Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/98277d-12b1-488c-ae35-8879b7116da6/1/FOxcZFb_9aWbEMXLpcBl-8vMhg0.mft
File: FOxcZFb_9aWbEMXLpcBl-8vMhg0.mft (raw, json)
Hash identifier: 2BQnYHeOr7BHxOgrzhxViiikJGg0PjSWYkfegWfGpSQ=
Subject key identifier: 0B:81:B6:84:A4:41:84:E2:4D:7E:21:95:33:4C:DA:6D:E7:8B:FF:16
Authority key identifier: 14:EC:5C:64:56:FF:F5:A5:9B:10:C5:CB:A5:C0:65:FB:CB:CC:86:0D
Certificate issuer: /CN=14ec5c6456fff5a59b10c5cba5c065fbcbcc860d
Certificate serial: 01A17D73478D1EE38B55F4426B38C4E00458
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FOxcZFb_9aWbEMXLpcBl-8vMhg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/98277d-12b1-488c-ae35-8879b7116da6/1/FOxcZFb_9aWbEMXLpcBl-8vMhg0.mft
Manifest number: AA
Signing time: Tue 27 Oct 2026 13:01:09 +0000
Manifest this update: Tue 27 Oct 2026 13:01:09 +0000
Manifest next update: Wed 28 Oct 2026 13:01:09 +0000
Files and hashes: 1: 1cpw9dbUrtknizd-rffhTFR8Ji0.roa (hash: vZ/+72EdcWabpps15UEov7kxWkSE33QxgTZ0hz4DZsk=)
2: FOxcZFb_9aWbEMXLpcBl-8vMhg0.crl (hash: cmNyF0z2yaK28rNl6bfqwA7K809lBJBdHR85BIdEjnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/98277d-12b1-488c-ae35-8879b7116da6/1/FOxcZFb_9aWbEMXLpcBl-8vMhg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/98277d-12b1-488c-ae35-8879b7116da6/1/FOxcZFb_9aWbEMXLpcBl-8vMhg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/FOxcZFb_9aWbEMXLpcBl-8vMhg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:73:47:8d:1e:e3:8b:55:f4:42:6b:38:c4:e0:04:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14ec5c6456fff5a59b10c5cba5c065fbcbcc860d
Validity
Not Before: Oct 27 13:01:09 2026 GMT
Not After : Oct 28 13:01:09 2026 GMT
Subject: CN=0b81b684a44184e24d7e2195334cda6de78bff16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:27:a2:22:89:02:09:68:31:f4:a5:77:20:c8:
17:02:ae:0a:88:fb:69:4a:d0:0e:54:11:4d:bc:21:
39:ee:1b:67:ab:5f:76:35:3d:71:fe:93:6e:68:b0:
f1:18:98:fc:72:78:cd:b6:ff:6d:0a:a9:9c:0f:af:
fd:66:aa:d4:88:a5:b6:d2:aa:78:4d:e9:7d:2c:aa:
6d:85:5f:50:37:76:fb:d9:50:4e:31:f2:4c:c8:b7:
cd:f3:99:9f:c1:50:45:af:e3:0b:28:ba:cf:ca:d7:
bb:ce:09:9b:23:13:fe:ca:81:ff:b3:a8:a0:45:e7:
5b:66:27:dd:a8:8c:11:f7:ad:f1:35:d2:6d:b2:67:
4d:ad:65:8b:40:fe:ec:14:97:3a:4a:64:51:71:be:
9c:97:c9:3d:cd:4d:f0:7b:8e:8b:17:a2:ec:81:73:
39:b7:c6:93:a7:03:77:c6:1a:87:3f:fc:18:5a:0f:
7b:04:c2:e1:b1:38:7a:e3:d8:ce:8f:c5:62:6e:e5:
9c:66:8e:7c:19:96:4e:3c:17:ac:8f:39:16:ea:9a:
0b:3d:ad:92:66:64:e7:8e:03:73:b5:16:b4:14:40:
63:3c:bb:fd:69:7f:19:5e:f9:78:7f:18:ca:92:30:
5e:04:28:f9:48:12:71:07:95:de:25:13:b5:54:51:
2e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:81:B6:84:A4:41:84:E2:4D:7E:21:95:33:4C:DA:6D:E7:8B:FF:16
X509v3 Authority Key Identifier:
keyid:14:EC:5C:64:56:FF:F5:A5:9B:10:C5:CB:A5:C0:65:FB:CB:CC:86:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FOxcZFb_9aWbEMXLpcBl-8vMhg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/98277d-12b1-488c-ae35-8879b7116da6/1/FOxcZFb_9aWbEMXLpcBl-8vMhg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/98277d-12b1-488c-ae35-8879b7116da6/1/FOxcZFb_9aWbEMXLpcBl-8vMhg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:04:da:c7:f8:85:b7:29:ce:2a:3d:6b:56:e6:bd:44:f9:47:
78:16:d4:7d:e5:dc:6d:be:c0:c0:eb:99:97:1a:f9:e7:de:48:
c8:42:06:3c:a7:bc:2c:19:af:60:e1:fd:f9:66:ae:3d:05:80:
f4:08:50:72:1d:ef:fe:d7:89:35:f0:c0:2e:b9:23:38:a4:9a:
93:e1:37:ae:2b:43:dc:cf:b2:69:00:ca:53:b7:8a:54:e5:1d:
ac:42:ad:dc:2c:9e:fd:89:ac:ea:c6:ec:4e:4f:65:dc:08:ec:
f0:51:55:f0:9e:b8:81:d6:95:42:68:09:d0:9e:fc:f6:b3:ff:
76:33:91:0c:df:b4:f8:34:89:e8:01:a5:9e:70:db:95:5b:bc:
2d:ef:a8:5c:d2:2d:24:44:cb:48:91:f1:36:6b:3f:ec:b4:4b:
f6:a8:7f:ef:d1:70:c3:19:e2:5a:1d:dc:10:3e:47:6b:89:56:
71:14:47:dd:52:38:86:ac:d1:b4:3d:c0:73:dc:95:46:5c:f8:
cf:39:ce:30:34:7b:6d:bc:1d:a4:1e:5a:90:15:ef:e4:ab:a7:
af:36:ce:0b:82:20:62:c0:da:a3:f3:fc:55:9c:67:23:76:4e:
65:de:0f:56:0f:34:7a:1e:2b:bb:86:9c:ff:9f:77:e8:76:9d:
67:f1:45:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF9c0eNHuOLVfRCazjE4ARYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0ZWM1YzY0NTZmZmY1YTU5YjEwYzVjYmE1YzA2NWZiY2Jj
Yzg2MGQwHhcNMjYxMDI3MTMwMTA5WhcNMjYxMDI4MTMwMTA5WjAzMTEwLwYDVQQD
EygwYjgxYjY4NGE0NDE4NGUyNGQ3ZTIxOTUzMzRjZGE2ZGU3OGJmZjE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvieiIokCCWgx9KV3IMgXAq4KiPtp
StAOVBFNvCE57htnq192NT1x/pNuaLDxGJj8cnjNtv9tCqmcD6/9ZqrUiKW20qp4
Tel9LKpthV9QN3b72VBOMfJMyLfN85mfwVBFr+MLKLrPyte7zgmbIxP+yoH/s6ig
RedbZifdqIwR963xNdJtsmdNrWWLQP7sFJc6SmRRcb6cl8k9zU3we46LF6LsgXM5
t8aTpwN3xhqHP/wYWg97BMLhsTh649jOj8VibuWcZo58GZZOPBesjzkW6poLPa2S
ZmTnjgNztRa0FEBjPLv9aX8ZXvl4fxjKkjBeBCj5SBJxB5XeJRO1VFEuRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAuBtoSkQYTiTX4hlTNM2m3ni/8WMB8GA1UdIwQY
MBaAFBTsXGRW//WlmxDFy6XAZfvLzIYNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRk94Y1pGYl85YVdiRU1YTHBjQmwtOHZNaGcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi85ODI3N2QtMTJiMS00ODhjLWFlMzUt
ODg3OWI3MTE2ZGE2LzEvRk94Y1pGYl85YVdiRU1YTHBjQmwtOHZNaGcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi85ODI3N2QtMTJiMS00ODhjLWFlMzUtODg3OWI3MTE2ZGE2
LzEvRk94Y1pGYl85YVdiRU1YTHBjQmwtOHZNaGcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACQTax/iF
tynOKj1rVua9RPlHeBbUfeXcbb7AwOuZlxr5595IyEIGPKe8LBmvYOH9+WauPQWA
9AhQch3v/teJNfDALrkjOKSak+E3ritD3M+yaQDKU7eKVOUdrEKt3Cye/Yms6sbs
Tk9l3Ajs8FFV8J64gdaVQmgJ0J789rP/djORDN+0+DSJ6AGlnnDblVu8Le+oXNIt
JETLSJHxNms/7LRL9qh/79FwwxniWh3cED5Ha4lWcRRH3VI4hqzRtD3Ac9yVRlz4
zznOMDR7bbwdpB5akBXv5KunrzbOC4IgYsDao/P8VZxnI3ZOZd4PVg80eh4ru4ac
/5936HadZ/FFpQ==
-----END CERTIFICATE-----
Generated at Tue Oct 27 16:49:16 2026 by rpki-client