08:0b:61:3c:
17:c9:ce:70:62:47:11:6c:0b:f2:8f:46:77:91:94:
4c:b6:b0:9c:ce:83:e2:04:80:ef:aa:e3:dd:42:dc:
d4:7a:88:c3:e3:73:37:67:63:16:10:c3:c8:0d:c6:
59:7a:f8:d3:e3:39:19:c8:89:6e:25:db:a5:2e:77:
45:6f:55:71:cd:82:2b:f1:48:ff:2b:1a:73:68:89:
b7:a1:df:d3:3f:00:3a:59:d4:e9:7f:fa:73:92:d0:
6c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:59:95:84:7C:6A:E6:FE:8D:2A:7C:91:71:78:CE:31:55:C8:EA:27
X509v3 Authority Key Identifier:
keyid:14:E1:28:3D:AE:0B:0B:99:78:67:26:5C:B2:C0:08:3C:51:13:6E:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FOEoPa4LC5l4ZyZcssAIPFETbto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:05:ac:a5:93:d6:37:f4:f2:14:3e:5a:94:3b:70:36:cd:38:
ef:18:e0:d6:d2:c5:5c:f0:1c:6d:98:d3:ee:50:03:ae:ce:22:
3e:d4:d6:98:82:d0:ef:34:f9:65:9f:2d:35:e0:fe:ce:3c:e0:
6b:34:9e:18:0e:ca:9a:19:92:fe:1b:bb:5d:f9:28:c4:21:ef:
c4:58:e4:31:1f:c5:05:db:70:2c:7e:08:27:a6:2a:2a:41:48:
1f:f6:32:e2:b4:2f:cf:fd:cc:e3:ab:a4:48:81:1a:10:ce:2c:
95:d1:a7:78:3c:db:eb:2a:d8:b6:77:90:bb:29:db:99:41:0f:
31:3c:e0:d6:13:c6:18:93:40:5c:00:a1:94:dc:57:e2:8f:20:
c4:dc:bb:58:fd:ae:15:7c:28:1e:a4:75:2d:80:17:c1:5d:16:
2a:3c:05:d3:00:3a:71:97:7a:2e:c4:50:da:be:bc:9f:f3:25:
df:f8:d4:6d:ff:fd:0a:58:ea:2e:a9:12:e2:b7:57:d1:03:1f:
24:76:a3:b3:42:2b:af:f8:40:ef:07:61:50:ad:61:ec:c0:a4:
a1:c4:86:5d:6b:98:89:e2:06:0e:5b:2a:89:a9:4b:4b:54:04:
d0:e9:53:41:59:64:2a:6b:66:91:1c:1a:60:cb:4a:af:bd:f2:
89:c1:b5:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:48:19 2026 by rpki-client