Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft
File: FOKCz2FihLWPhexD5UyQv5WU5Jw.mft (raw, json)
Hash identifier: vNZ7vKw61W3LxfjhbqEI/hUitFMNlAeGqTzS33Au0qo=
Subject key identifier: 4F:1F:26:D1:F3:68:AF:76:95:2A:F7:8A:4F:02:6E:42:7C:4A:63:55
Authority key identifier: 14:E2:82:CF:61:62:84:B5:8F:85:EC:43:E5:4C:90:BF:95:94:E4:9C
Certificate issuer: /CN=14e282cf616284b58f85ec43e54c90bf9594e49c
Certificate serial: 01A17E85C97CF051CDA9195FD4C38FE9CE31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FOKCz2FihLWPhexD5UyQv5WU5Jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft
Manifest number: 1A31
Signing time: Tue 27 Oct 2026 18:00:59 +0000
Manifest this update: Tue 27 Oct 2026 18:00:59 +0000
Manifest next update: Wed 28 Oct 2026 18:00:59 +0000
Files and hashes: 1: FOKCz2FihLWPhexD5UyQv5WU5Jw.crl (hash: hcyjavCqtumakTgcuhzW7xgWGZPSsOB3sDtgDCtICDs=)
2: ic08Zy2tp5ErO4fCUtcLYzoJ7HA.roa (hash: rUWPt9ieqVy+Gp/oD9EsBpO1X47eqDC+02qK6K5SPS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FOKCz2FihLWPhexD5UyQv5WU5Jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:85:c9:7c:f0:51:cd:a9:19:5f:d4:c3:8f:e9:ce:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14e282cf616284b58f85ec43e54c90bf9594e49c
Validity
Not Before: Oct 27 18:00:59 2026 GMT
Not After : Oct 28 18:00:59 2026 GMT
Subject: CN=4f1f26d1f368af76952af78a4f026e427c4a6355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e9:c0:1b:e4:e8:3b:58:b5:f6:e4:ec:e2:cb:
2f:39:aa:0a:7d:eb:1f:15:06:10:4d:c3:86:18:5b:
40:5d:0a:6e:05:25:0b:55:37:fb:51:ac:92:2b:51:
c5:cd:6d:5f:be:12:4e:66:27:37:c0:9c:17:8e:63:
5f:9b:7d:80:88:a7:33:97:2b:7d:65:98:11:53:a5:
af:3e:01:ec:d2:d3:08:09:0c:b7:ff:55:f0:d2:09:
2e:4c:86:d5:69:ea:db:c3:b3:f7:e6:c8:e5:3d:3f:
46:e9:60:c1:80:93:d8:90:22:c1:e2:f9:29:a4:19:
37:32:5d:c6:07:80:2a:a0:63:d3:aa:e1:04:2a:1b:
14:3d:35:d9:a4:ab:24:6d:03:e4:21:c0:c4:de:e9:
bd:fb:6c:97:93:51:b5:15:f7:d6:df:d9:fc:68:6f:
38:34:f2:b1:cc:a8:6a:d9:33:4d:dc:47:96:c5:f7:
dd:7d:7f:e6:69:a5:f6:62:78:de:bf:bd:36:df:7c:
ae:63:a7:11:fd:77:b7:59:6d:bc:03:6d:c2:d8:0d:
e2:d8:5e:8c:83:8c:c5:e7:c9:8c:8c:65:18:50:7c:
8b:c0:33:b6:0d:c6:2c:c5:03:22:00:fc:52:da:78:
a1:00:74:49:a0:95:c7:c0:e5:e0:e1:78:68:92:75:
d0:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:1F:26:D1:F3:68:AF:76:95:2A:F7:8A:4F:02:6E:42:7C:4A:63:55
X509v3 Authority Key Identifier:
keyid:14:E2:82:CF:61:62:84:B5:8F:85:EC:43:E5:4C:90:BF:95:94:E4:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FOKCz2FihLWPhexD5UyQv5WU5Jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:2c:c3:f3:82:06:c9:68:ee:59:30:46:ee:e4:ac:eb:2e:e5:
e5:a8:9e:c5:b1:2e:49:bd:15:f7:ef:ba:2b:d7:8d:d8:dd:b5:
24:c0:51:46:02:b4:8e:6a:3b:8a:bd:53:32:50:e8:00:54:74:
d2:f4:e4:bd:71:03:55:9b:97:3e:0a:3f:76:d1:7e:4b:c3:e6:
e1:9b:0c:a1:02:ed:d2:46:7e:da:fb:90:d3:4b:18:73:6c:d5:
52:3a:90:bb:8f:19:66:7b:96:11:5d:7c:94:78:64:32:b5:d1:
d2:df:5c:c8:7d:40:e5:cb:3d:1b:a6:9d:36:8a:0a:73:c7:1c:
61:1e:97:3f:c7:18:e1:af:52:ce:54:0f:fb:98:7f:6c:9e:9c:
3f:c9:5e:9a:a0:cf:12:b8:f4:a5:65:37:34:e3:79:43:8a:18:
5a:df:8e:ff:71:f5:a8:40:3c:0d:e7:b1:72:0e:e5:8d:05:df:
ca:f6:75:98:ac:94:13:23:b3:39:5e:60:57:e1:a6:10:69:60:
04:93:36:a1:64:dd:92:b2:97:ca:b5:be:1d:dd:9b:49:da:a6:
7a:5a:30:18:1f:79:9c:c3:aa:ca:b7:6e:d2:65:4b:ad:f3:7a:
ef:22:5c:b8:93:84:e7:16:ed:b2:5a:be:f4:df:3a:da:28:9b:
a3:3e:5c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:28:23 2026 by rpki-client