Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.mft
File: FOEoPa4LC5l4ZyZcssAIPFETbto.mft (raw, json)
Hash identifier: LmR+nSu/wMqw+T7IlzHcw929QeycDmLZ/SSJ2AlZxu8=
Subject key identifier: 14:CA:5F:6A:80:3E:DF:49:5C:8D:F4:A9:F2:FA:06:13:80:DC:49:07
Authority key identifier: 14:E1:28:3D:AE:0B:0B:99:78:67:26:5C:B2:C0:08:3C:51:13:6E:DA
Certificate issuer: /CN=14e1283dae0b0b997867265cb2c0083c51136eda
Certificate serial: 019F916C496E46A3555966B81544D204FB25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FOEoPa4LC5l4ZyZcssAIPFETbto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.mft
Manifest number: 02DE
Signing time: Fri 24 Jul 2026 00:00:20 +0000
Manifest this update: Fri 24 Jul 2026 00:00:20 +0000
Manifest next update: Sat 25 Jul 2026 00:00:20 +0000
Files and hashes: 1: FOEoPa4LC5l4ZyZcssAIPFETbto.crl (hash: Z86CNPrjoGZecA5fOw1UAgxmFizwjR6L2fBqPzeOj+4=)
2: LdLsv-q2C4Pbf9GxWCyaIF5HbLc.roa (hash: 9N8HiCQDKmL6vVupPuazpXqAGCKxU6fFpoiaBLlmwPI=)
3: lgEFYTQnRHqqMwP4s3KsomJeD7g.roa (hash: 4Ag8vOKyZPCZGgR17Gsq8fIgU5DZpoD4F55HJ+y+s5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.mft
rsync://rpki.ripe.net/repository/DEFAULT/FOEoPa4LC5l4ZyZcssAIPFETbto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:49:6e:46:a3:55:59:66:b8:15:44:d2:04:fb:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14e1283dae0b0b997867265cb2c0083c51136eda
Validity
Not Before: Jul 24 00:00:20 2026 GMT
Not After : Jul 25 00:00:20 2026 GMT
Subject: CN=14ca5f6a803edf495c8df4a9f2fa061380dc4907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:0a:da:09:a1:87:fd:03:93:41:c0:58:b8:63:
44:1a:41:a6:81:e7:ed:f1:f5:ae:7d:06:59:4a:bb:
1f:f2:d0:b4:19:f6:35:84:a7:87:1a:e4:ea:d1:2c:
54:ed:7b:30:66:18:68:ec:68:c9:de:63:be:eb:74:
49:9c:4a:1d:18:26:a2:a6:9b:b3:54:3b:18:14:aa:
20:fe:ad:e5:42:72:56:46:66:01:e8:9c:71:b3:16:
b1:f1:a3:1c:64:72:6c:e7:36:11:f0:d5:98:08:6c:
7b:c3:78:2f:8c:c6:af:00:ef:0b:ca:7d:b1:ce:44:
b2:79:3b:b2:12:75:d3:69:ec:18:1f:b9:a2:cc:c2:
6b:dd:b5:14:5f:5c:00:ac:22:d2:20:dc:c0:c5:98:
b5:11:dd:14:1b:70:75:89:b3:92:3c:bb:34:e0:93:
88:36:55:2e:b3:b1:87:33:fd:13:1e:ba:bc:34:34:
f9:72:29:0b:a5:19:c8:42:aa:5e:c9:72:fe:22:e2:
ac:17:8e:8a:3a:2d:5e:a1:30:93:bf:a4:d5:3d:29:
09:18:76:8c:77:4f:a6:64:79:0c:87:44:41:1a:0b:
3c:3c:9a:ca:f1:c1:0b:13:92:57:a4:2a:2b:6b:12:
d8:77:8e:e2:e5:3c:e5:89:94:07:38:a7:92:15:49:
5d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:CA:5F:6A:80:3E:DF:49:5C:8D:F4:A9:F2:FA:06:13:80:DC:49:07
X509v3 Authority Key Identifier:
keyid:14:E1:28:3D:AE:0B:0B:99:78:67:26:5C:B2:C0:08:3C:51:13:6E:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FOEoPa4LC5l4ZyZcssAIPFETbto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:5b:26:04:1d:f3:d1:ab:27:00:62:16:e8:dd:8d:76:f9:a8:
5c:ab:79:05:e1:5f:af:1b:18:33:6e:2d:ae:27:d4:ee:23:0f:
0e:31:1b:31:cf:2e:94:ae:9d:28:aa:b9:19:a8:b6:54:86:72:
25:31:36:97:96:73:5b:af:1a:10:48:0e:2a:38:3a:c1:74:f6:
92:e1:50:c6:16:d2:2d:e3:bf:94:4a:47:bd:7b:51:26:3e:5a:
19:63:10:7f:3f:dc:b1:d5:bc:e9:74:77:8e:69:1c:67:0a:48:
60:81:b4:48:b7:18:1a:c6:4a:6a:70:00:f5:61:ff:e1:8b:d3:
fb:64:bc:0b:28:b8:b1:79:2f:16:35:1d:93:65:a5:8b:65:e5:
19:48:80:a9:5a:65:bc:50:59:1a:32:41:16:da:64:7e:79:34:
86:7e:a9:a7:df:c5:3e:3a:dd:9f:25:c7:53:3d:aa:6e:a1:e4:
5d:e7:9d:27:35:3a:14:9a:64:5f:aa:74:19:43:1a:d3:79:08:
10:c4:77:a3:ab:ab:53:c6:d6:92:26:be:d7:8f:49:0b:38:cf:
92:11:74:7e:78:86:b4:60:45:98:ef:07:7d:be:36:8a:cd:b4:
00:28:5e:7b:7c:27:1e:9f:3e:17:1f:92:38:aa:be:13:04:10:
54:98:8e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:03:53 2026 by rpki-client