Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.mft
File: fJEmcywvAZO8PeTo06vBX0uu1i0.mft (raw, json)
Hash identifier: Yiw2GNTnOY4zLAjwkctSKXiCODB3Fr810R8iSQCR4Nk=
Subject key identifier: 73:8D:F2:35:EF:45:4E:87:1D:66:23:3F:E7:C6:B4:01:77:54:58:93
Authority key identifier: 7C:91:26:73:2C:2F:01:93:BC:3D:E4:E8:D3:AB:C1:5F:4B:AE:D6:2D
Certificate issuer: /CN=7c9126732c2f0193bc3de4e8d3abc15f4baed62d
Certificate serial: 01A0D5A70B8CAADCFCD0EF9B4DF877008229
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fJEmcywvAZO8PeTo06vBX0uu1i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.mft
Manifest number: 1A74
Signing time: Thu 24 Sep 2026 23:01:29 +0000
Manifest this update: Thu 24 Sep 2026 23:01:29 +0000
Manifest next update: Fri 25 Sep 2026 23:01:29 +0000
Files and hashes: 1: Cpv7g6rHzUKgueybQcWvoRtVjCs.roa (hash: d2rLyuCnEu9URy6j2Ic8MNgDzmSJl5ABOrOYqoRSP3Y=)
2: SEMIltwG2Mp0INuZM2-Rtzcwd0Q.roa (hash: MM7jqLrGrNs0gRxIUqYxEKdS0toE1JlDNhc6tBIS7qg=)
3: fJEmcywvAZO8PeTo06vBX0uu1i0.crl (hash: kj8m5RFSpmI/nGlLUGyoEV063Ysjz149xiMcA0POWEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fJEmcywvAZO8PeTo06vBX0uu1i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:a7:0b:8c:aa:dc:fc:d0:ef:9b:4d:f8:77:00:82:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c9126732c2f0193bc3de4e8d3abc15f4baed62d
Validity
Not Before: Sep 24 23:01:29 2026 GMT
Not After : Sep 25 23:01:29 2026 GMT
Subject: CN=738df235ef454e871d66233fe7c6b40177545893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b5:c6:a2:c5:6c:54:2e:b2:ee:34:55:48:fd:
4e:69:64:84:38:65:17:96:18:de:73:a2:69:ee:98:
0a:6c:9f:61:df:65:24:30:03:39:25:f4:f5:52:e3:
cd:1d:79:e3:3f:49:9c:03:25:21:1e:05:96:aa:6f:
2e:71:68:2a:d5:6e:bc:6d:01:2e:84:32:e1:2c:2c:
90:83:87:44:7d:9c:97:79:4d:45:ed:60:08:68:70:
75:7b:ab:73:3a:b6:5e:bc:e0:98:25:c7:f4:e2:53:
7d:80:c7:5b:0f:de:bd:86:12:eb:4e:6e:33:87:34:
f6:af:ee:de:16:e2:d2:56:0b:c2:ee:8e:0a:af:68:
75:09:3a:d3:5e:c6:81:3d:2a:f8:d6:a6:2b:60:34:
b5:9c:6f:26:d8:89:69:d6:7a:6f:f8:53:ad:82:f6:
ff:b2:4c:4b:98:fa:33:9b:92:00:c0:0d:1f:ef:ac:
91:af:88:55:4c:a5:a6:02:c0:36:73:86:5c:03:77:
b0:7a:ac:b4:16:f4:4f:ae:15:f1:a4:47:c9:3f:4e:
4c:fb:a5:09:26:84:f8:93:10:e8:9c:f9:06:76:21:
be:1a:70:61:8c:03:25:33:6e:1d:a8:46:8d:1b:1d:
8e:68:1f:78:21:85:93:a9:c1:5c:ce:00:2f:d0:e2:
89:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:8D:F2:35:EF:45:4E:87:1D:66:23:3F:E7:C6:B4:01:77:54:58:93
X509v3 Authority Key Identifier:
keyid:7C:91:26:73:2C:2F:01:93:BC:3D:E4:E8:D3:AB:C1:5F:4B:AE:D6:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fJEmcywvAZO8PeTo06vBX0uu1i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:ba:af:4f:e5:38:80:7b:eb:02:44:ad:d1:f2:21:58:c7:9c:
35:37:e5:b8:8a:63:c8:28:5e:68:48:25:ec:35:4a:16:62:2a:
3a:1d:ee:a0:81:c9:eb:8a:a3:c1:c2:89:c5:cb:c1:a6:85:7d:
68:1d:bf:98:ca:a2:0a:fe:9d:8e:6a:87:7f:0b:da:ca:e2:59:
28:e1:42:86:f1:9a:5a:fe:fc:5c:69:f1:06:d0:53:e0:b2:62:
99:1b:04:7b:36:be:51:7c:9e:a6:e4:8f:ef:ec:5d:d7:55:e2:
9e:9d:a4:6c:c6:f5:e2:97:5f:9d:5f:af:1f:e7:3e:8a:24:f3:
98:32:69:90:7d:bd:3a:58:63:27:c7:5f:4f:61:96:3c:77:b1:
aa:20:e3:b1:71:86:4d:11:1c:c6:a6:d7:46:2f:65:e0:de:e5:
51:d0:53:09:5e:29:95:f8:45:8d:07:eb:24:f5:b4:5d:18:da:
79:01:1e:57:dd:1d:b4:d5:84:0c:41:3e:95:76:58:71:0d:43:
c0:a4:38:f0:ec:bd:32:fc:31:c0:81:c2:c9:34:a6:1d:2e:0d:
f7:57:d7:1b:24:72:13:36:82:33:bc:4b:34:9d:dd:a5:72:b5:
81:c5:94:40:06:8e:e9:c4:0e:12:10:a4:4b:0b:70:9a:05:ac:
0f:d6:13:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:41:09 2026 by rpki-client