Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft
File: FOKCz2FihLWPhexD5UyQv5WU5Jw.mft (raw, json)
Hash identifier: 20nF5LB1qcZ2ayuUmf2ngaTo++7AqwMtyMLit6FtuLw=
Subject key identifier: 94:5B:59:88:A2:6A:78:A9:91:A4:60:0B:1B:15:1F:2F:60:B7:6A:81
Authority key identifier: 14:E2:82:CF:61:62:84:B5:8F:85:EC:43:E5:4C:90:BF:95:94:E4:9C
Certificate issuer: /CN=14e282cf616284b58f85ec43e54c90bf9594e49c
Certificate serial: 01A092EA729A264BA44B37F9AC89E3C8BBB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FOKCz2FihLWPhexD5UyQv5WU5Jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft
Manifest number: 19B7
Signing time: Sat 12 Sep 2026 00:00:33 +0000
Manifest this update: Sat 12 Sep 2026 00:00:33 +0000
Manifest next update: Sun 13 Sep 2026 00:00:33 +0000
Files and hashes: 1: FOKCz2FihLWPhexD5UyQv5WU5Jw.crl (hash: SyVPCJK9w3C8CzjgJDZ3u88WREjO7gWpMNqJL+0QpLM=)
2: ic08Zy2tp5ErO4fCUtcLYzoJ7HA.roa (hash: rUWPt9ieqVy+Gp/oD9EsBpO1X47eqDC+02qK6K5SPS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FOKCz2FihLWPhexD5UyQv5WU5Jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 21:40:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:92:ea:72:9a:26:4b:a4:4b:37:f9:ac:89:e3:c8:bb:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14e282cf616284b58f85ec43e54c90bf9594e49c
Validity
Not Before: Sep 12 00:00:33 2026 GMT
Not After : Sep 13 00:00:33 2026 GMT
Subject: CN=945b5988a26a78a991a4600b1b151f2f60b76a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:6b:b5:22:80:08:dc:62:98:71:e6:a6:74:11:
b0:6f:30:36:ce:44:c7:cc:5c:9d:f9:4a:7d:f4:66:
11:06:47:e4:e0:51:6e:af:64:00:19:9b:a1:bb:ad:
21:b3:cb:c1:26:a2:b9:02:90:10:2f:02:01:1b:a8:
4c:b1:d4:ab:b0:be:df:25:75:b7:f8:b5:a8:9a:c5:
ee:8b:32:5c:68:5f:78:bf:23:1b:04:78:26:65:8e:
f5:90:24:2e:0b:55:7a:be:79:9b:bc:30:46:8e:ea:
97:a7:95:b2:c6:82:2f:2e:6f:b6:a0:fa:c4:20:b5:
5f:41:87:1f:23:30:ad:9e:db:e4:3b:e0:b8:e6:37:
1a:20:79:be:90:96:e2:99:b3:21:53:8d:f1:ef:f2:
79:94:64:67:15:7f:5a:13:d0:2e:9c:42:b3:f4:4b:
6c:67:36:6e:13:5a:01:72:64:00:f6:02:33:78:16:
a1:fa:72:c9:72:1e:2e:de:e2:8c:1b:b0:a8:f2:23:
3d:3c:58:cd:fa:bb:b7:84:08:90:a5:1c:5c:6d:5b:
ab:1e:d1:65:39:e1:31:6d:87:d5:e3:3b:6f:b0:29:
16:02:d0:5a:46:44:27:91:64:b4:b8:3c:80:0c:0b:
66:32:24:6c:db:ed:00:d3:d8:fd:f0:14:02:d2:7b:
f9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:5B:59:88:A2:6A:78:A9:91:A4:60:0B:1B:15:1F:2F:60:B7:6A:81
X509v3 Authority Key Identifier:
keyid:14:E2:82:CF:61:62:84:B5:8F:85:EC:43:E5:4C:90:BF:95:94:E4:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FOKCz2FihLWPhexD5UyQv5WU5Jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:1c:f1:4a:98:ab:13:53:1e:e4:6c:67:12:8f:53:eb:c7:d9:
3c:98:7a:a6:93:61:68:2d:e1:e1:73:7f:98:b3:19:bd:f7:14:
c8:46:3e:9d:9c:88:bb:07:29:6e:67:55:18:bc:8b:7d:1d:da:
8e:fc:9a:61:71:48:1f:53:af:fc:70:62:85:68:58:ce:a6:3b:
11:b7:16:49:bb:65:41:e7:56:75:9a:21:52:b5:d0:f5:6d:d4:
a8:bd:df:71:07:1f:86:fb:a8:ed:15:84:39:f2:64:8d:66:94:
61:19:c3:3e:55:9d:2e:20:a8:ad:a6:a3:5c:61:e3:7c:4a:b6:
08:6d:44:f3:db:4d:1a:68:24:0b:a9:82:74:22:6f:cd:76:bd:
ed:aa:74:9c:25:a1:f7:d2:bb:fa:9f:31:26:3d:73:30:73:5c:
bd:a8:47:f9:64:35:fd:5f:39:69:7b:32:77:99:6c:2e:0b:bc:
2d:ef:89:fd:14:78:e9:28:81:a7:5f:65:57:00:b7:3a:bd:9e:
eb:db:dc:45:23:85:31:93:4c:69:1b:a5:b8:21:7c:9e:6f:0e:
9f:01:d4:b3:e9:9b:1c:9a:4e:1f:12:ee:6a:5e:41:de:e8:11:
a5:6a:e1:97:63:64:ce:48:3b:c6:85:f2:89:7a:26:31:29:51:
75:df:35:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 06:55:21 2026 by rpki-client