Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/b837f3-0852-4d7f-9c0e-b2d466697ac4/1/FocxkXFwxLgb7jUdBFXDLLrWOyY.mft
File: FocxkXFwxLgb7jUdBFXDLLrWOyY.mft (raw, json)
Hash identifier: uy5dgPKo8fcB9M9h8kDQkQRp0yZElCZRK55NzXrJdtQ=
Subject key identifier: 90:42:EF:8D:C2:5D:9A:EA:14:21:D7:3B:D4:A7:4A:C7:BB:2C:3A:2E
Authority key identifier: 16:87:31:91:71:70:C4:B8:1B:EE:35:1D:04:55:C3:2C:BA:D6:3B:26
Certificate issuer: /CN=168731917170c4b81bee351d0455c32cbad63b26
Certificate serial: 019FD271EA88126A03BF6AF3832CACE19E23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FocxkXFwxLgb7jUdBFXDLLrWOyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/b837f3-0852-4d7f-9c0e-b2d466697ac4/1/FocxkXFwxLgb7jUdBFXDLLrWOyY.mft
Manifest number: 10DE
Signing time: Wed 05 Aug 2026 15:01:48 +0000
Manifest this update: Wed 05 Aug 2026 15:01:48 +0000
Manifest next update: Thu 06 Aug 2026 15:01:48 +0000
Files and hashes: 1: FocxkXFwxLgb7jUdBFXDLLrWOyY.crl (hash: 7cQI96zkOz9LaC5qj63r+D1R+yMP21ohavdCFNqdySE=)
2: lj0kuQleiOMB3rKlACYLbLp19W4.roa (hash: lQAgV/D7oQZzR3Kau4+V4PUVXXhPKhI9zN5kUO6UioM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/b837f3-0852-4d7f-9c0e-b2d466697ac4/1/FocxkXFwxLgb7jUdBFXDLLrWOyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/b837f3-0852-4d7f-9c0e-b2d466697ac4/1/FocxkXFwxLgb7jUdBFXDLLrWOyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FocxkXFwxLgb7jUdBFXDLLrWOyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Aug 2026 13:26:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d2:71:ea:88:12:6a:03:bf:6a:f3:83:2c:ac:e1:9e:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=168731917170c4b81bee351d0455c32cbad63b26
Validity
Not Before: Aug 5 15:01:48 2026 GMT
Not After : Aug 6 15:01:48 2026 GMT
Subject: CN=9042ef8dc25d9aea1421d73bd4a74ac7bb2c3a2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:10:ec:6b:b4:37:65:eb:be:97:79:e9:8b:01:
68:59:40:df:1d:87:83:14:93:fb:6e:47:60:d0:fb:
26:0e:65:bb:35:4e:51:7a:f6:4e:5a:1b:3c:5f:43:
2f:a1:d1:c7:88:3d:cf:90:c0:21:d7:80:e6:c0:c7:
a7:d0:36:8f:d8:ef:20:25:7c:8e:47:a8:d7:46:2e:
46:84:dc:56:5a:a4:78:bf:02:1d:cc:90:78:22:38:
10:61:6e:75:c9:36:8a:2f:51:69:e7:90:68:c9:36:
e6:9e:b2:60:10:42:cc:d3:92:1a:85:08:84:bb:85:
7c:1b:b6:32:d4:52:80:0b:11:44:99:31:84:dc:00:
9a:6c:70:2d:ee:4f:43:d8:86:f7:cf:b5:4a:25:7d:
78:7c:60:f5:c4:f7:4c:15:55:32:83:90:29:0e:65:
2b:33:db:a3:8c:df:f8:54:b3:2f:bb:fe:63:91:18:
9e:7f:0e:e2:3c:83:c2:5f:c0:e2:cd:f2:7b:99:04:
13:79:41:c6:bd:db:f4:eb:4a:2d:60:1c:3d:67:bf:
1a:3c:be:1e:6c:5c:86:50:78:1d:9f:12:5d:6c:7e:
c4:78:b1:17:4a:b6:66:c6:64:95:ba:85:ee:1a:73:
f9:b5:46:6b:32:db:95:96:fd:f6:13:6d:e9:4f:fc:
d8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:42:EF:8D:C2:5D:9A:EA:14:21:D7:3B:D4:A7:4A:C7:BB:2C:3A:2E
X509v3 Authority Key Identifier:
keyid:16:87:31:91:71:70:C4:B8:1B:EE:35:1D:04:55:C3:2C:BA:D6:3B:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FocxkXFwxLgb7jUdBFXDLLrWOyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b837f3-0852-4d7f-9c0e-b2d466697ac4/1/FocxkXFwxLgb7jUdBFXDLLrWOyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b837f3-0852-4d7f-9c0e-b2d466697ac4/1/FocxkXFwxLgb7jUdBFXDLLrWOyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:d7:33:83:0b:a6:87:a7:36:9a:be:59:ca:a5:d7:09:be:c1:
f0:87:da:9b:0f:4f:46:b5:37:31:79:d9:85:7d:86:77:da:52:
6c:13:7a:62:b9:4c:98:66:bd:ba:59:d2:b5:1b:53:f9:f4:c2:
94:b4:51:98:bf:f5:21:45:f1:4d:6b:dc:9a:b4:4d:b0:97:8b:
94:f2:c2:70:21:61:22:e3:ce:97:b4:d7:ac:65:9a:e0:46:f9:
70:de:c7:d6:5f:67:48:a3:5f:71:20:e1:84:30:f0:07:94:7d:
d4:64:e0:0d:c2:56:ba:7c:84:dc:e6:d1:30:5c:01:23:de:41:
f2:de:93:fb:65:78:4c:4a:95:be:a0:17:85:48:62:70:13:91:
ab:c0:3c:74:00:0c:e2:8e:85:19:a8:85:5a:59:22:03:ad:2e:
42:cf:d2:d3:ac:3b:6d:00:80:25:e1:7a:2a:28:84:ee:ad:1d:
29:4a:13:bb:49:a2:ea:02:89:98:97:53:c1:3c:3d:e3:f7:cd:
f6:84:e8:ef:d8:88:89:a5:66:12:76:d3:ec:02:ff:e4:ae:26:
6d:b9:92:24:5f:1c:92:fe:00:33:5e:c8:70:be:07:02:47:51:
db:52:58:a6:c9:ee:8a:b4:37:c8:d4:10:f7:ed:ad:91:bd:ed:
3e:b6:76:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 20:09:20 2026 by rpki-client