Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft
File: FOKCz2FihLWPhexD5UyQv5WU5Jw.mft (raw, json)
Hash identifier: SY84U+nfYxIGUPTnL6SdilvxCJJPUTiSFWIqy618U7U=
Subject key identifier: 51:1B:26:05:AB:61:81:5A:77:4F:64:49:4E:5E:D0:09:8A:DD:56:08
Authority key identifier: 14:E2:82:CF:61:62:84:B5:8F:85:EC:43:E5:4C:90:BF:95:94:E4:9C
Certificate issuer: /CN=14e282cf616284b58f85ec43e54c90bf9594e49c
Certificate serial: 019CE66D903654D9FA35858FC91E8CC3DA0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FOKCz2FihLWPhexD5UyQv5WU5Jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft
Manifest number: 17D0
Signing time: Fri 13 Mar 2026 09:01:05 +0000
Manifest this update: Fri 13 Mar 2026 09:01:05 +0000
Manifest next update: Sat 14 Mar 2026 09:01:05 +0000
Files and hashes: 1: FOKCz2FihLWPhexD5UyQv5WU5Jw.crl (hash: pvrene84jWTksCuzDmM8wsM1w6aIoM+5dRzHjchIPJc=)
2: ic08Zy2tp5ErO4fCUtcLYzoJ7HA.roa (hash: rUWPt9ieqVy+Gp/oD9EsBpO1X47eqDC+02qK6K5SPS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FOKCz2FihLWPhexD5UyQv5WU5Jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:6d:90:36:54:d9:fa:35:85:8f:c9:1e:8c:c3:da:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14e282cf616284b58f85ec43e54c90bf9594e49c
Validity
Not Before: Mar 13 09:01:05 2026 GMT
Not After : Mar 14 09:01:05 2026 GMT
Subject: CN=511b2605ab61815a774f64494e5ed0098add5608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f3:e3:74:b7:2f:39:db:e9:e4:49:0a:eb:0e:
fb:82:32:3b:69:9b:d9:b0:7f:e3:07:51:2e:5e:54:
50:3c:c0:78:85:24:3b:eb:63:59:9f:ca:23:99:ae:
0a:57:a1:d7:21:2a:04:40:4d:44:39:e0:04:8d:c1:
f7:67:85:b5:65:44:05:aa:52:f4:5e:a9:c2:06:73:
7c:1e:ad:a1:99:bd:85:af:c5:c0:1a:4c:99:65:49:
ab:e9:7c:16:dd:d3:bf:94:35:30:2e:e2:b4:5c:63:
74:b8:3a:97:7d:6b:f8:ec:14:a0:f8:89:d0:fe:bb:
57:a6:44:14:c9:3a:f5:20:48:19:31:46:df:85:e7:
23:21:ea:27:93:e8:6d:de:ae:4a:1e:e7:9f:71:b5:
7c:42:c0:fd:89:f6:b0:60:c2:5c:58:48:58:c6:c7:
a0:2e:60:0b:cc:97:a4:6e:e6:69:a2:e9:5f:48:0c:
14:d9:83:78:94:58:ee:8e:b3:4c:d2:81:5e:be:43:
54:cd:cb:33:34:dc:9f:46:5a:0c:1f:00:fd:67:e4:
99:1a:4a:99:96:5d:be:6c:33:c2:e8:fb:be:92:f4:
59:8c:38:9c:11:c2:84:ba:36:49:bf:ca:b2:6c:8c:
43:d4:2d:87:bc:e4:9b:99:bd:60:3e:4a:40:1d:d6:
37:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:1B:26:05:AB:61:81:5A:77:4F:64:49:4E:5E:D0:09:8A:DD:56:08
X509v3 Authority Key Identifier:
keyid:14:E2:82:CF:61:62:84:B5:8F:85:EC:43:E5:4C:90:BF:95:94:E4:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FOKCz2FihLWPhexD5UyQv5WU5Jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:dd:86:75:4e:87:fa:c5:7c:c0:27:7a:77:39:c7:41:25:a9:
34:03:31:1a:dc:c7:ef:53:94:c5:f5:d6:76:28:5f:64:e0:46:
b6:77:01:8a:7c:8c:1c:da:d0:25:56:27:1c:20:43:40:9f:f3:
b4:95:b7:c9:39:40:c5:e1:ef:f8:ba:fb:fd:ef:8e:01:6b:3e:
6d:fe:dc:79:70:e6:f5:67:36:39:45:d4:20:bb:ff:e9:66:58:
68:3f:40:1f:3e:ab:be:49:b9:c0:48:0d:bf:fb:1e:13:5f:b6:
01:1f:f9:37:97:6b:52:85:59:c4:61:5a:e2:d8:ce:62:75:5c:
cb:f0:ed:7d:03:87:7c:be:07:75:a3:15:68:05:58:1d:99:39:
62:d0:a9:fe:82:53:3f:29:94:46:78:ac:f1:26:74:3f:3c:b2:
7d:a3:88:a4:ae:36:e1:8b:1a:f8:9f:33:3d:95:1f:0d:76:09:
45:35:c3:5a:86:3c:8a:d5:5a:a4:30:53:cf:a5:1b:ba:68:89:
b8:01:d2:50:ed:7b:18:cd:d4:d6:80:b2:55:ba:c8:92:f8:0f:
99:1a:93:a9:61:9d:f1:23:ba:24:e6:38:b8:41:1a:b6:06:d0:
4a:be:38:8a:66:41:36:8f:86:51:c4:d3:03:52:69:53:1e:1e:
df:87:c5:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 15:57:23 2026 by rpki-client