Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.mft
File: FOEoPa4LC5l4ZyZcssAIPFETbto.mft (raw, json)
Hash identifier: LVJ3eIGsQjqKUaaOnAuJXumm72NmRHnyQ2gsmuGCqDw=
Subject key identifier: 45:57:3D:97:8E:C1:1C:A0:03:A0:B0:C9:33:24:CF:0A:D6:58:0C:1F
Authority key identifier: 14:E1:28:3D:AE:0B:0B:99:78:67:26:5C:B2:C0:08:3C:51:13:6E:DA
Certificate issuer: /CN=14e1283dae0b0b997867265cb2c0083c51136eda
Certificate serial: 019D9B513C901C1CDC6D483A1EC9220EC467
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FOEoPa4LC5l4ZyZcssAIPFETbto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.mft
Manifest number: 01DA
Signing time: Fri 17 Apr 2026 12:01:25 +0000
Manifest this update: Fri 17 Apr 2026 12:01:25 +0000
Manifest next update: Sat 18 Apr 2026 12:01:25 +0000
Files and hashes: 1: FOEoPa4LC5l4ZyZcssAIPFETbto.crl (hash: Svj1aCVcebI3Bd8rcurkyDqs6t3iiUShoLgYb0N+9B0=)
2: LdLsv-q2C4Pbf9GxWCyaIF5HbLc.roa (hash: 9N8HiCQDKmL6vVupPuazpXqAGCKxU6fFpoiaBLlmwPI=)
3: lgEFYTQnRHqqMwP4s3KsomJeD7g.roa (hash: 4Ag8vOKyZPCZGgR17Gsq8fIgU5DZpoD4F55HJ+y+s5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.mft
rsync://rpki.ripe.net/repository/DEFAULT/FOEoPa4LC5l4ZyZcssAIPFETbto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:3c:90:1c:1c:dc:6d:48:3a:1e:c9:22:0e:c4:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14e1283dae0b0b997867265cb2c0083c51136eda
Validity
Not Before: Apr 17 12:01:25 2026 GMT
Not After : Apr 18 12:01:25 2026 GMT
Subject: CN=45573d978ec11ca003a0b0c93324cf0ad6580c1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:27:10:b5:3e:e9:cd:80:20:be:d6:66:84:3f:
e8:63:48:87:99:02:9e:f1:6c:eb:3e:ac:6d:2e:6e:
4d:b7:21:c8:27:41:6f:63:53:1e:7e:da:48:46:7e:
c4:d2:ea:86:f7:57:52:60:41:38:4f:f5:b0:01:20:
fb:03:a0:30:d4:cd:9b:6a:06:c1:a8:f2:07:10:31:
86:4b:67:ab:3e:ea:64:2e:25:5d:a6:65:b2:a0:c3:
80:71:ed:fd:16:c9:1b:9d:2f:bf:71:bb:fd:01:e5:
4e:c0:a7:79:06:5d:52:a9:06:49:84:11:ed:b8:a0:
02:06:ff:1c:a0:fd:5e:da:70:3e:c3:2b:06:34:71:
ca:4e:f3:af:5c:97:c4:19:17:84:9d:48:b2:5f:18:
7b:ee:9e:0b:8e:ed:f7:2f:22:0c:3d:2f:ec:9f:4a:
bc:27:7b:3a:74:74:1f:38:69:5d:eb:86:a0:ea:2b:
d4:4e:01:a6:b8:bb:d6:02:ea:e6:f9:2d:71:f1:c0:
d2:80:c2:b8:9b:4f:67:8e:9c:65:f5:ce:c6:55:02:
8b:44:70:80:23:64:0a:3c:3a:bb:44:db:b2:99:60:
86:5f:2b:bc:5c:93:87:f9:88:c4:47:eb:82:7b:7a:
d6:97:b9:ac:1b:d7:03:07:27:07:cb:fa:f3:0a:3a:
44:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:57:3D:97:8E:C1:1C:A0:03:A0:B0:C9:33:24:CF:0A:D6:58:0C:1F
X509v3 Authority Key Identifier:
keyid:14:E1:28:3D:AE:0B:0B:99:78:67:26:5C:B2:C0:08:3C:51:13:6E:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FOEoPa4LC5l4ZyZcssAIPFETbto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:3e:71:3c:07:f3:a1:36:55:6d:3e:31:65:7b:a6:2d:7d:29:
e1:cf:91:09:9a:b7:96:77:a0:43:00:a4:59:2e:5a:95:69:65:
7a:e2:21:e9:65:ba:fc:fc:fd:3f:dd:55:9f:01:b0:75:54:bd:
0a:aa:bd:49:b6:5a:bb:f1:f7:05:92:c8:c5:98:d4:c8:b0:5e:
00:89:c6:4e:72:ab:58:19:7f:a1:e9:e7:a6:4d:62:de:85:a3:
17:1f:ab:50:46:99:e1:15:60:5c:98:3c:df:d2:d5:36:5e:55:
78:6d:89:cb:1f:11:41:22:ee:fd:27:ac:c0:be:76:e8:85:cf:
0e:58:82:06:73:00:93:04:19:f3:38:01:97:50:ca:d5:76:a0:
fa:50:60:ca:42:12:a2:01:20:a9:d5:cd:08:0a:aa:71:87:11:
4f:c5:1f:f6:4e:f5:06:ab:66:40:85:d0:a4:56:d6:69:5c:3c:
d3:69:31:33:ac:5e:fe:23:58:ba:6b:25:9e:48:78:b1:6f:38:
0f:20:02:e2:81:d9:ae:95:25:4f:20:5f:aa:cb:ab:ca:f5:56:
03:fe:6a:64:3a:a6:98:63:ed:e5:5f:67:dd:a0:e3:b1:b1:4e:
db:cc:a3:03:cf:46:e6:a8:16:b9:5c:dc:ff:93:7a:2e:da:66:
e8:af:85:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:51:50 2026 by rpki-client