Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.mft
File: FOEoPa4LC5l4ZyZcssAIPFETbto.mft (raw, json)
Hash identifier: E986Vp1oB/hCrQu+vPaQByDujabzEC/E1KFYDL8LtwE=
Subject key identifier: D6:89:FF:DC:EE:B8:A2:D3:3A:AB:1C:4E:D2:CC:0B:E6:BA:D2:A5:4A
Authority key identifier: 14:E1:28:3D:AE:0B:0B:99:78:67:26:5C:B2:C0:08:3C:51:13:6E:DA
Certificate issuer: /CN=14e1283dae0b0b997867265cb2c0083c51136eda
Certificate serial: 019EB733C538F5C4AD3545DF6B86C0D03589
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FOEoPa4LC5l4ZyZcssAIPFETbto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.mft
Manifest number: 026D
Signing time: Thu 11 Jun 2026 15:01:23 +0000
Manifest this update: Thu 11 Jun 2026 15:01:23 +0000
Manifest next update: Fri 12 Jun 2026 15:01:23 +0000
Files and hashes: 1: FOEoPa4LC5l4ZyZcssAIPFETbto.crl (hash: IJFiebOs2l/R/qAlv+T1vkSWgIdlgHzo94FnYKjpUH4=)
2: LdLsv-q2C4Pbf9GxWCyaIF5HbLc.roa (hash: 9N8HiCQDKmL6vVupPuazpXqAGCKxU6fFpoiaBLlmwPI=)
3: lgEFYTQnRHqqMwP4s3KsomJeD7g.roa (hash: 4Ag8vOKyZPCZGgR17Gsq8fIgU5DZpoD4F55HJ+y+s5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.mft
rsync://rpki.ripe.net/repository/DEFAULT/FOEoPa4LC5l4ZyZcssAIPFETbto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 15:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:33:c5:38:f5:c4:ad:35:45:df:6b:86:c0:d0:35:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14e1283dae0b0b997867265cb2c0083c51136eda
Validity
Not Before: Jun 11 15:01:23 2026 GMT
Not After : Jun 12 15:01:23 2026 GMT
Subject: CN=d689ffdceeb8a2d33aab1c4ed2cc0be6bad2a54a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fd:97:02:8e:a9:06:b5:e0:9f:cc:ac:fa:f3:
b6:4b:0a:ed:56:49:aa:12:e8:8b:d1:9b:f7:d5:88:
5b:aa:fd:a2:70:35:84:31:24:0b:4f:c0:42:4f:35:
35:31:53:2c:70:7d:9a:5f:40:f4:0b:ea:7b:ee:bf:
35:66:f0:67:82:ff:1b:ee:84:32:44:71:3b:94:30:
a8:36:62:4c:ab:66:89:4c:00:80:55:ea:87:c2:8f:
25:5e:69:a7:d7:d9:b1:13:fc:c9:2e:fb:ee:27:a6:
fc:9b:ad:e1:db:5b:ec:d2:d7:12:96:7e:63:09:8d:
b8:33:56:72:73:f7:c3:96:5b:72:54:5c:4e:f2:57:
66:ac:17:0b:f7:fe:a9:8b:f4:d4:9f:cd:e6:a7:00:
b9:11:33:8a:75:6f:a3:4d:79:60:5f:d2:d1:84:07:
4c:99:87:94:8d:ec:34:10:01:60:cc:89:9e:56:99:
a5:4b:e2:e4:ff:11:06:d9:e0:82:ff:47:e0:80:b5:
95:86:f1:b9:e8:63:55:ca:da:f8:66:9f:75:87:e5:
5c:4a:01:d8:ac:c1:37:62:46:04:99:2e:0b:4a:da:
dd:7a:9d:04:9a:06:90:d6:b4:70:42:d4:0c:d5:8d:
3a:83:3b:ae:77:ed:c1:3c:46:8e:fb:69:1d:a2:21:
03:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:89:FF:DC:EE:B8:A2:D3:3A:AB:1C:4E:D2:CC:0B:E6:BA:D2:A5:4A
X509v3 Authority Key Identifier:
keyid:14:E1:28:3D:AE:0B:0B:99:78:67:26:5C:B2:C0:08:3C:51:13:6E:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FOEoPa4LC5l4ZyZcssAIPFETbto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:e2:d6:42:6b:4f:68:35:3e:84:af:f2:0c:a2:d4:11:8b:e1:
34:cf:40:d7:c0:ec:0b:87:a6:27:b3:bb:6c:5d:3d:6e:f4:cf:
69:84:c2:0d:7c:91:39:ad:82:61:01:9f:c5:4d:10:1e:9b:70:
e0:75:c1:6c:38:b2:33:62:ca:23:0b:3f:be:e0:25:a2:d9:69:
71:cd:3e:36:55:f2:7b:6e:6b:90:e5:83:05:09:3f:b9:7f:48:
5d:3b:69:12:2a:76:64:d2:f7:8b:5e:f4:fd:56:f7:d3:aa:31:
66:98:59:e1:40:9e:fe:4a:f7:19:d5:6f:d7:a1:8e:37:aa:5e:
61:c8:ec:82:ee:2f:53:c4:22:a1:22:0d:95:ad:a0:20:52:2c:
39:55:55:37:fd:94:46:ed:93:20:58:5f:20:76:d9:b0:a9:73:
a3:ca:21:8e:e1:da:7a:a7:33:2f:ec:b6:0f:b5:72:4b:36:76:
35:aa:12:9f:22:a3:c0:e6:43:0e:64:be:d0:34:d8:72:b6:24:
17:23:44:50:24:93:04:cc:23:9c:ed:1c:f5:78:c8:ce:c0:75:
c2:cc:29:37:d5:32:fd:ef:53:cb:84:7c:a1:89:a5:9f:91:10:
32:a0:c9:55:b1:8b:3c:95:25:89:17:c0:94:b7:b3:f0:ad:c6:
33:4c:c4:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:41:00 2026 by rpki-client