Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft
File: FOKCz2FihLWPhexD5UyQv5WU5Jw.mft (raw, json)
Hash identifier: n7oJsCt/k9xQkOiNMQFLGQA891fw1g/DGuThOZHzjcE=
Subject key identifier: F1:8B:D2:1C:23:7D:7B:DF:19:B8:98:72:3D:9E:B2:7B:1B:ED:05:D1
Authority key identifier: 14:E2:82:CF:61:62:84:B5:8F:85:EC:43:E5:4C:90:BF:95:94:E4:9C
Certificate issuer: /CN=14e282cf616284b58f85ec43e54c90bf9594e49c
Certificate serial: 019DD01A221C478E1E5AADA7DFB8DEF74D11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FOKCz2FihLWPhexD5UyQv5WU5Jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft
Manifest number: 1849
Signing time: Mon 27 Apr 2026 18:01:06 +0000
Manifest this update: Mon 27 Apr 2026 18:01:06 +0000
Manifest next update: Tue 28 Apr 2026 18:01:06 +0000
Files and hashes: 1: FOKCz2FihLWPhexD5UyQv5WU5Jw.crl (hash: VaaS7Ivpn3pdzW3NsKSvaY4AFiGul0rWHp39VthSgDU=)
2: ic08Zy2tp5ErO4fCUtcLYzoJ7HA.roa (hash: rUWPt9ieqVy+Gp/oD9EsBpO1X47eqDC+02qK6K5SPS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FOKCz2FihLWPhexD5UyQv5WU5Jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:1a:22:1c:47:8e:1e:5a:ad:a7:df:b8:de:f7:4d:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14e282cf616284b58f85ec43e54c90bf9594e49c
Validity
Not Before: Apr 27 18:01:06 2026 GMT
Not After : Apr 28 18:01:06 2026 GMT
Subject: CN=f18bd21c237d7bdf19b898723d9eb27b1bed05d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9d:2c:d0:34:1c:46:d4:db:e6:6d:3d:9d:fc:
45:da:31:3f:08:a5:82:7e:5f:cd:4a:43:3a:02:af:
ba:74:2f:47:26:59:59:3e:53:7a:3e:86:f8:92:71:
bc:c0:28:5f:c7:e6:e5:fc:09:24:98:8f:90:2c:90:
e8:f9:be:aa:95:5a:84:b1:f7:79:a9:90:03:ef:46:
94:db:7c:f8:64:8c:00:b6:d1:8e:95:a6:1d:e0:a6:
72:cb:81:a7:c5:e6:fa:8e:16:52:30:41:31:62:9c:
ff:21:ed:6b:7e:6b:43:b7:e9:50:27:60:1b:da:af:
6d:99:26:16:39:f0:c9:d8:dd:b1:00:43:87:97:6e:
4e:e0:06:51:00:35:c9:b0:23:ba:12:d2:d3:b1:a5:
ac:f7:7c:be:b4:87:58:b7:a4:a3:aa:a6:6b:3c:e1:
cd:15:cd:8b:ad:83:99:df:0f:77:f4:46:2f:20:9f:
0e:83:d8:39:70:b3:7f:1a:fd:97:fa:5f:95:23:1c:
ac:f6:49:10:8b:27:6f:bd:2f:6a:e1:71:05:40:5d:
4d:fb:e2:30:05:43:3c:d8:ca:fb:34:66:16:08:58:
9a:b1:8f:c1:e4:a8:96:b1:ba:0e:09:15:b1:3b:73:
55:dc:04:c8:32:6f:81:b1:45:05:21:6e:9c:ef:e3:
31:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:8B:D2:1C:23:7D:7B:DF:19:B8:98:72:3D:9E:B2:7B:1B:ED:05:D1
X509v3 Authority Key Identifier:
keyid:14:E2:82:CF:61:62:84:B5:8F:85:EC:43:E5:4C:90:BF:95:94:E4:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FOKCz2FihLWPhexD5UyQv5WU5Jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:2b:3f:e0:e9:44:3c:ca:c4:17:13:44:e9:87:c1:5e:4e:b4:
c8:d3:37:33:6e:06:d9:58:f0:c1:b6:55:45:0e:41:3c:51:42:
2b:38:f9:b3:8c:de:7a:01:63:24:87:02:db:3f:d7:62:e3:a0:
79:73:7c:20:a0:d6:7a:68:c4:34:a5:13:df:2e:41:34:41:d1:
f6:08:ea:2b:8a:e1:6e:35:33:e0:57:69:d3:fb:9b:f3:74:43:
a0:09:a6:e2:29:ef:bb:36:33:4b:ef:15:cb:5a:a2:fc:89:94:
f7:0f:2f:79:bf:85:2e:94:50:ee:28:23:5e:f0:23:53:b3:e8:
d7:24:db:09:77:40:c8:97:28:57:1c:43:5c:ca:30:70:c4:ba:
ba:4c:af:f0:ca:59:03:8f:93:9c:29:5e:84:87:2d:00:93:41:
77:c6:d1:4d:71:8b:ca:ca:96:ac:ac:9d:94:e5:b2:e6:02:c9:
3a:5e:29:82:23:1f:31:69:b4:3a:b1:4d:9d:40:8d:2e:16:1d:
fb:19:3c:ac:0d:1a:11:43:34:e0:38:50:a2:6b:66:86:45:6b:
6b:a7:d9:c1:83:8c:30:90:a6:1a:ed:c1:49:02:f2:72:64:25:
9b:d8:1f:0c:6a:1d:ef:b2:b7:99:58:2d:25:17:f5:d5:f7:6d:
43:cd:b1:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 23:43:55 2026 by rpki-client