Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft
File: FOKCz2FihLWPhexD5UyQv5WU5Jw.mft (raw, json)
Hash identifier: 0YfsI8wrP3eQWJ3mA4a6rDWr13mxuc+eMneHAM3HOr0=
Subject key identifier: 8E:13:EE:B7:4D:B6:6F:7F:75:35:DE:59:28:12:D8:C8:D5:23:5B:71
Authority key identifier: 14:E2:82:CF:61:62:84:B5:8F:85:EC:43:E5:4C:90:BF:95:94:E4:9C
Certificate issuer: /CN=14e282cf616284b58f85ec43e54c90bf9594e49c
Certificate serial: 01A1DF1527B07D0E646485D3B56DE61C7309
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FOKCz2FihLWPhexD5UyQv5WU5Jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft
Manifest number: 1A63
Signing time: Sun 15 Nov 2026 12:01:07 +0000
Manifest this update: Sun 15 Nov 2026 12:01:07 +0000
Manifest next update: Mon 16 Nov 2026 12:01:07 +0000
Files and hashes: 1: FOKCz2FihLWPhexD5UyQv5WU5Jw.crl (hash: MVSJdgN9QEf8CMkET4fV8JHm8FpPZYV3FGivbYPsjDk=)
2: ic08Zy2tp5ErO4fCUtcLYzoJ7HA.roa (hash: rUWPt9ieqVy+Gp/oD9EsBpO1X47eqDC+02qK6K5SPS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FOKCz2FihLWPhexD5UyQv5WU5Jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:15:27:b0:7d:0e:64:64:85:d3:b5:6d:e6:1c:73:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14e282cf616284b58f85ec43e54c90bf9594e49c
Validity
Not Before: Nov 15 12:01:07 2026 GMT
Not After : Nov 16 12:01:07 2026 GMT
Subject: CN=8e13eeb74db66f7f7535de592812d8c8d5235b71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fe:6c:1a:ca:70:a4:06:60:ff:d0:02:c9:6e:
65:68:80:0e:ce:c9:0d:7e:ec:54:6b:2f:9c:fa:de:
63:e4:e3:d9:93:78:a5:59:0c:33:27:78:e7:ac:6f:
b4:46:5e:ea:97:c4:e4:07:f2:20:cd:0c:03:9d:35:
d8:5c:9e:9f:4b:c8:d2:53:a5:60:79:61:46:57:20:
15:d4:43:77:f7:58:4a:73:63:c7:96:71:e0:63:12:
f5:f3:ea:6c:49:9a:34:da:94:21:72:48:78:df:72:
52:8d:44:05:7f:f1:0d:90:93:fc:d2:f0:34:8d:a4:
ab:fa:d9:95:a8:70:67:16:c2:22:d6:bc:d9:55:f1:
27:b5:77:0e:ff:57:30:1b:8c:fd:91:7c:a3:7c:1c:
2e:85:4c:28:69:ad:c0:56:be:d4:0a:27:c8:53:47:
00:cd:ac:9f:6d:df:b7:0b:89:37:b5:39:7c:4b:df:
29:98:b6:6f:87:9c:c9:fe:f8:6a:df:60:20:3d:ca:
ab:05:09:15:b0:56:88:7f:89:29:c4:64:0e:02:72:
08:8c:dc:11:af:3e:7c:31:dc:cc:8c:2f:12:47:f7:
ca:b6:45:81:a7:d1:28:5a:87:39:eb:55:a0:fb:7c:
49:96:90:4b:cb:b8:50:5c:81:d7:73:28:67:4d:b8:
e7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:13:EE:B7:4D:B6:6F:7F:75:35:DE:59:28:12:D8:C8:D5:23:5B:71
X509v3 Authority Key Identifier:
keyid:14:E2:82:CF:61:62:84:B5:8F:85:EC:43:E5:4C:90:BF:95:94:E4:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FOKCz2FihLWPhexD5UyQv5WU5Jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:5b:21:15:34:30:9c:e9:f9:5a:94:2f:91:51:fb:de:e6:13:
75:b7:e5:32:69:7a:b1:8c:66:60:32:31:3c:76:4c:3b:66:57:
99:87:a3:99:de:56:c3:d6:75:b5:d2:f0:c5:8b:fb:f2:38:e9:
b5:fe:92:ca:76:bd:15:cc:58:d6:36:2d:b8:8b:87:c4:5a:b9:
86:46:13:2f:4d:b1:f2:19:8d:c5:05:74:2e:e6:00:6d:4f:e8:
a9:7e:af:56:94:28:8d:8b:5b:8d:55:cb:b7:92:31:24:c8:84:
54:f8:34:84:f3:ad:57:a4:ae:25:1a:42:d3:ef:76:7e:41:20:
36:46:ab:5f:32:3a:a1:f7:1b:23:c8:99:14:f7:73:2a:1d:36:
ee:c4:c3:b2:a6:c5:3b:f4:9b:31:70:5b:b2:b4:be:91:26:64:
b9:ed:50:52:73:f9:05:9f:4c:23:cf:4c:98:75:72:8c:00:95:
27:43:18:62:72:2e:67:99:00:1a:f0:e2:17:c5:cc:cf:84:d6:
60:7b:05:bd:69:85:d0:37:ac:53:40:b7:13:d7:27:43:bb:32:
22:af:8d:86:00:4f:3c:89:c2:7c:c2:8b:7a:fa:99:c8:37:05:
47:24:6a:93:09:cc:72:d2:05:60:54:13:58:d8:7e:8a:0e:fb:
b1:32:15:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:38:20 2026 by rpki-client