Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/fc0bd6-9868-4b49-9888-dcd6a39f80df/1/FoqRmkpGPzyiu6VEJVD8JH2pDK4.mft
File: FoqRmkpGPzyiu6VEJVD8JH2pDK4.mft (raw, json)
Hash identifier: gQjdN+wxMS0+5xaxQM62vB/yhlwHC19jooT2kOpAXRw=
Subject key identifier: 37:A6:B7:1E:CD:09:C4:B0:90:95:86:78:69:E1:EA:29:BA:34:E8:63
Authority key identifier: 16:8A:91:9A:4A:46:3F:3C:A2:BB:A5:44:25:50:FC:24:7D:A9:0C:AE
Certificate issuer: /CN=168a919a4a463f3ca2bba5442550fc247da90cae
Certificate serial: 019D371BB91134E64DEFA2CB74108F53ECE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FoqRmkpGPzyiu6VEJVD8JH2pDK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/fc0bd6-9868-4b49-9888-dcd6a39f80df/1/FoqRmkpGPzyiu6VEJVD8JH2pDK4.mft
Manifest number: 03AF
Signing time: Sun 29 Mar 2026 01:00:56 +0000
Manifest this update: Sun 29 Mar 2026 01:00:56 +0000
Manifest next update: Mon 30 Mar 2026 01:00:56 +0000
Files and hashes: 1: 1qpA4kBmWPvjXJj5-28o1Uru68U.roa (hash: Xci7Bw12VXpZ9NdP2YN2sZhOd2vyN4EA/pcZ8/zKifE=)
2: FoqRmkpGPzyiu6VEJVD8JH2pDK4.crl (hash: LWebS08/hfn7fhVEzMGotn34+KwpaqzIxHSfrCwrXUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/fc0bd6-9868-4b49-9888-dcd6a39f80df/1/FoqRmkpGPzyiu6VEJVD8JH2pDK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/fc0bd6-9868-4b49-9888-dcd6a39f80df/1/FoqRmkpGPzyiu6VEJVD8JH2pDK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FoqRmkpGPzyiu6VEJVD8JH2pDK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:b9:11:34:e6:4d:ef:a2:cb:74:10:8f:53:ec:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=168a919a4a463f3ca2bba5442550fc247da90cae
Validity
Not Before: Mar 29 01:00:56 2026 GMT
Not After : Mar 30 01:00:56 2026 GMT
Subject: CN=37a6b71ecd09c4b09095867869e1ea29ba34e863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0e:7b:c2:b4:92:9f:56:f7:30:7c:4b:f9:e8:
34:16:71:2f:ff:e8:99:cf:87:f1:96:29:15:63:60:
7a:5a:2b:bb:a6:e8:20:4b:74:63:ad:dc:70:de:d9:
d1:72:91:6f:1e:a4:53:76:fa:d0:c3:ab:87:7b:10:
d2:61:0d:4f:36:f2:35:07:4c:ae:30:17:96:95:b0:
9f:5d:99:e4:ef:35:e2:f9:0a:c6:6c:02:4c:4a:3f:
56:17:0d:ee:24:56:2e:8b:36:38:e0:28:1f:87:14:
21:81:7b:3d:38:09:95:d2:3a:ce:91:b4:d1:08:b2:
ad:7d:13:c2:ba:f7:aa:71:56:18:a6:75:ff:62:8d:
2e:24:6e:32:fa:8b:1b:df:52:b9:03:18:07:64:91:
d9:b7:99:d9:f0:5b:30:07:87:c6:41:7e:84:4e:d5:
93:c9:bf:63:c0:e1:56:f1:28:1d:2f:5e:97:fb:90:
e0:f6:8c:fa:c1:3d:66:c3:00:c8:85:95:ee:56:6c:
ac:86:f5:ea:02:a3:78:8b:81:7a:44:1e:2a:dd:79:
cc:96:68:bf:96:a5:de:83:97:83:da:5e:f6:c2:f2:
da:4b:f4:76:76:db:de:59:a1:c7:3b:52:4e:2d:a9:
f8:a4:60:77:1e:dd:57:60:14:8e:8c:50:ab:4e:4f:
93:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:A6:B7:1E:CD:09:C4:B0:90:95:86:78:69:E1:EA:29:BA:34:E8:63
X509v3 Authority Key Identifier:
keyid:16:8A:91:9A:4A:46:3F:3C:A2:BB:A5:44:25:50:FC:24:7D:A9:0C:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FoqRmkpGPzyiu6VEJVD8JH2pDK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/fc0bd6-9868-4b49-9888-dcd6a39f80df/1/FoqRmkpGPzyiu6VEJVD8JH2pDK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/fc0bd6-9868-4b49-9888-dcd6a39f80df/1/FoqRmkpGPzyiu6VEJVD8JH2pDK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:21:e9:e8:02:d3:3f:39:a6:51:46:9c:05:fa:6f:87:70:c4:
71:38:07:36:0b:1e:52:1d:02:f7:a6:81:5a:64:6b:bd:5b:e6:
6d:b9:49:75:aa:d1:ac:59:2e:e8:92:47:da:9e:5e:63:e5:b8:
10:a3:7d:d5:d2:96:a7:66:87:08:1a:1c:9a:fb:83:53:9f:c9:
7e:5a:dd:bf:40:c1:14:d9:74:d6:5d:66:e0:f9:bd:78:78:ad:
e3:06:0d:38:79:d3:f7:4a:33:e0:0d:0e:04:7c:9a:84:18:53:
30:2a:0a:1d:b2:f0:3d:cd:49:de:65:b9:19:13:57:5f:5b:1d:
2a:6c:73:93:d5:bd:d7:9a:59:ae:4a:a6:de:88:bd:86:39:28:
87:29:95:90:b0:7a:4b:f7:f2:54:49:eb:77:e7:c8:14:51:ce:
7d:ec:0d:19:e0:d4:d1:79:82:2d:ab:0a:18:e5:ee:23:d9:8d:
1a:7c:bf:92:ff:86:04:8b:c5:a5:71:8c:7a:6a:aa:fd:b6:bb:
9b:5c:d5:56:99:20:a5:a2:d2:89:a3:b0:88:a8:16:12:5a:00:
ab:9d:39:61:24:b1:80:86:c8:59:3a:c4:dd:bd:ac:0c:01:8c:
d5:5e:63:f4:34:f4:a2:c2:ec:86:3c:a8:8b:5a:d6:e7:12:a5:
dd:f8:3d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:46 2026 by rpki-client