Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft
File: FOKCz2FihLWPhexD5UyQv5WU5Jw.mft (raw, json)
Hash identifier: MKUihLQ5q3OWhAS35o6wytLc8rCxgd83IWD0gaUOVg4=
Subject key identifier: 60:AC:19:49:F3:94:77:EE:5E:A7:0B:69:FA:DB:7D:16:1D:80:E1:33
Authority key identifier: 14:E2:82:CF:61:62:84:B5:8F:85:EC:43:E5:4C:90:BF:95:94:E4:9C
Certificate issuer: /CN=14e282cf616284b58f85ec43e54c90bf9594e49c
Certificate serial: 019CAA8FC132E2917B106F87BFB14C77860D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FOKCz2FihLWPhexD5UyQv5WU5Jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft
Manifest number: 17B1
Signing time: Sun 01 Mar 2026 18:01:13 +0000
Manifest this update: Sun 01 Mar 2026 18:01:13 +0000
Manifest next update: Mon 02 Mar 2026 18:01:13 +0000
Files and hashes: 1: FOKCz2FihLWPhexD5UyQv5WU5Jw.crl (hash: A/UrQ0Bl2LRDY4kB26yDUu2xsaY87bmt45OBXsK3htA=)
2: ic08Zy2tp5ErO4fCUtcLYzoJ7HA.roa (hash: rUWPt9ieqVy+Gp/oD9EsBpO1X47eqDC+02qK6K5SPS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FOKCz2FihLWPhexD5UyQv5WU5Jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:c1:32:e2:91:7b:10:6f:87:bf:b1:4c:77:86:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14e282cf616284b58f85ec43e54c90bf9594e49c
Validity
Not Before: Mar 1 18:01:13 2026 GMT
Not After : Mar 2 18:01:13 2026 GMT
Subject: CN=60ac1949f39477ee5ea70b69fadb7d161d80e133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:03:dc:7f:ef:b8:b5:ac:1c:6c:2e:2d:ff:4d:
cd:7a:1e:93:6e:a7:e4:d4:1b:39:fa:71:1d:26:5e:
82:67:fb:d9:56:a6:90:01:0a:47:84:2d:f7:ac:71:
75:ad:c4:27:1e:c2:c0:01:15:4c:0f:e5:ce:5e:14:
36:4a:37:11:7a:59:38:4f:74:19:23:f4:d9:bc:73:
56:14:55:d6:57:a9:22:df:13:c9:6b:29:64:c4:43:
c5:ca:f2:74:0e:cd:28:0c:01:79:91:3d:60:5e:f4:
54:5b:03:5f:72:22:95:ed:5f:ce:44:36:a1:d5:6d:
55:9c:87:af:5b:ce:e0:aa:13:08:61:f9:23:36:7d:
89:6c:40:3c:ff:65:da:d7:ba:16:3e:70:4e:d5:83:
82:41:4d:40:6e:33:03:49:93:ea:a1:2f:95:23:06:
4b:5b:b1:fa:b1:ba:c4:51:b2:b9:a9:f4:3d:b1:33:
ce:61:f1:2f:d4:dc:25:d6:c3:ad:ed:80:8d:10:d6:
f8:c1:41:f6:66:9e:88:c5:fc:57:7e:82:42:f6:f5:
6d:9b:d6:b3:58:6f:61:fb:35:04:d9:29:ba:82:87:
a7:c9:46:37:95:26:6e:e3:97:ea:fd:40:1c:67:c1:
bc:39:31:15:75:72:f2:ea:88:22:7b:b6:db:30:e5:
86:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:AC:19:49:F3:94:77:EE:5E:A7:0B:69:FA:DB:7D:16:1D:80:E1:33
X509v3 Authority Key Identifier:
keyid:14:E2:82:CF:61:62:84:B5:8F:85:EC:43:E5:4C:90:BF:95:94:E4:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FOKCz2FihLWPhexD5UyQv5WU5Jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:e4:16:05:38:8e:7c:ee:be:f4:51:82:97:78:43:38:19:cc:
98:96:6e:62:61:72:86:45:47:9f:52:e2:d2:29:1c:45:ee:e0:
e7:33:a7:1d:cb:08:d3:de:ef:f0:f2:f8:ee:ec:fe:04:b0:0b:
04:29:9e:1a:e4:94:04:3a:3d:94:c6:be:a3:18:a7:98:2d:45:
58:e4:b1:97:0a:33:2b:f3:86:8c:cc:c1:df:f9:a3:8d:87:87:
86:4e:58:03:23:7c:c8:79:ec:3f:04:4e:ba:4d:16:32:bf:1b:
1a:0a:d2:ea:a5:61:ea:31:67:91:3f:26:63:de:ca:3b:7d:cb:
d1:e6:4d:80:73:84:76:b5:11:1c:8c:52:ee:ad:d3:29:2a:6b:
44:06:67:ca:ff:14:fe:71:84:fc:df:55:f5:d1:37:9f:c9:21:
f6:59:d2:ed:80:f1:d2:75:36:fa:4f:f0:9e:02:6a:99:69:38:
5f:c4:d3:42:54:64:9b:54:ba:da:95:ed:e7:0b:52:c7:d7:a8:
a4:c4:b6:04:4f:71:52:ac:90:61:e1:cc:a7:9c:7a:de:af:fc:
65:79:43:c6:d8:5e:7a:f1:07:e0:fd:ef:a3:d7:4b:45:8a:dc:
c9:05:ea:b0:83:71:9b:9a:d1:b9:2c:64:7f:3f:8d:89:c8:50:
d9:97:25:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqj8Ey4pF7EG+Hv7FMd4YNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0ZTI4MmNmNjE2Mjg0YjU4Zjg1ZWM0M2U1NGM5MGJmOTU5
NGU0OWMwHhcNMjYwMzAxMTgwMTEzWhcNMjYwMzAyMTgwMTEzWjAzMTEwLwYDVQQD
Eyg2MGFjMTk0OWYzOTQ3N2VlNWVhNzBiNjlmYWRiN2QxNjFkODBlMTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1APcf++4tawcbC4t/03Neh6Tbqfk
1Bs5+nEdJl6CZ/vZVqaQAQpHhC33rHF1rcQnHsLAARVMD+XOXhQ2SjcRelk4T3QZ
I/TZvHNWFFXWV6ki3xPJaylkxEPFyvJ0Ds0oDAF5kT1gXvRUWwNfciKV7V/ORDah
1W1VnIevW87gqhMIYfkjNn2JbEA8/2Xa17oWPnBO1YOCQU1AbjMDSZPqoS+VIwZL
W7H6sbrEUbK5qfQ9sTPOYfEv1Nwl1sOt7YCNENb4wUH2Zp6IxfxXfoJC9vVtm9az
WG9h+zUE2Sm6goenyUY3lSZu45fq/UAcZ8G8OTEVdXLy6ogie7bbMOWGJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGCsGUnzlHfuXqcLafrbfRYdgOEzMB8GA1UdIwQY
MBaAFBTigs9hYoS1j4XsQ+VMkL+VlOScMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRk9LQ3oyRmloTFdQaGV4RDVVeVF2NVdVNUp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9jOGQ4YWQtY2Q3Mi00MTliLTk3M2Yt
NTYwOTRmZDZjYzZjLzEvRk9LQ3oyRmloTFdQaGV4RDVVeVF2NVdVNUp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9jOGQ4YWQtY2Q3Mi00MTliLTk3M2YtNTYwOTRmZDZjYzZj
LzEvRk9LQ3oyRmloTFdQaGV4RDVVeVF2NVdVNUp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhuQWBTiO
fO6+9FGCl3hDOBnMmJZuYmFyhkVHn1Li0ikcRe7g5zOnHcsI097v8PL47uz+BLAL
BCmeGuSUBDo9lMa+oxinmC1FWOSxlwozK/OGjMzB3/mjjYeHhk5YAyN8yHnsPwRO
uk0WMr8bGgrS6qVh6jFnkT8mY97KO33L0eZNgHOEdrURHIxS7q3TKSprRAZnyv8U
/nGE/N9V9dE3n8kh9lnS7YDx0nU2+k/wngJqmWk4X8TTQlRkm1S62pXt5wtSx9eo
pMS2BE9xUqyQYeHMp5x63q/8ZXlDxtheevEH4P3vo9dLRYrcyQXqsINxm5rRuSxk
fz+NichQ2ZclbA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:05:06 2026 by rpki-client