Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.mft
File: E-8y2L8VPATGOTviTwYyQ_fop-I.mft (raw, json)
Hash identifier: ZAzVWGW9/UtUQdhAk1QQKAdeFPAKD0BRRJdIN9gGq/M=
Subject key identifier: 55:C1:61:31:DC:55:AB:50:C2:33:F3:86:4C:26:A1:59:12:21:58:AC
Authority key identifier: 13:EF:32:D8:BF:15:3C:04:C6:39:3B:E2:4F:06:32:43:F7:E8:A7:E2
Certificate issuer: /CN=13ef32d8bf153c04c6393be24f063243f7e8a7e2
Certificate serial: 019D382E9D2A1BA1CDD8FCD23DB17FECBBEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-8y2L8VPATGOTviTwYyQ_fop-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.mft
Manifest number: 0AF3
Signing time: Sun 29 Mar 2026 06:01:12 +0000
Manifest this update: Sun 29 Mar 2026 06:01:12 +0000
Manifest next update: Mon 30 Mar 2026 06:01:12 +0000
Files and hashes: 1: E-8y2L8VPATGOTviTwYyQ_fop-I.crl (hash: eilRWB3y9g7mret07wIxc0i36HvD6HnucJ+Z+QxPPNQ=)
2: gXqLoCjch24SvYMMr4ERE1p3TXY.roa (hash: iUQ1Oys+V4y+EkeTDwfkNa5H0Gsu8L8N4uEAk+c5TDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/E-8y2L8VPATGOTviTwYyQ_fop-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:9d:2a:1b:a1:cd:d8:fc:d2:3d:b1:7f:ec:bb:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ef32d8bf153c04c6393be24f063243f7e8a7e2
Validity
Not Before: Mar 29 06:01:12 2026 GMT
Not After : Mar 30 06:01:12 2026 GMT
Subject: CN=55c16131dc55ab50c233f3864c26a159122158ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b1:d2:b6:be:23:69:74:ec:1b:94:97:86:87:
c1:c1:c5:95:98:88:ae:e3:e2:9b:d4:e4:82:d2:87:
da:14:20:20:c3:07:b5:c0:4c:40:e7:a6:69:b8:f8:
60:bc:03:41:e2:8f:92:fd:e3:25:05:64:8c:d6:c0:
2c:0c:7e:00:b9:16:c1:3c:b6:96:2c:ca:6e:86:fb:
3e:da:8c:f0:ed:0c:2b:1a:cb:65:bd:c5:2e:a5:26:
e4:1b:c2:b7:2d:fe:3e:83:5e:ec:10:f2:98:1b:22:
5b:2a:81:e7:a3:d2:a2:3a:00:1b:f4:84:25:6a:f7:
85:33:cc:29:b4:45:64:ed:9f:db:44:c1:32:80:80:
e3:1a:9d:1d:e3:e6:a2:8a:70:c6:da:a0:c1:ae:dc:
4b:0c:85:3f:e5:ef:24:78:4b:2b:ca:c9:c5:d6:bb:
1d:c1:ba:71:ff:15:53:ff:27:0b:fa:8b:54:7c:55:
ef:e4:b2:2c:6f:ec:26:df:ba:3a:41:7e:0b:27:4a:
f4:93:19:1d:92:9b:b6:6f:0d:83:30:99:5e:a0:33:
d0:55:df:26:0b:17:73:4c:d2:99:59:6c:07:14:b3:
d8:f5:8d:19:20:9c:2e:2b:c5:6b:52:e5:f3:8e:8d:
9c:cb:45:fb:2b:ff:69:c7:f1:ba:b0:fe:c8:53:44:
fd:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:C1:61:31:DC:55:AB:50:C2:33:F3:86:4C:26:A1:59:12:21:58:AC
X509v3 Authority Key Identifier:
keyid:13:EF:32:D8:BF:15:3C:04:C6:39:3B:E2:4F:06:32:43:F7:E8:A7:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-8y2L8VPATGOTviTwYyQ_fop-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:6e:20:50:27:6e:3e:ae:f1:18:7c:a5:82:7f:d1:88:0f:4d:
76:6e:1e:f0:e5:40:88:2c:a9:62:97:c3:a5:f0:bf:f1:e9:76:
79:54:e0:52:e3:0a:52:67:1a:e6:de:cb:d1:bd:12:fa:f3:66:
d9:70:63:be:ca:fb:78:9a:37:fc:90:21:5c:f8:34:87:1f:ad:
93:f2:47:dc:58:de:5e:10:7c:b5:87:ae:94:8d:d9:91:1b:de:
3d:37:bc:49:a5:7f:55:95:a8:b8:02:e8:58:ee:3c:6d:a0:d0:
ab:8c:c7:3c:ce:e8:c6:c7:d4:51:63:89:91:53:8f:e5:cd:d4:
54:aa:0b:8d:dc:a2:b2:be:f4:d5:be:1f:10:45:a4:7e:9a:be:
aa:36:67:a1:1c:08:51:f1:94:2b:7e:3e:c0:45:57:a0:85:98:
6c:a2:04:9a:36:f2:77:20:c4:2d:21:f9:a4:d0:62:81:5d:ec:
6d:3e:5d:60:a2:29:f9:73:c6:8f:d8:a3:d2:6d:55:1f:8b:f3:
09:9d:44:bc:05:f0:a9:7a:ae:f6:fc:a0:78:84:c5:8d:a2:31:
95:6f:d3:1d:8f:ce:af:28:70:49:e0:73:40:ae:ff:1b:6f:1e:
27:9a:a7:44:05:e7:29:91:a3:8f:53:bf:7b:34:0e:78:cd:58:
bd:f4:bc:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:55 2026 by rpki-client