Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/b837f3-0852-4d7f-9c0e-b2d466697ac4/1/FocxkXFwxLgb7jUdBFXDLLrWOyY.mft
File: FocxkXFwxLgb7jUdBFXDLLrWOyY.mft (raw, json)
Hash identifier: t/SSq6vTdfN//2fnM9BA5JcAzhTUL9OkkNLPvB/h3ng=
Subject key identifier: 89:EE:99:DE:4E:6C:BC:74:7E:5F:6C:E1:6B:12:48:47:38:F8:88:DA
Authority key identifier: 16:87:31:91:71:70:C4:B8:1B:EE:35:1D:04:55:C3:2C:BA:D6:3B:26
Certificate issuer: /CN=168731917170c4b81bee351d0455c32cbad63b26
Certificate serial: 019D382E46A3827C37B2B8C003DFEB37B008
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FocxkXFwxLgb7jUdBFXDLLrWOyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/b837f3-0852-4d7f-9c0e-b2d466697ac4/1/FocxkXFwxLgb7jUdBFXDLLrWOyY.mft
Manifest number: 0F85
Signing time: Sun 29 Mar 2026 06:00:49 +0000
Manifest this update: Sun 29 Mar 2026 06:00:49 +0000
Manifest next update: Mon 30 Mar 2026 06:00:49 +0000
Files and hashes: 1: FocxkXFwxLgb7jUdBFXDLLrWOyY.crl (hash: RBTyYs9Xj+EQqhta+UMI45FhRgbia9OxzkAeS0K2SKU=)
2: lj0kuQleiOMB3rKlACYLbLp19W4.roa (hash: lQAgV/D7oQZzR3Kau4+V4PUVXXhPKhI9zN5kUO6UioM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/b837f3-0852-4d7f-9c0e-b2d466697ac4/1/FocxkXFwxLgb7jUdBFXDLLrWOyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/b837f3-0852-4d7f-9c0e-b2d466697ac4/1/FocxkXFwxLgb7jUdBFXDLLrWOyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FocxkXFwxLgb7jUdBFXDLLrWOyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:46:a3:82:7c:37:b2:b8:c0:03:df:eb:37:b0:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=168731917170c4b81bee351d0455c32cbad63b26
Validity
Not Before: Mar 29 06:00:49 2026 GMT
Not After : Mar 30 06:00:49 2026 GMT
Subject: CN=89ee99de4e6cbc747e5f6ce16b12484738f888da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0d:bb:cb:b7:2c:35:71:05:28:73:7a:26:78:
74:45:f3:80:4f:fd:5a:f0:c8:8c:02:ad:e7:31:c7:
69:92:21:fa:39:80:14:69:66:78:9e:13:7a:1b:3d:
21:68:b0:21:cc:51:f4:33:d8:98:18:f7:3d:85:aa:
23:de:04:02:58:3a:ed:36:44:94:49:92:60:d8:37:
c4:a2:6a:6f:93:a5:3a:63:02:29:a8:65:42:fb:15:
69:e2:ae:a3:03:64:82:02:a8:ba:b6:66:4c:64:95:
5e:b7:51:15:bb:b8:99:5b:ec:3e:b9:a0:fd:b7:40:
eb:43:f7:c3:bb:86:bc:44:9a:49:99:ef:8d:e2:2e:
c4:a9:2b:6b:19:28:55:5a:d0:68:6e:83:03:e8:20:
33:2f:f9:4c:4c:76:81:79:94:16:e1:d7:f0:96:d9:
00:38:4a:10:f6:c6:9a:2b:4b:a1:e2:7a:c4:c6:3f:
72:a4:03:de:34:16:ab:15:59:06:0c:ca:f8:6d:90:
92:d2:29:01:25:96:91:cd:1a:d1:e3:34:8b:f6:56:
28:2f:0c:36:ec:70:8b:a8:46:6e:00:b5:12:47:3f:
a9:2d:2f:33:73:99:c6:f4:c8:13:58:22:39:aa:0f:
bc:52:98:d9:7d:b4:50:27:84:b8:47:5f:f1:37:86:
83:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:EE:99:DE:4E:6C:BC:74:7E:5F:6C:E1:6B:12:48:47:38:F8:88:DA
X509v3 Authority Key Identifier:
keyid:16:87:31:91:71:70:C4:B8:1B:EE:35:1D:04:55:C3:2C:BA:D6:3B:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FocxkXFwxLgb7jUdBFXDLLrWOyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b837f3-0852-4d7f-9c0e-b2d466697ac4/1/FocxkXFwxLgb7jUdBFXDLLrWOyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b837f3-0852-4d7f-9c0e-b2d466697ac4/1/FocxkXFwxLgb7jUdBFXDLLrWOyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:ec:f0:82:55:52:0d:da:eb:f5:a0:2c:b3:6a:ab:95:a4:39:
59:18:58:5e:cb:9a:eb:da:22:ba:70:7a:b7:9c:2d:95:e6:5c:
a9:1f:5a:1d:31:64:50:2c:02:2d:8e:97:f2:54:93:44:17:e8:
69:1e:ee:40:52:33:1d:fb:30:7c:ee:3e:91:ab:0f:17:61:55:
20:b8:c8:0d:cc:64:6d:06:9a:0f:e1:ba:cb:92:77:b5:8d:0f:
3f:7c:83:e9:79:43:8f:b9:20:0b:53:88:36:83:cc:5c:15:db:
19:04:c3:86:18:40:a1:22:fd:48:f4:59:4b:d8:61:10:74:9d:
07:9a:6f:02:2a:33:c2:61:c3:9d:af:ff:40:42:98:fd:e6:7d:
16:39:89:93:7c:10:04:b6:cc:de:49:8a:c7:6e:87:f5:9a:8a:
52:f4:48:6b:0f:67:b2:70:25:bd:ac:ce:ec:f8:c5:47:57:56:
ca:e9:28:7a:99:84:43:6d:44:ef:3a:b5:ba:3c:9d:1f:f1:36:
b1:a2:ae:6b:50:a1:bc:11:88:6f:d7:6b:55:e4:a7:3e:60:a9:
31:ce:6e:06:3a:ca:1c:46:d5:c6:8f:bb:e2:2c:db:99:2a:61:
1f:19:5c:b2:22:e7:ef:f6:f6:c9:5a:a6:c3:80:47:a0:b7:ce:
1a:f4:a3:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:50:17 2026 by rpki-client