Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/98277d-12b1-488c-ae35-8879b7116da6/1/FOxcZFb_9aWbEMXLpcBl-8vMhg0.mft
File: FOxcZFb_9aWbEMXLpcBl-8vMhg0.mft (raw, json)
Hash identifier: oRquttaNzIHzP+U2bLNEFCYVStfGuUNPzFPxavYZhxk=
Subject key identifier: 8B:A8:CA:0E:2A:FD:04:05:B6:67:8B:A3:1C:E0:02:9E:3D:1C:C2:CB
Authority key identifier: 14:EC:5C:64:56:FF:F5:A5:9B:10:C5:CB:A5:C0:65:FB:CB:CC:86:0D
Certificate issuer: /CN=14ec5c6456fff5a59b10c5cba5c065fbcbcc860d
Certificate serial: 01A17F61A52F54CFD39328C51FA170B79DED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FOxcZFb_9aWbEMXLpcBl-8vMhg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/98277d-12b1-488c-ae35-8879b7116da6/1/FOxcZFb_9aWbEMXLpcBl-8vMhg0.mft
Manifest number: AB
Signing time: Tue 27 Oct 2026 22:01:08 +0000
Manifest this update: Tue 27 Oct 2026 22:01:08 +0000
Manifest next update: Wed 28 Oct 2026 22:01:08 +0000
Files and hashes: 1: 1cpw9dbUrtknizd-rffhTFR8Ji0.roa (hash: vZ/+72EdcWabpps15UEov7kxWkSE33QxgTZ0hz4DZsk=)
2: FOxcZFb_9aWbEMXLpcBl-8vMhg0.crl (hash: MvNoM2h/Y3xzuWaNstckXk8AUvPrnJ9pAxB2d5/3o9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/98277d-12b1-488c-ae35-8879b7116da6/1/FOxcZFb_9aWbEMXLpcBl-8vMhg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/98277d-12b1-488c-ae35-8879b7116da6/1/FOxcZFb_9aWbEMXLpcBl-8vMhg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/FOxcZFb_9aWbEMXLpcBl-8vMhg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:61:a5:2f:54:cf:d3:93:28:c5:1f:a1:70:b7:9d:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14ec5c6456fff5a59b10c5cba5c065fbcbcc860d
Validity
Not Before: Oct 27 22:01:08 2026 GMT
Not After : Oct 28 22:01:08 2026 GMT
Subject: CN=8ba8ca0e2afd0405b6678ba31ce0029e3d1cc2cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ce:a3:82:85:98:71:b4:c8:30:b8:88:e7:30:
7a:41:4c:25:c7:68:06:b5:39:1a:58:5f:93:7a:c7:
a1:1e:65:4a:3f:18:c2:2b:ea:c2:c0:57:04:9c:57:
c8:ab:3b:24:67:c9:c1:fc:c5:22:e4:74:3a:e9:5e:
49:bd:f0:10:15:37:35:4a:df:ca:f4:8f:3d:9b:df:
67:37:91:f3:70:d6:ee:78:8e:28:dc:38:94:80:5c:
07:0d:c0:a7:e5:b2:79:87:b0:4c:0f:7d:c8:7e:55:
71:6e:ab:f6:83:f4:4d:0f:62:3a:71:a1:59:5d:b4:
59:d1:c2:53:65:f4:ab:19:75:2b:29:27:e2:10:6d:
ea:7c:c3:ff:59:d1:11:52:d3:fe:79:d4:bc:84:12:
5b:73:8e:46:3f:b9:03:68:98:0a:d3:b0:8f:39:06:
e4:8b:02:d4:5d:49:89:2b:49:77:f5:14:57:93:02:
c3:d6:05:a9:6e:22:66:25:1c:18:3c:3e:54:af:c2:
17:b3:73:b1:c0:fc:ac:c8:d4:8f:61:a2:12:19:ed:
14:d2:09:7c:dc:3d:94:5e:d2:4c:3a:7c:a2:8a:c6:
f6:f9:98:46:ed:7a:78:0d:65:bb:3f:3c:7b:9a:34:
cd:06:1b:68:88:77:b4:9e:ac:e0:bc:5a:9c:0e:92:
21:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:A8:CA:0E:2A:FD:04:05:B6:67:8B:A3:1C:E0:02:9E:3D:1C:C2:CB
X509v3 Authority Key Identifier:
keyid:14:EC:5C:64:56:FF:F5:A5:9B:10:C5:CB:A5:C0:65:FB:CB:CC:86:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FOxcZFb_9aWbEMXLpcBl-8vMhg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/98277d-12b1-488c-ae35-8879b7116da6/1/FOxcZFb_9aWbEMXLpcBl-8vMhg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/98277d-12b1-488c-ae35-8879b7116da6/1/FOxcZFb_9aWbEMXLpcBl-8vMhg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:fe:cd:aa:ce:0b:6f:41:12:8e:7e:c4:75:f7:6e:28:bb:19:
77:81:67:96:99:3d:29:37:66:f2:59:d1:b0:ed:6d:ab:29:4f:
fe:ef:78:c2:1b:e4:a3:33:28:fe:af:00:8e:04:f1:1a:54:7a:
00:e1:8b:4a:2b:0c:bb:07:40:65:3b:95:83:e4:f3:13:da:ae:
20:9b:8c:f6:7f:c0:86:b6:c1:ec:7d:16:5f:48:d3:4a:05:03:
48:01:d9:d1:bd:9d:69:0e:16:29:e2:20:fd:20:21:8f:09:a9:
26:51:04:4d:b5:0b:65:f5:1a:7f:fc:9f:a1:10:85:63:6f:2e:
60:1b:50:fc:4a:fc:0e:b4:0c:ca:e7:b0:d5:08:13:7e:34:20:
9a:33:19:0f:1b:a1:a9:85:77:cd:05:61:92:1b:2b:39:0f:01:
02:d5:d3:52:cf:50:27:4c:c9:1a:50:8e:27:b1:24:ce:95:e4:
45:c1:3b:bd:64:65:c9:ab:e8:0c:6f:14:64:b9:6e:c4:a0:be:
65:bc:e2:e3:00:15:da:1c:23:b8:fc:04:a1:f1:cd:93:1f:5a:
b0:c2:b1:db:b5:a3:4c:0b:d8:9a:9d:a4:3f:7a:0d:94:5c:77:
b3:28:aa:75:fb:ce:e9:4f:7a:37:95:44:b8:b5:e4:43:1a:dd:
97:35:79:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:41:27 2026 by rpki-client