Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.mft
File: FOEoPa4LC5l4ZyZcssAIPFETbto.mft (raw, json)
Hash identifier: D0Xnp0i3cMuK/EHEQpPCoQtvXLSFrXRgNNOu7R7j7YA=
Subject key identifier: 33:EC:77:1D:69:5E:08:5F:18:A8:78:85:78:EC:26:E4:74:51:DB:2C
Authority key identifier: 14:E1:28:3D:AE:0B:0B:99:78:67:26:5C:B2:C0:08:3C:51:13:6E:DA
Certificate issuer: /CN=14e1283dae0b0b997867265cb2c0083c51136eda
Certificate serial: 019E1EA2C1CC8C5D872FB94EBACABB5EE1BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FOEoPa4LC5l4ZyZcssAIPFETbto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.mft
Manifest number: 021E
Signing time: Wed 13 May 2026 00:00:43 +0000
Manifest this update: Wed 13 May 2026 00:00:43 +0000
Manifest next update: Thu 14 May 2026 00:00:43 +0000
Files and hashes: 1: FOEoPa4LC5l4ZyZcssAIPFETbto.crl (hash: T9j3oy23kUy25kFNCFj7KjfD90nXQI9AAPiHSlpVYeo=)
2: LdLsv-q2C4Pbf9GxWCyaIF5HbLc.roa (hash: 9N8HiCQDKmL6vVupPuazpXqAGCKxU6fFpoiaBLlmwPI=)
3: lgEFYTQnRHqqMwP4s3KsomJeD7g.roa (hash: 4Ag8vOKyZPCZGgR17Gsq8fIgU5DZpoD4F55HJ+y+s5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.mft
rsync://rpki.ripe.net/repository/DEFAULT/FOEoPa4LC5l4ZyZcssAIPFETbto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a2:c1:cc:8c:5d:87:2f:b9:4e:ba:ca:bb:5e:e1:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14e1283dae0b0b997867265cb2c0083c51136eda
Validity
Not Before: May 13 00:00:43 2026 GMT
Not After : May 14 00:00:43 2026 GMT
Subject: CN=33ec771d695e085f18a8788578ec26e47451db2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1f:65:2c:0e:8c:8a:98:c4:4e:93:0d:70:fb:
79:c1:9b:49:4b:04:45:ca:63:16:b7:5b:28:82:1d:
54:98:ab:3c:15:f7:ed:4c:45:0f:e7:6a:e3:a7:44:
58:02:1c:a5:33:95:0e:f9:86:ff:63:c2:b2:3e:12:
48:5e:d7:33:2a:e8:c7:46:70:3d:06:08:b4:99:9d:
3e:e5:04:88:16:27:aa:81:89:01:20:50:45:b4:3c:
77:13:20:95:1b:7b:d7:2a:11:4c:3b:3b:da:86:d7:
37:7b:20:9d:65:eb:04:97:ea:46:29:07:03:25:3f:
c5:bd:a6:62:0b:be:d6:eb:fe:c5:36:7d:95:47:df:
d4:7b:63:46:d4:86:38:67:82:ce:a4:e5:aa:6b:e5:
3a:44:46:35:6e:26:ff:70:26:84:e5:ff:58:09:96:
76:03:ba:3a:5e:8c:56:25:2b:85:ec:87:f4:33:80:
b8:f9:31:d5:73:3e:f2:6f:71:12:fc:50:ac:ba:12:
0f:d6:35:d0:6e:80:b0:a0:62:a5:61:40:17:96:4a:
1d:7d:d4:dc:26:37:ea:66:b7:a1:a1:73:84:0e:26:
d2:b4:38:a5:d6:99:11:b9:58:de:b9:e5:f6:54:f9:
8b:37:a6:ca:95:12:ca:a4:e2:22:30:03:bd:ac:69:
a9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:EC:77:1D:69:5E:08:5F:18:A8:78:85:78:EC:26:E4:74:51:DB:2C
X509v3 Authority Key Identifier:
keyid:14:E1:28:3D:AE:0B:0B:99:78:67:26:5C:B2:C0:08:3C:51:13:6E:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FOEoPa4LC5l4ZyZcssAIPFETbto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:2a:fc:8f:51:78:d7:bf:4a:17:be:31:d5:aa:dc:a2:d7:90:
2b:76:b6:b6:8a:94:38:9c:c5:61:bd:c2:5b:8e:24:96:c2:8c:
49:f0:d6:ce:1c:ab:d8:61:94:7c:87:43:b3:81:11:99:dd:16:
65:62:86:15:28:20:21:10:4f:e2:71:17:27:e7:9e:58:76:5d:
93:89:a3:06:34:73:d4:ca:77:af:92:4a:3b:1b:64:b7:75:e5:
44:8d:59:a5:7d:ee:dd:f8:3b:fb:b1:cc:d7:d7:da:9a:b9:a6:
9d:10:37:b3:2e:91:19:d4:68:e1:99:92:f5:06:8f:07:0e:be:
1d:8d:04:b6:32:ac:83:f5:67:c5:78:fb:ab:2d:fa:f1:fc:e3:
32:58:eb:91:94:65:35:b5:98:a4:5e:ea:5f:90:08:a2:ce:88:
62:9d:ab:40:d6:e8:a4:f7:40:e2:39:19:09:8f:2a:a2:1f:95:
4a:70:2e:74:5a:d2:a9:78:a9:e9:d6:33:5d:7e:f5:34:78:d4:
9f:98:6d:64:17:f2:f0:5b:97:2c:9c:43:ce:5e:1f:31:aa:c1:
6a:8e:cf:3a:10:2e:62:45:63:d1:1a:32:cb:19:35:95:64:e1:
e6:7c:09:90:f5:9f:ef:3e:23:11:3a:13:62:3b:99:9c:2b:cc:
a0:8b:3a:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eosHMjF2HL7lOusq7XuG8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0ZTEyODNkYWUwYjBiOTk3ODY3MjY1Y2IyYzAwODNjNTEx
MzZlZGEwHhcNMjYwNTEzMDAwMDQzWhcNMjYwNTE0MDAwMDQzWjAzMTEwLwYDVQQD
EygzM2VjNzcxZDY5NWUwODVmMThhODc4ODU3OGVjMjZlNDc0NTFkYjJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtR9lLA6MipjETpMNcPt5wZtJSwRF
ymMWt1sogh1UmKs8FfftTEUP52rjp0RYAhylM5UO+Yb/Y8KyPhJIXtczKujHRnA9
Bgi0mZ0+5QSIFieqgYkBIFBFtDx3EyCVG3vXKhFMOzvahtc3eyCdZesEl+pGKQcD
JT/FvaZiC77W6/7FNn2VR9/Ue2NG1IY4Z4LOpOWqa+U6REY1bib/cCaE5f9YCZZ2
A7o6XoxWJSuF7If0M4C4+THVcz7yb3ES/FCsuhIP1jXQboCwoGKlYUAXlkodfdTc
JjfqZrehoXOEDibStDil1pkRuVjeueX2VPmLN6bKlRLKpOIiMAO9rGmpEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDPsdx1pXghfGKh4hXjsJuR0UdssMB8GA1UdIwQY
MBaAFBThKD2uCwuZeGcmXLLACDxRE27aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRk9Fb1BhNExDNWw0WnlaY3NzQUlQRkVUYnRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9lNjY1NzEtYTBjNC00YWMwLTgzYWUt
ODA0MTFlOTE3NTM4LzEvRk9Fb1BhNExDNWw0WnlaY3NzQUlQRkVUYnRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9lNjY1NzEtYTBjNC00YWMwLTgzYWUtODA0MTFlOTE3NTM4
LzEvRk9Fb1BhNExDNWw0WnlaY3NzQUlQRkVUYnRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiCr8j1F4
179KF74x1arcoteQK3a2toqUOJzFYb3CW44klsKMSfDWzhyr2GGUfIdDs4ERmd0W
ZWKGFSggIRBP4nEXJ+eeWHZdk4mjBjRz1Mp3r5JKOxtkt3XlRI1ZpX3u3fg7+7HM
19famrmmnRA3sy6RGdRo4ZmS9QaPBw6+HY0EtjKsg/VnxXj7qy368fzjMljrkZRl
NbWYpF7qX5AIos6IYp2rQNbopPdA4jkZCY8qoh+VSnAudFrSqXip6dYzXX71NHjU
n5htZBfy8FuXLJxDzl4fMarBao7POhAuYkVj0Royyxk1lWTh5nwJkPWf7z4jEToT
YjuZnCvMoIs6kw==
-----END CERTIFICATE-----
Generated at Wed May 13 05:42:33 2026 by rpki-client