Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.mft
File: FOEoPa4LC5l4ZyZcssAIPFETbto.mft (raw, json)
Hash identifier: oF4xDUtDwyQMLBbm/F3S2y6L8htLl3oCkZdimHss3vs=
Subject key identifier: 00:4E:F2:F2:2B:3B:9A:23:57:F8:52:CA:55:43:F9:45:CA:D2:C2:45
Authority key identifier: 14:E1:28:3D:AE:0B:0B:99:78:67:26:5C:B2:C0:08:3C:51:13:6E:DA
Certificate issuer: /CN=14e1283dae0b0b997867265cb2c0083c51136eda
Certificate serial: 01A191315C9AE1EDCE8CDBDA3AC640463C2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FOEoPa4LC5l4ZyZcssAIPFETbto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.mft
Manifest number: 03E7
Signing time: Sat 31 Oct 2026 09:01:33 +0000
Manifest this update: Sat 31 Oct 2026 09:01:33 +0000
Manifest next update: Sun 01 Nov 2026 09:01:33 +0000
Files and hashes: 1: FOEoPa4LC5l4ZyZcssAIPFETbto.crl (hash: m7An3dhXYGZyeYl2rbFwb8ePHjMeD+T56dylN5SdogE=)
2: LdLsv-q2C4Pbf9GxWCyaIF5HbLc.roa (hash: 9N8HiCQDKmL6vVupPuazpXqAGCKxU6fFpoiaBLlmwPI=)
3: lgEFYTQnRHqqMwP4s3KsomJeD7g.roa (hash: 4Ag8vOKyZPCZGgR17Gsq8fIgU5DZpoD4F55HJ+y+s5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.mft
rsync://rpki.ripe.net/repository/DEFAULT/FOEoPa4LC5l4ZyZcssAIPFETbto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:91:31:5c:9a:e1:ed:ce:8c:db:da:3a:c6:40:46:3c:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14e1283dae0b0b997867265cb2c0083c51136eda
Validity
Not Before: Oct 31 09:01:33 2026 GMT
Not After : Nov 1 09:01:33 2026 GMT
Subject: CN=004ef2f22b3b9a2357f852ca5543f945cad2c245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:76:fc:4f:df:b9:b5:2d:cb:22:0a:f2:a5:e8:
00:ad:3e:90:0a:1c:77:01:9c:1d:fe:be:c2:f0:cb:
14:7e:a6:6c:96:b6:d7:1f:ee:4a:73:f0:78:77:72:
db:8e:0b:9a:a3:b3:84:37:33:94:de:d4:3b:e8:4e:
0f:cb:1d:60:b7:ce:a9:c1:74:2b:aa:e3:fe:e2:38:
58:ba:fc:4e:05:da:31:1d:a8:4a:21:53:13:aa:70:
85:1f:d0:24:c7:15:a7:b5:3c:7a:d8:36:47:2e:04:
5d:8d:d7:fa:8b:97:86:1d:b7:5c:44:cf:d7:59:f8:
d4:e3:3f:fc:8b:b6:a4:94:ec:7f:46:6a:aa:be:8a:
33:ae:45:5f:40:4c:72:70:a5:35:69:ea:09:7d:62:
82:21:fc:09:09:95:f4:64:7d:7c:38:74:d6:01:1f:
06:e8:45:9e:e7:41:5e:f2:2f:46:85:bd:f2:ae:e9:
d3:ea:7c:95:48:8d:41:52:e7:88:fb:6f:30:0f:56:
eb:67:39:6c:f3:3d:1c:f7:99:51:c6:91:ba:48:93:
6f:74:27:65:95:6c:5c:64:a4:46:98:d3:81:67:fd:
38:44:ba:65:2a:89:25:9d:34:53:67:c3:45:0c:8f:
db:a5:78:bb:27:6d:6c:45:9a:20:08:b4:88:a3:68:
30:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:4E:F2:F2:2B:3B:9A:23:57:F8:52:CA:55:43:F9:45:CA:D2:C2:45
X509v3 Authority Key Identifier:
keyid:14:E1:28:3D:AE:0B:0B:99:78:67:26:5C:B2:C0:08:3C:51:13:6E:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FOEoPa4LC5l4ZyZcssAIPFETbto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:82:6f:6b:93:f5:7d:be:14:6d:c2:3e:26:36:41:6a:2a:31:
1c:02:e9:0a:c5:ad:8e:d1:65:07:f5:52:d4:82:1d:6c:6e:98:
b3:9a:71:d2:b3:0f:7b:a9:bf:e8:49:1b:03:89:7e:0f:3b:28:
90:1a:4d:bf:01:fb:09:be:8f:d5:52:03:96:0a:b7:85:0c:c8:
3f:47:66:d2:74:fb:96:c0:7d:16:ae:28:d4:72:30:c3:e4:55:
ad:bd:70:14:df:1b:ea:da:c5:9f:78:b4:73:71:52:ec:17:bf:
8d:20:9d:20:c6:d9:6d:f7:6b:c3:ba:c3:fb:2f:e8:1f:ea:a5:
df:24:a2:e4:fd:96:49:ac:b6:49:cb:06:c5:bf:c4:c2:07:f2:
53:07:2c:80:8e:36:ce:5e:8a:7b:36:6b:2c:0b:4c:7c:23:02:
11:c2:e8:60:4d:5b:a3:56:0a:54:e2:d0:84:e9:57:21:32:61:
98:db:bc:44:ae:1d:c2:c2:1d:d6:5b:3f:70:7d:30:c4:b1:b1:
69:a6:2f:92:13:78:9e:50:13:23:dd:03:22:ae:49:f2:08:50:
25:cc:20:00:89:b1:6a:46:26:3b:56:78:0d:6a:2a:72:83:8b:
b0:98:1a:28:52:c4:bb:7e:a0:ee:a3:42:02:0e:d4:50:b5:23:
c3:2a:ec:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGRMVya4e3OjNvaOsZARjwtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0ZTEyODNkYWUwYjBiOTk3ODY3MjY1Y2IyYzAwODNjNTEx
MzZlZGEwHhcNMjYxMDMxMDkwMTMzWhcNMjYxMTAxMDkwMTMzWjAzMTEwLwYDVQQD
EygwMDRlZjJmMjJiM2I5YTIzNTdmODUyY2E1NTQzZjk0NWNhZDJjMjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nb8T9+5tS3LIgrypegArT6QChx3
AZwd/r7C8MsUfqZslrbXH+5Kc/B4d3Lbjguao7OENzOU3tQ76E4Pyx1gt86pwXQr
quP+4jhYuvxOBdoxHahKIVMTqnCFH9AkxxWntTx62DZHLgRdjdf6i5eGHbdcRM/X
WfjU4z/8i7aklOx/RmqqvoozrkVfQExycKU1aeoJfWKCIfwJCZX0ZH18OHTWAR8G
6EWe50Fe8i9Ghb3yrunT6nyVSI1BUueI+28wD1brZzls8z0c95lRxpG6SJNvdCdl
lWxcZKRGmNOBZ/04RLplKoklnTRTZ8NFDI/bpXi7J21sRZogCLSIo2gw5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFABO8vIrO5ojV/hSylVD+UXK0sJFMB8GA1UdIwQY
MBaAFBThKD2uCwuZeGcmXLLACDxRE27aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRk9Fb1BhNExDNWw0WnlaY3NzQUlQRkVUYnRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9lNjY1NzEtYTBjNC00YWMwLTgzYWUt
ODA0MTFlOTE3NTM4LzEvRk9Fb1BhNExDNWw0WnlaY3NzQUlQRkVUYnRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9lNjY1NzEtYTBjNC00YWMwLTgzYWUtODA0MTFlOTE3NTM4
LzEvRk9Fb1BhNExDNWw0WnlaY3NzQUlQRkVUYnRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACoJva5P1
fb4UbcI+JjZBaioxHALpCsWtjtFlB/VS1IIdbG6Ys5px0rMPe6m/6EkbA4l+Dzso
kBpNvwH7Cb6P1VIDlgq3hQzIP0dm0nT7lsB9Fq4o1HIww+RVrb1wFN8b6trFn3i0
c3FS7Be/jSCdIMbZbfdrw7rD+y/oH+ql3ySi5P2WSay2ScsGxb/EwgfyUwcsgI42
zl6KezZrLAtMfCMCEcLoYE1bo1YKVOLQhOlXITJhmNu8RK4dwsId1ls/cH0wxLGx
aaYvkhN4nlATI90DIq5J8ghQJcwgAImxakYmO1Z4DWoqcoOLsJgaKFLEu36g7qNC
Ag7UULUjwyrsHA==
-----END CERTIFICATE-----
Generated at Sat Oct 31 12:07:28 2026 by rpki-client