Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/98277d-12b1-488c-ae35-8879b7116da6/1/FOxcZFb_9aWbEMXLpcBl-8vMhg0.mft
File: FOxcZFb_9aWbEMXLpcBl-8vMhg0.mft (raw, json)
Hash identifier: G5UISYx4zwzvuQW5f2B582EIHoPyAc7CFjbNmshzwr0=
Subject key identifier: 0B:CF:C5:BA:F2:04:CC:D4:A4:D0:1A:D9:68:5B:DC:E9:F4:9D:5B:75
Authority key identifier: 14:EC:5C:64:56:FF:F5:A5:9B:10:C5:CB:A5:C0:65:FB:CB:CC:86:0D
Certificate issuer: /CN=14ec5c6456fff5a59b10c5cba5c065fbcbcc860d
Certificate serial: 01A1114D95838FD546EFA4D8CAD9AF6F51E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FOxcZFb_9aWbEMXLpcBl-8vMhg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/98277d-12b1-488c-ae35-8879b7116da6/1/FOxcZFb_9aWbEMXLpcBl-8vMhg0.mft
Manifest number: 72
Signing time: Tue 06 Oct 2026 13:00:59 +0000
Manifest this update: Tue 06 Oct 2026 13:00:59 +0000
Manifest next update: Wed 07 Oct 2026 13:00:59 +0000
Files and hashes: 1: 1cpw9dbUrtknizd-rffhTFR8Ji0.roa (hash: vZ/+72EdcWabpps15UEov7kxWkSE33QxgTZ0hz4DZsk=)
2: FOxcZFb_9aWbEMXLpcBl-8vMhg0.crl (hash: nDVPAsShkpPgj8BbNGdgtQA4cYCSEVMLDvmI+nAttz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/98277d-12b1-488c-ae35-8879b7116da6/1/FOxcZFb_9aWbEMXLpcBl-8vMhg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/98277d-12b1-488c-ae35-8879b7116da6/1/FOxcZFb_9aWbEMXLpcBl-8vMhg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/FOxcZFb_9aWbEMXLpcBl-8vMhg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 13:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:11:4d:95:83:8f:d5:46:ef:a4:d8:ca:d9:af:6f:51:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14ec5c6456fff5a59b10c5cba5c065fbcbcc860d
Validity
Not Before: Oct 6 13:00:59 2026 GMT
Not After : Oct 7 13:00:59 2026 GMT
Subject: CN=0bcfc5baf204ccd4a4d01ad9685bdce9f49d5b75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d3:3a:a9:f1:3e:4e:81:bb:f2:da:6d:de:22:
b6:fe:77:cf:b7:34:2e:ce:33:5e:f0:84:f8:c2:da:
ac:fa:ec:4a:c3:4d:21:4b:fd:d1:c1:50:7c:6a:83:
1f:8d:30:45:6b:c0:10:df:d9:09:b6:6a:c8:6f:38:
3e:5a:9a:b8:15:36:c8:97:0a:61:c0:45:29:1a:6d:
cd:ac:30:76:72:a1:ac:fc:ef:61:15:f4:70:d4:1e:
d9:36:26:08:5e:66:a1:a9:94:46:43:d3:e0:14:df:
f7:52:48:5e:49:9b:b6:a2:5e:3e:05:30:06:e8:7b:
3f:ce:34:dd:fe:5d:32:8a:f0:07:bd:16:54:5e:f8:
bc:0c:d2:62:52:ec:2f:b8:42:ed:e8:9d:ab:b7:8d:
ba:d6:bb:25:0d:63:c1:91:84:c1:42:b1:d5:e3:e6:
aa:2a:a6:44:72:d1:da:53:5c:df:d5:c5:2f:01:a5:
4c:e1:fe:98:a1:5f:f5:93:a8:93:86:54:2c:a2:4d:
cb:f9:6e:c9:b3:98:a4:cb:f6:d7:60:09:16:f1:c0:
ac:10:28:44:e1:b9:42:92:46:b9:42:ac:44:c0:3c:
e9:b7:66:45:f8:9f:fa:0e:ad:ff:4a:7e:4e:dd:41:
a1:21:22:33:11:0f:e6:87:14:7b:8c:c2:50:db:8a:
d6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:CF:C5:BA:F2:04:CC:D4:A4:D0:1A:D9:68:5B:DC:E9:F4:9D:5B:75
X509v3 Authority Key Identifier:
keyid:14:EC:5C:64:56:FF:F5:A5:9B:10:C5:CB:A5:C0:65:FB:CB:CC:86:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FOxcZFb_9aWbEMXLpcBl-8vMhg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/98277d-12b1-488c-ae35-8879b7116da6/1/FOxcZFb_9aWbEMXLpcBl-8vMhg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/98277d-12b1-488c-ae35-8879b7116da6/1/FOxcZFb_9aWbEMXLpcBl-8vMhg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:0e:17:5f:f5:e8:b8:2a:0e:fe:96:83:07:98:c7:f4:a6:0b:
98:40:18:e8:64:93:db:ef:e3:e8:9e:33:26:b2:9b:9c:38:9f:
e3:c6:47:ed:b0:9e:81:90:93:5f:e5:f8:06:0b:20:80:d6:86:
14:15:84:b6:45:44:34:11:0a:12:d4:29:06:fc:ed:e9:1b:eb:
c3:95:b0:15:b8:7b:be:71:b9:13:7b:99:66:b9:af:22:94:3c:
f7:64:70:76:a3:ef:44:43:2b:ce:e7:d0:d5:20:2c:67:cd:58:
6f:5f:c5:86:f8:01:b5:02:a4:75:47:20:a5:31:66:40:cf:2b:
4b:68:d9:5a:34:e8:5a:c6:3c:e8:f6:dd:85:e1:92:da:1a:6e:
29:6a:2e:2c:9c:b9:a4:94:97:e5:14:cc:c3:6d:87:be:c0:c0:
88:ba:a2:6a:b3:43:2d:83:16:e3:4b:86:15:b2:1e:52:80:58:
f5:60:50:a1:ee:e9:03:a2:40:18:e9:1b:5f:65:6a:45:17:30:
ce:19:40:66:10:28:19:c9:f2:cc:ba:69:08:03:f3:68:f0:f4:
1a:40:6b:97:54:b6:21:18:87:62:3a:99:04:3b:5a:a7:01:c1:
e4:bf:d8:f6:18:81:11:f0:4e:95:10:e2:f8:f1:f2:85:05:15:
65:d0:99:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 22:38:49 2026 by rpki-client