Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.mft
File: FOEoPa4LC5l4ZyZcssAIPFETbto.mft (raw, json)
Hash identifier: PwKtfCDZ19Ub6RLLzW8xhdQeuZdQGTXcbBnlR67Rj6c=
Subject key identifier: 53:06:F9:7D:0C:E0:94:20:9F:E7:FE:8B:2D:35:36:FE:D9:AD:7A:B4
Authority key identifier: 14:E1:28:3D:AE:0B:0B:99:78:67:26:5C:B2:C0:08:3C:51:13:6E:DA
Certificate issuer: /CN=14e1283dae0b0b997867265cb2c0083c51136eda
Certificate serial: 01A0E174F3183B75DD31DBAF248C4E84A719
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FOEoPa4LC5l4ZyZcssAIPFETbto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.mft
Manifest number: 038C
Signing time: Sun 27 Sep 2026 06:02:12 +0000
Manifest this update: Sun 27 Sep 2026 06:02:12 +0000
Manifest next update: Mon 28 Sep 2026 06:02:12 +0000
Files and hashes: 1: FOEoPa4LC5l4ZyZcssAIPFETbto.crl (hash: bjeawdASxHQW98n1GDQY+bKbf1iarP1dxCTpK+o3paI=)
2: LdLsv-q2C4Pbf9GxWCyaIF5HbLc.roa (hash: 9N8HiCQDKmL6vVupPuazpXqAGCKxU6fFpoiaBLlmwPI=)
3: lgEFYTQnRHqqMwP4s3KsomJeD7g.roa (hash: 4Ag8vOKyZPCZGgR17Gsq8fIgU5DZpoD4F55HJ+y+s5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.mft
rsync://rpki.ripe.net/repository/DEFAULT/FOEoPa4LC5l4ZyZcssAIPFETbto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:74:f3:18:3b:75:dd:31:db:af:24:8c:4e:84:a7:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14e1283dae0b0b997867265cb2c0083c51136eda
Validity
Not Before: Sep 27 06:02:12 2026 GMT
Not After : Sep 28 06:02:12 2026 GMT
Subject: CN=5306f97d0ce094209fe7fe8b2d3536fed9ad7ab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1f:7c:c7:a6:72:39:25:40:75:dc:4d:92:3a:
27:b2:72:7f:da:95:02:f0:d3:d7:bf:16:7a:a7:0a:
e6:02:b9:6f:48:4a:5c:9a:65:37:65:99:83:fd:0b:
dc:24:94:c4:6e:f6:18:2f:3b:b6:5e:02:9e:4c:63:
d2:cf:a9:e7:8f:16:14:9c:c8:1e:69:d9:ab:02:25:
02:8d:e7:88:ef:4c:51:9a:fe:e0:c5:29:33:e3:06:
df:b6:51:c7:b3:70:3c:bb:f4:35:da:49:90:b5:83:
2a:9b:9c:d4:cd:e4:c7:92:de:a5:a6:a5:6d:82:e7:
1c:a7:82:88:f8:92:85:46:c7:bb:09:5a:45:eb:25:
85:32:24:29:93:ed:16:14:30:50:a8:e0:ca:30:f9:
44:28:9f:12:35:93:bb:34:1d:e1:dc:ca:c4:72:56:
15:8c:56:b8:5c:a1:dc:44:fe:3c:59:23:2e:e8:5a:
a9:0d:17:31:7d:44:7e:f1:91:a8:91:d6:1f:b1:de:
d6:6c:17:de:6d:06:be:90:c0:54:9c:1e:b9:7f:c0:
fb:e5:2f:fa:24:84:2a:67:33:35:52:ef:1e:14:5c:
8e:e9:43:34:f0:23:ab:24:e6:03:01:f6:5d:1e:9e:
f8:63:22:d5:79:91:f5:2f:08:87:74:d4:79:84:9c:
45:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:06:F9:7D:0C:E0:94:20:9F:E7:FE:8B:2D:35:36:FE:D9:AD:7A:B4
X509v3 Authority Key Identifier:
keyid:14:E1:28:3D:AE:0B:0B:99:78:67:26:5C:B2:C0:08:3C:51:13:6E:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FOEoPa4LC5l4ZyZcssAIPFETbto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:fe:10:05:91:cf:3a:41:64:63:06:bd:47:8d:9d:09:61:56:
ba:c1:cb:8a:12:6a:c1:eb:9f:27:9d:7d:eb:dd:c6:5c:1f:6d:
05:03:35:83:c3:6c:ca:f6:74:e6:86:e8:02:44:ff:fe:97:b0:
23:4e:b0:2e:9c:87:00:f0:f7:a0:5a:8b:82:ec:79:fb:32:4c:
36:66:ee:4e:12:d9:da:b8:77:11:c1:a2:a7:75:7b:bd:74:d7:
ea:b5:ad:a3:c5:9e:8d:79:ee:17:aa:06:41:b9:13:12:da:ee:
ee:6d:ef:eb:c0:2e:8f:fc:56:6c:2e:58:e4:4d:46:09:78:2c:
ce:3b:64:85:4a:88:84:a2:74:8a:be:75:0b:38:05:ef:b8:a3:
04:7b:aa:53:cb:8d:55:12:de:43:70:07:ba:c3:84:f0:09:68:
27:9c:a1:c9:6a:c3:94:a7:93:66:dd:65:58:12:ee:bd:2e:f0:
f3:b5:3a:63:ff:ee:6a:84:35:c8:fe:44:47:aa:e4:0e:23:1e:
21:ae:79:03:a7:69:04:08:d8:af:9e:62:2c:bb:c4:ce:51:99:
f4:95:88:e0:ff:6c:75:9d:fe:ac:e9:fe:0f:f6:c2:36:61:d4:
76:8d:9f:c1:61:1c:ca:3e:db:23:f5:7a:6e:b7:07:99:d6:b6:
2f:a3:cd:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:44:38 2026 by rpki-client