Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.mft
File: FOEoPa4LC5l4ZyZcssAIPFETbto.mft (raw, json)
Hash identifier: Mhu+LajjKeZBeRSO+M/KOdcZ6Q2H6nQD/0WdhTjjFMU=
Subject key identifier: EA:5F:99:30:68:64:E0:F4:27:2B:7F:D0:87:1A:A0:4B:5C:56:F8:BA
Authority key identifier: 14:E1:28:3D:AE:0B:0B:99:78:67:26:5C:B2:C0:08:3C:51:13:6E:DA
Certificate issuer: /CN=14e1283dae0b0b997867265cb2c0083c51136eda
Certificate serial: 019CAFB5F0977B71D341519CD74F54CE2995
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FOEoPa4LC5l4ZyZcssAIPFETbto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.mft
Manifest number: 0160
Signing time: Mon 02 Mar 2026 18:01:02 +0000
Manifest this update: Mon 02 Mar 2026 18:01:02 +0000
Manifest next update: Tue 03 Mar 2026 18:01:02 +0000
Files and hashes: 1: FOEoPa4LC5l4ZyZcssAIPFETbto.crl (hash: 5fsvAuF/FS1y2VW2cXoPfGnavmo5lazQBiuy4mVWqQk=)
2: LdLsv-q2C4Pbf9GxWCyaIF5HbLc.roa (hash: 9N8HiCQDKmL6vVupPuazpXqAGCKxU6fFpoiaBLlmwPI=)
3: lgEFYTQnRHqqMwP4s3KsomJeD7g.roa (hash: 4Ag8vOKyZPCZGgR17Gsq8fIgU5DZpoD4F55HJ+y+s5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.mft
rsync://rpki.ripe.net/repository/DEFAULT/FOEoPa4LC5l4ZyZcssAIPFETbto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:b5:f0:97:7b:71:d3:41:51:9c:d7:4f:54:ce:29:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14e1283dae0b0b997867265cb2c0083c51136eda
Validity
Not Before: Mar 2 18:01:02 2026 GMT
Not After : Mar 3 18:01:02 2026 GMT
Subject: CN=ea5f99306864e0f4272b7fd0871aa04b5c56f8ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d4:77:00:57:cd:56:75:6c:03:f5:32:1f:9e:
45:2a:47:55:d6:20:ba:63:25:d3:b9:d4:8e:f4:14:
3e:05:2e:f2:3b:cf:e3:77:76:58:2e:51:05:4c:82:
98:26:70:cf:c5:80:37:99:88:5f:32:8c:44:7e:05:
4a:2e:03:28:be:cf:86:2e:62:dd:bb:98:e9:b8:e5:
25:55:62:d7:c6:f7:49:ed:fb:2c:11:f0:5b:c5:69:
b2:79:55:9a:45:9f:44:da:ee:1a:d5:7c:b2:1d:7b:
b9:a3:0c:18:c7:b2:4a:46:c6:98:6f:c1:0e:7c:0d:
0d:08:ef:f2:8b:65:9a:76:c1:57:6c:3f:6a:14:5f:
c0:9b:69:4f:7e:37:ae:c6:ff:8c:53:12:60:bc:f6:
f9:55:6d:1c:d6:2b:3f:1a:c5:5d:e4:75:92:79:2a:
73:ff:54:c9:2a:57:11:04:67:67:c5:02:c9:8e:69:
14:12:b5:b9:24:43:51:87:c0:97:31:48:93:d1:b2:
ee:ca:86:cc:1a:27:2d:8f:b4:55:e0:5d:5c:2d:fa:
da:ac:97:54:2b:29:b8:f4:8a:b6:b3:73:c4:e4:b5:
0d:ed:35:56:b5:d2:ab:02:cb:88:72:7b:cd:e2:76:
67:c5:67:f2:7c:cd:32:e3:4a:e8:9c:2d:55:89:3d:
ed:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:5F:99:30:68:64:E0:F4:27:2B:7F:D0:87:1A:A0:4B:5C:56:F8:BA
X509v3 Authority Key Identifier:
keyid:14:E1:28:3D:AE:0B:0B:99:78:67:26:5C:B2:C0:08:3C:51:13:6E:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FOEoPa4LC5l4ZyZcssAIPFETbto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:df:12:2a:bd:dc:f8:c5:04:a3:cf:36:f8:e6:02:fd:bc:5c:
25:e1:c1:71:10:48:7a:cb:46:e3:08:c4:3f:15:82:56:82:34:
48:e8:a2:a4:25:ea:c0:b2:7f:ae:a3:9b:e8:0c:67:53:93:90:
9a:51:42:b3:98:d6:d4:69:66:47:aa:f7:94:98:2e:8a:69:9d:
38:d6:68:01:7f:4b:da:8e:06:c9:7b:60:12:25:7b:81:d6:ad:
9a:57:a9:a0:7e:f5:49:74:8b:fe:7e:a0:69:da:30:83:dd:3f:
42:f8:96:7a:fd:1c:ce:a0:4d:bd:46:67:20:57:b6:10:6b:c0:
a3:10:fd:25:1e:ec:b7:8b:66:90:64:aa:db:d9:b7:bd:8f:5b:
3c:7a:d4:fd:99:5f:20:32:ef:04:b9:51:09:8a:e3:09:2f:ff:
81:d0:ff:db:d4:e5:aa:6b:f1:d0:0e:b7:07:3f:00:57:dc:6f:
62:a6:27:09:c9:78:8b:10:e0:bb:22:f3:89:ad:3e:f2:7d:2f:
29:b9:2d:54:5e:1e:df:0e:a9:f2:a3:ae:2e:00:0b:2e:3c:68:
af:f5:22:56:19:30:e1:e3:98:00:b3:b8:ce:80:4b:2e:05:78:
b7:17:5c:6c:5c:e0:46:f7:70:8b:b0:e7:b8:44:2f:45:69:0b:
e9:6c:e5:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyvtfCXe3HTQVGc109UzimVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0ZTEyODNkYWUwYjBiOTk3ODY3MjY1Y2IyYzAwODNjNTEx
MzZlZGEwHhcNMjYwMzAyMTgwMTAyWhcNMjYwMzAzMTgwMTAyWjAzMTEwLwYDVQQD
EyhlYTVmOTkzMDY4NjRlMGY0MjcyYjdmZDA4NzFhYTA0YjVjNTZmOGJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNR3AFfNVnVsA/UyH55FKkdV1iC6
YyXTudSO9BQ+BS7yO8/jd3ZYLlEFTIKYJnDPxYA3mYhfMoxEfgVKLgMovs+GLmLd
u5jpuOUlVWLXxvdJ7fssEfBbxWmyeVWaRZ9E2u4a1XyyHXu5owwYx7JKRsaYb8EO
fA0NCO/yi2WadsFXbD9qFF/Am2lPfjeuxv+MUxJgvPb5VW0c1is/GsVd5HWSeSpz
/1TJKlcRBGdnxQLJjmkUErW5JENRh8CXMUiT0bLuyobMGictj7RV4F1cLfrarJdU
Kym49Iq2s3PE5LUN7TVWtdKrAsuIcnvN4nZnxWfyfM0y40ronC1ViT3tfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOpfmTBoZOD0Jyt/0IcaoEtcVvi6MB8GA1UdIwQY
MBaAFBThKD2uCwuZeGcmXLLACDxRE27aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRk9Fb1BhNExDNWw0WnlaY3NzQUlQRkVUYnRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9lNjY1NzEtYTBjNC00YWMwLTgzYWUt
ODA0MTFlOTE3NTM4LzEvRk9Fb1BhNExDNWw0WnlaY3NzQUlQRkVUYnRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9lNjY1NzEtYTBjNC00YWMwLTgzYWUtODA0MTFlOTE3NTM4
LzEvRk9Fb1BhNExDNWw0WnlaY3NzQUlQRkVUYnRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvd8SKr3c
+MUEo882+OYC/bxcJeHBcRBIestG4wjEPxWCVoI0SOiipCXqwLJ/rqOb6AxnU5OQ
mlFCs5jW1GlmR6r3lJguimmdONZoAX9L2o4GyXtgEiV7gdatmlepoH71SXSL/n6g
adowg90/QviWev0czqBNvUZnIFe2EGvAoxD9JR7st4tmkGSq29m3vY9bPHrU/Zlf
IDLvBLlRCYrjCS//gdD/29Tlqmvx0A63Bz8AV9xvYqYnCcl4ixDguyLzia0+8n0v
KbktVF4e3w6p8qOuLgALLjxor/UiVhkw4eOYALO4zoBLLgV4txdcbFzgRvdwi7Dn
uEQvRWkL6WzlKg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 21:11:12 2026 by rpki-client