Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.mft
File: E-8y2L8VPATGOTviTwYyQ_fop-I.mft (raw, json)
Hash identifier: 2G5NkyAbEwNFSYs3NZhappu+0puZJ+hVsIFKysFUl0c=
Subject key identifier: A8:3F:53:1C:8F:72:87:2F:7A:A4:76:1F:48:60:FF:B5:F7:DD:60:2B
Authority key identifier: 13:EF:32:D8:BF:15:3C:04:C6:39:3B:E2:4F:06:32:43:F7:E8:A7:E2
Certificate issuer: /CN=13ef32d8bf153c04c6393be24f063243f7e8a7e2
Certificate serial: 019CAD2307F1B14E1A91793E4B56CC55E8C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-8y2L8VPATGOTviTwYyQ_fop-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.mft
Manifest number: 0AAB
Signing time: Mon 02 Mar 2026 06:01:19 +0000
Manifest this update: Mon 02 Mar 2026 06:01:19 +0000
Manifest next update: Tue 03 Mar 2026 06:01:19 +0000
Files and hashes: 1: E-8y2L8VPATGOTviTwYyQ_fop-I.crl (hash: bFBbvim8Jo061d8EeQ11G57eUapi01sHJv1cByOvgnk=)
2: gXqLoCjch24SvYMMr4ERE1p3TXY.roa (hash: iUQ1Oys+V4y+EkeTDwfkNa5H0Gsu8L8N4uEAk+c5TDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/E-8y2L8VPATGOTviTwYyQ_fop-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:23:07:f1:b1:4e:1a:91:79:3e:4b:56:cc:55:e8:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ef32d8bf153c04c6393be24f063243f7e8a7e2
Validity
Not Before: Mar 2 06:01:19 2026 GMT
Not After : Mar 3 06:01:19 2026 GMT
Subject: CN=a83f531c8f72872f7aa4761f4860ffb5f7dd602b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:81:22:9a:fc:45:cc:76:80:e7:bf:66:60:ff:
04:16:3b:0d:62:1b:06:48:1b:c1:ab:06:e4:92:71:
fc:b0:df:af:9c:c2:73:99:8f:15:04:33:f4:f8:97:
3e:f7:84:8b:b9:92:56:dc:47:b4:62:11:c3:63:e1:
a4:ff:d9:c4:9a:f6:cb:c0:02:f8:b6:d9:45:3a:eb:
9d:e9:9f:7e:f0:6f:ae:19:51:1f:29:3b:d1:58:65:
78:63:ca:fd:c1:f5:72:7f:6a:bc:a0:bb:aa:65:b3:
24:ee:14:0b:8e:46:f7:21:3c:92:b7:d0:f2:84:6d:
14:90:a9:28:bd:d6:34:97:df:6d:2e:e6:f4:bc:68:
97:9c:4f:81:fa:f9:79:2a:d2:93:7b:2b:e7:8f:be:
be:70:51:fd:05:54:09:35:2e:ae:15:33:fb:3d:6a:
77:ef:22:65:7e:5a:e9:d5:71:19:75:39:3b:25:31:
eb:b3:15:c2:8d:76:f0:59:af:2d:e5:cd:f2:e2:8c:
ca:ff:6a:a6:97:dc:91:6c:dc:14:b9:85:5c:f4:2d:
c3:80:5f:18:4e:06:32:38:70:be:1b:96:85:ec:0e:
1c:fa:aa:f6:69:65:a2:1a:5c:92:93:89:42:90:3d:
b3:60:40:08:d1:04:d9:a0:af:d3:91:b0:4f:c2:5c:
b1:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:3F:53:1C:8F:72:87:2F:7A:A4:76:1F:48:60:FF:B5:F7:DD:60:2B
X509v3 Authority Key Identifier:
keyid:13:EF:32:D8:BF:15:3C:04:C6:39:3B:E2:4F:06:32:43:F7:E8:A7:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-8y2L8VPATGOTviTwYyQ_fop-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:8f:2b:9a:0a:aa:93:31:5d:ec:9e:eb:bf:c0:36:1a:37:7b:
85:4c:b8:5c:48:26:88:30:8d:12:7c:01:07:27:a6:ca:15:86:
99:48:35:f7:ff:bd:d7:3d:ba:03:8b:28:a6:bd:f9:79:a6:cd:
e6:d5:7b:e6:a4:b6:b2:dd:c8:dc:23:63:11:92:56:6c:bf:38:
f7:3d:2c:50:1b:e1:e1:cf:fd:af:0b:50:b8:ff:3b:3f:66:7f:
04:6f:56:1d:0e:6b:c3:73:9e:9d:45:85:8a:8a:28:a3:60:e8:
35:71:96:e5:2b:2d:7d:a1:db:10:62:af:f3:cc:a2:38:c5:32:
08:2b:1c:e9:55:c2:f0:59:d7:d7:a1:3a:65:bf:14:b7:9c:cc:
22:6e:c2:a5:79:2c:1b:0e:9c:bd:f7:8e:53:5e:53:55:2b:23:
97:60:d2:c3:32:aa:ef:0e:1e:0d:13:8b:ad:b4:e8:7a:c6:ea:
39:92:f8:a8:51:af:46:6e:84:c1:2b:d7:88:14:80:fd:ea:c8:
c4:a9:b6:2b:75:f5:33:d8:9b:45:26:31:cb:a4:6f:51:e0:ee:
37:68:b9:43:7b:5c:2a:df:68:98:21:d1:bc:5b:bf:d1:e8:01:
fd:db:61:30:73:b2:14:db:ee:ec:5b:a7:a7:32:6e:4a:d7:6a:
72:a9:0e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:37:49 2026 by rpki-client