Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.mft
File: FOEoPa4LC5l4ZyZcssAIPFETbto.mft (raw, json)
Hash identifier: kWdRBR1Z8Wp/fp63BR/fCDKHf63kd4Fdz7Bh8iVwWaA=
Subject key identifier: D1:A1:51:EA:9E:E0:40:C1:0A:72:05:31:7C:AF:87:07:B9:9B:8A:B5
Authority key identifier: 14:E1:28:3D:AE:0B:0B:99:78:67:26:5C:B2:C0:08:3C:51:13:6E:DA
Certificate issuer: /CN=14e1283dae0b0b997867265cb2c0083c51136eda
Certificate serial: 01A0C669E34F0EFF3B53557CD062E7AFE2C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FOEoPa4LC5l4ZyZcssAIPFETbto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.mft
Manifest number: 037E
Signing time: Tue 22 Sep 2026 00:00:23 +0000
Manifest this update: Tue 22 Sep 2026 00:00:23 +0000
Manifest next update: Wed 23 Sep 2026 00:00:23 +0000
Files and hashes: 1: FOEoPa4LC5l4ZyZcssAIPFETbto.crl (hash: i0a3s8JaVrsC5r61yLoBO3ujNRUZ3+m+KId3iTRe+Ko=)
2: LdLsv-q2C4Pbf9GxWCyaIF5HbLc.roa (hash: 9N8HiCQDKmL6vVupPuazpXqAGCKxU6fFpoiaBLlmwPI=)
3: lgEFYTQnRHqqMwP4s3KsomJeD7g.roa (hash: 4Ag8vOKyZPCZGgR17Gsq8fIgU5DZpoD4F55HJ+y+s5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.mft
rsync://rpki.ripe.net/repository/DEFAULT/FOEoPa4LC5l4ZyZcssAIPFETbto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 00:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:69:e3:4f:0e:ff:3b:53:55:7c:d0:62:e7:af:e2:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14e1283dae0b0b997867265cb2c0083c51136eda
Validity
Not Before: Sep 22 00:00:23 2026 GMT
Not After : Sep 23 00:00:23 2026 GMT
Subject: CN=d1a151ea9ee040c10a7205317caf8707b99b8ab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fe:72:aa:55:fb:0d:53:57:23:05:4a:07:4b:
86:e0:11:ca:88:1f:b1:28:d0:ed:6f:6b:7d:4f:11:
b6:be:cf:20:65:d9:2f:58:25:f1:f7:b1:e2:9b:4c:
63:9c:c6:ae:1b:93:0d:4d:44:47:cd:9c:fa:a1:d2:
35:76:31:ec:30:69:52:33:60:41:24:03:66:b6:c4:
70:7a:5d:d2:ee:d8:3a:9c:ca:d6:a2:bc:3d:6b:d9:
a4:ff:ae:af:04:39:de:e6:32:92:81:fc:08:0b:76:
5d:f2:1f:25:96:fc:bf:5b:0b:a0:c0:0b:ae:85:88:
e4:e3:c1:66:69:d2:4a:8b:69:ac:9a:50:6c:56:41:
16:c8:e0:38:a0:79:d5:28:4e:80:63:ec:df:8a:3a:
ce:93:b2:83:07:73:3f:0d:9f:99:dd:7c:5d:67:43:
98:f5:a0:02:54:23:67:73:e5:24:55:d6:81:dc:6a:
13:fc:67:74:5b:44:f6:d6:6f:14:bc:b5:04:65:57:
44:f4:c2:bf:48:d2:24:a5:40:d6:4d:eb:41:36:78:
b7:ad:88:1b:ba:0b:16:5e:3a:89:f2:41:d1:33:d4:
8f:5b:4f:be:9e:79:60:86:05:54:48:ce:28:e4:57:
95:0e:5c:8f:4f:14:c1:50:3f:ac:c1:1e:15:7e:58:
91:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:A1:51:EA:9E:E0:40:C1:0A:72:05:31:7C:AF:87:07:B9:9B:8A:B5
X509v3 Authority Key Identifier:
keyid:14:E1:28:3D:AE:0B:0B:99:78:67:26:5C:B2:C0:08:3C:51:13:6E:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FOEoPa4LC5l4ZyZcssAIPFETbto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:cd:11:f3:ff:1c:9f:8f:ee:0b:11:5c:3b:ea:fe:c4:f1:4c:
48:e1:81:d8:b6:a9:f2:48:dd:d6:69:c4:e5:5c:df:20:ea:90:
24:e5:49:2d:32:c5:14:15:b2:f1:74:c6:14:ee:2e:d4:46:c5:
b2:92:24:57:bb:c4:c9:20:d3:67:1e:ee:63:94:d2:48:95:9e:
2f:9d:e1:81:d5:4e:34:05:69:1b:f1:c3:ed:9f:8c:2a:f4:b4:
e8:86:dc:ad:62:19:61:df:63:a9:b9:8a:fb:c5:4b:eb:f1:e8:
30:c0:03:0d:3d:d9:fd:5e:85:d3:8e:9a:fa:b3:30:3a:68:bd:
b8:f0:9e:a9:bf:d5:97:af:19:9a:e8:60:22:c3:f7:dd:a2:7c:
c1:46:c6:2a:26:b0:f9:fe:9b:f3:a6:07:85:4f:f0:91:73:b1:
5c:e4:5d:a9:d2:d6:01:22:a7:ca:b9:22:86:77:46:66:f7:df:
e7:3c:1d:a9:01:aa:d7:9a:e2:d3:bc:8d:1f:a7:a6:ee:07:7a:
67:2d:c1:e4:82:37:23:9e:5b:1b:09:cd:ce:8b:d5:60:4a:90:
0f:5f:c6:e2:fd:2a:d2:ec:79:6a:e7:1d:98:a4:d7:99:ab:18:
88:38:b6:18:e0:13:4d:9b:e3:22:29:cf:02:ce:91:88:09:19:
61:60:9d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:32:29 2026 by rpki-client