Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.mft
File: FOEoPa4LC5l4ZyZcssAIPFETbto.mft (raw, json)
Hash identifier: t+OlAqsqPkmqTNNVWlpPl9coI8P5BlKlnFIXN4F8S90=
Subject key identifier: 04:BC:AF:12:00:90:63:37:14:24:B2:0B:20:82:44:96:91:66:27:A7
Authority key identifier: 14:E1:28:3D:AE:0B:0B:99:78:67:26:5C:B2:C0:08:3C:51:13:6E:DA
Certificate issuer: /CN=14e1283dae0b0b997867265cb2c0083c51136eda
Certificate serial: 019FAC76BBAA90ADF58645622552170F7AE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FOEoPa4LC5l4ZyZcssAIPFETbto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.mft
Manifest number: 02EC
Signing time: Wed 29 Jul 2026 06:01:29 +0000
Manifest this update: Wed 29 Jul 2026 06:01:29 +0000
Manifest next update: Thu 30 Jul 2026 06:01:29 +0000
Files and hashes: 1: FOEoPa4LC5l4ZyZcssAIPFETbto.crl (hash: WeVbQgWtO3lVzdgkamM+ghg0S2nPXllqFFLE18GvxME=)
2: LdLsv-q2C4Pbf9GxWCyaIF5HbLc.roa (hash: 9N8HiCQDKmL6vVupPuazpXqAGCKxU6fFpoiaBLlmwPI=)
3: lgEFYTQnRHqqMwP4s3KsomJeD7g.roa (hash: 4Ag8vOKyZPCZGgR17Gsq8fIgU5DZpoD4F55HJ+y+s5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.mft
rsync://rpki.ripe.net/repository/DEFAULT/FOEoPa4LC5l4ZyZcssAIPFETbto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:bb:aa:90:ad:f5:86:45:62:25:52:17:0f:7a:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14e1283dae0b0b997867265cb2c0083c51136eda
Validity
Not Before: Jul 29 06:01:29 2026 GMT
Not After : Jul 30 06:01:29 2026 GMT
Subject: CN=04bcaf12009063371424b20b20824496916627a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:81:6a:39:9d:f1:41:c3:d4:7e:a1:ae:2e:bb:
dd:42:59:10:fc:e2:d0:d5:6e:10:57:53:e5:56:ef:
63:71:3f:94:f5:db:b6:db:1d:40:c4:93:19:d3:5b:
50:af:8c:5e:37:bb:c6:d7:87:74:53:6f:1d:58:4e:
76:31:4c:17:2e:d5:52:9a:38:8d:e4:3c:9b:00:2c:
e1:86:0a:77:bf:a3:c8:c7:c1:f6:ea:1b:d8:b2:1f:
2c:f7:90:b0:7a:53:1f:43:61:7e:44:05:55:bd:e9:
52:96:cc:48:ab:66:5a:54:fa:0d:db:96:b8:53:e4:
55:47:4f:56:29:c6:e8:8a:d7:db:0d:41:df:71:ca:
1e:b3:7b:6e:28:40:2e:66:d9:bf:5b:db:16:71:20:
1f:7a:2e:2b:2d:73:13:85:4b:82:79:d0:90:49:56:
09:67:c4:f3:8a:06:89:fa:f3:90:27:92:49:a6:49:
01:ad:9a:7b:4a:9a:38:e7:12:39:0e:50:98:c2:b7:
50:fa:49:e4:72:f2:ef:b0:8a:77:ac:e7:57:7d:8c:
ad:61:da:3d:06:f1:92:f1:95:6e:01:66:f1:64:0d:
49:70:e3:cb:91:3e:ab:ed:c7:58:89:e5:b3:21:e9:
9b:be:29:64:31:d0:da:dc:84:5e:3d:bd:71:63:d1:
4c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:BC:AF:12:00:90:63:37:14:24:B2:0B:20:82:44:96:91:66:27:A7
X509v3 Authority Key Identifier:
keyid:14:E1:28:3D:AE:0B:0B:99:78:67:26:5C:B2:C0:08:3C:51:13:6E:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FOEoPa4LC5l4ZyZcssAIPFETbto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:87:be:a8:26:60:73:24:00:17:7f:73:a3:85:5e:4c:f7:df:
d4:01:24:a5:a1:f0:01:e8:64:44:41:61:cf:cd:32:a3:32:ac:
c3:66:50:88:e6:ca:0e:cb:a5:56:8e:6d:db:84:a2:0d:24:9e:
24:5d:e6:27:43:05:10:ee:5b:37:53:ed:32:cf:d7:be:87:ab:
12:b3:34:f5:d7:43:95:9e:f5:4a:dd:89:84:3e:0f:47:98:16:
69:5e:89:38:e8:16:95:8e:d8:aa:7f:dd:e2:fb:57:69:81:fd:
26:ca:e5:da:d3:b2:8f:d2:54:51:19:2c:7c:c0:08:d1:79:e6:
80:8b:47:e0:70:cc:d0:4c:d0:55:48:63:d2:d2:1b:3d:d2:04:
b2:97:09:b9:71:a6:d1:14:53:38:d2:c8:4d:f9:c7:b5:17:34:
bb:54:f7:d8:03:2a:a6:99:5f:70:75:7c:a9:f0:4a:cf:c2:be:
35:40:8f:7f:ef:82:c8:10:5a:03:bc:4b:a7:f7:79:f0:d0:2b:
80:6c:a8:00:a4:c5:0b:a0:fc:e9:eb:74:7a:f6:a2:1c:b0:ae:
9c:fa:28:bf:56:5a:b9:51:94:75:24:51:45:5c:11:13:f5:60:
2e:7d:41:5f:4b:d1:b6:b9:be:ee:a6:f0:34:cb:05:fc:63:0e:
cf:49:a1:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:13:43 2026 by rpki-client