Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft
File: FOKCz2FihLWPhexD5UyQv5WU5Jw.mft (raw, json)
Hash identifier: Yk6ZvBbRhEO/ecYZ8MaLPWy1eZXbwPej6jNRwJ+OGbM=
Subject key identifier: FC:2F:40:1D:02:44:B0:FC:98:BD:16:DE:81:8A:0E:07:4D:C3:5B:A3
Authority key identifier: 14:E2:82:CF:61:62:84:B5:8F:85:EC:43:E5:4C:90:BF:95:94:E4:9C
Certificate issuer: /CN=14e282cf616284b58f85ec43e54c90bf9594e49c
Certificate serial: 01A18074291732B9FFD0BEC88BB881486743
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FOKCz2FihLWPhexD5UyQv5WU5Jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft
Manifest number: 1A32
Signing time: Wed 28 Oct 2026 03:00:58 +0000
Manifest this update: Wed 28 Oct 2026 03:00:58 +0000
Manifest next update: Thu 29 Oct 2026 03:00:58 +0000
Files and hashes: 1: FOKCz2FihLWPhexD5UyQv5WU5Jw.crl (hash: t5Tvu2Upxny0HFzy4Qdzx1zcvf8jEEFx89iOSKsg1X4=)
2: ic08Zy2tp5ErO4fCUtcLYzoJ7HA.roa (hash: rUWPt9ieqVy+Gp/oD9EsBpO1X47eqDC+02qK6K5SPS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FOKCz2FihLWPhexD5UyQv5WU5Jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:74:29:17:32:b9:ff:d0:be:c8:8b:b8:81:48:67:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14e282cf616284b58f85ec43e54c90bf9594e49c
Validity
Not Before: Oct 28 03:00:58 2026 GMT
Not After : Oct 29 03:00:58 2026 GMT
Subject: CN=fc2f401d0244b0fc98bd16de818a0e074dc35ba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c2:1c:54:db:af:76:6c:82:3c:c5:55:33:04:
aa:9c:0d:e9:13:38:b0:1f:bc:4f:69:e5:38:fc:a5:
ed:59:a9:0e:1c:4a:05:78:5e:c2:82:b9:af:cd:41:
f0:fe:58:91:17:cc:dc:da:c5:16:5f:1f:7f:82:fb:
9a:c4:57:3d:0b:70:62:39:11:e0:26:b1:e3:b0:2e:
ed:19:e3:47:de:cb:8a:66:c8:89:5e:f9:47:98:d9:
ee:92:45:a1:f4:81:08:96:8d:91:0c:ad:21:8c:e6:
4a:19:f2:f8:45:ff:68:d0:4a:ff:cb:02:b9:a3:24:
1c:76:c5:03:99:95:44:85:10:59:7f:23:0a:1b:d7:
4c:cf:57:21:d3:63:76:04:48:1d:fb:b6:53:d3:4b:
a4:90:fc:4f:d7:a4:91:d5:35:a0:bd:6f:f8:d0:d4:
7e:0f:7c:05:16:5d:2f:d5:c8:8c:80:97:e9:37:19:
de:55:29:7e:03:23:cb:47:f0:be:d0:d8:4d:69:c1:
de:e5:ab:bc:22:0a:9e:f0:59:cf:8c:ae:a2:b6:29:
c3:61:7d:4e:1f:e0:b3:3b:59:9c:45:73:be:bd:e0:
ec:6e:18:7c:6f:90:ca:ab:4d:89:fa:89:04:05:82:
53:93:3b:26:c6:a2:39:b6:b6:e6:1d:d4:e9:cd:cc:
2d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:2F:40:1D:02:44:B0:FC:98:BD:16:DE:81:8A:0E:07:4D:C3:5B:A3
X509v3 Authority Key Identifier:
keyid:14:E2:82:CF:61:62:84:B5:8F:85:EC:43:E5:4C:90:BF:95:94:E4:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FOKCz2FihLWPhexD5UyQv5WU5Jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:5d:3c:e7:9f:0f:49:75:e1:75:92:87:22:ab:bd:8a:fc:ce:
61:30:2f:87:43:c1:a6:04:ff:ce:7f:15:a0:fd:90:3e:b0:18:
f5:67:37:ae:f1:c6:21:cf:55:c3:35:de:4d:7c:2e:3a:d0:c1:
b5:3d:0f:67:23:18:ab:6b:92:40:9d:4a:ea:eb:a4:d9:f8:d2:
8b:b6:60:85:c9:d5:7b:cf:dd:3d:36:56:09:1a:c0:69:78:f0:
5a:2a:d6:18:11:35:6c:bb:5a:22:4a:07:37:c8:64:f9:28:7a:
eb:0e:95:31:73:67:b8:4c:ad:fd:fb:18:e1:5e:e5:9e:5c:72:
2d:57:24:e4:b4:b4:e5:90:66:1c:1e:b2:00:06:2f:c0:3f:86:
57:37:2c:a5:a3:b7:44:d7:19:dd:40:07:3a:ae:fa:dd:cb:c3:
bc:57:86:c0:af:35:a7:07:00:41:86:d0:b5:7b:aa:07:f2:50:
64:c0:d5:75:eb:8e:2d:e0:bb:76:88:71:d9:e9:7b:88:a7:29:
b9:83:bf:08:a1:71:d8:1a:8d:c6:16:25:0d:33:b1:ed:02:9f:
4e:42:f9:3a:cb:77:8f:22:85:db:15:ce:c8:27:ef:a1:a4:d2:
50:87:29:40:93:00:d7:0c:9b:0e:b6:81:50:72:34:43:8b:9b:
ba:a9:f9:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 06:00:45 2026 by rpki-client