Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.mft
File: fJEmcywvAZO8PeTo06vBX0uu1i0.mft (raw, json)
Hash identifier: fVFiAUF8tfokKsXddMh385kiJCXoLx1ofHuQQQ5nj00=
Subject key identifier: 5C:80:0C:50:1D:04:BF:22:9A:6B:B4:55:E1:9B:0C:1A:ED:D6:C4:F3
Authority key identifier: 7C:91:26:73:2C:2F:01:93:BC:3D:E4:E8:D3:AB:C1:5F:4B:AE:D6:2D
Certificate issuer: /CN=7c9126732c2f0193bc3de4e8d3abc15f4baed62d
Certificate serial: 019F913552BA10035270C03F3B833C14E9DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fJEmcywvAZO8PeTo06vBX0uu1i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.mft
Manifest number: 19CC
Signing time: Thu 23 Jul 2026 23:00:18 +0000
Manifest this update: Thu 23 Jul 2026 23:00:18 +0000
Manifest next update: Fri 24 Jul 2026 23:00:18 +0000
Files and hashes: 1: Cpv7g6rHzUKgueybQcWvoRtVjCs.roa (hash: d2rLyuCnEu9URy6j2Ic8MNgDzmSJl5ABOrOYqoRSP3Y=)
2: SEMIltwG2Mp0INuZM2-Rtzcwd0Q.roa (hash: MM7jqLrGrNs0gRxIUqYxEKdS0toE1JlDNhc6tBIS7qg=)
3: fJEmcywvAZO8PeTo06vBX0uu1i0.crl (hash: JrpL+HDXodCJ0teqV1aEPEhfc+AjZMh3qQV/EnRce8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fJEmcywvAZO8PeTo06vBX0uu1i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:52:ba:10:03:52:70:c0:3f:3b:83:3c:14:e9:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c9126732c2f0193bc3de4e8d3abc15f4baed62d
Validity
Not Before: Jul 23 23:00:18 2026 GMT
Not After : Jul 24 23:00:18 2026 GMT
Subject: CN=5c800c501d04bf229a6bb455e19b0c1aedd6c4f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:05:0f:f3:c9:c2:71:2b:d2:7a:be:ac:a4:27:
17:2c:16:b5:a1:90:c6:fc:0e:66:62:9d:aa:23:3f:
99:b7:cb:3b:a2:ba:bc:52:b5:de:b2:71:36:5c:e3:
ef:0b:65:31:d4:44:7b:8b:2b:5b:7f:26:dc:77:2e:
41:47:84:14:a6:cb:f0:36:28:04:3c:ff:98:f4:bd:
0a:fc:33:8f:6c:a9:4e:8b:96:b9:dd:ad:48:b1:57:
eb:f1:f0:b6:9d:45:eb:00:57:f9:b0:64:94:88:1c:
6f:ea:24:ab:f6:51:7c:73:3a:ee:2e:48:e2:09:4f:
4e:aa:49:94:1f:a1:cb:31:a4:9e:5e:ea:79:c3:97:
e3:83:5c:a1:2a:63:e8:7f:c5:e4:36:d2:11:69:cd:
f9:4f:02:aa:ab:69:75:f2:d5:c0:cd:22:de:c3:bd:
9e:ff:4f:1d:76:02:77:43:6a:19:cb:c4:36:b7:9d:
78:88:30:0f:be:0c:37:f1:89:74:81:6d:c0:56:35:
44:59:66:d8:ad:33:75:4f:f1:49:f6:98:ba:be:f0:
f7:99:c8:ac:fd:1f:2c:af:57:c2:3c:b9:fa:49:a9:
9b:75:80:28:98:a4:64:12:8f:5a:2b:6e:eb:ca:a3:
49:59:28:08:8b:c7:10:b2:a8:d6:61:29:28:92:19:
29:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:80:0C:50:1D:04:BF:22:9A:6B:B4:55:E1:9B:0C:1A:ED:D6:C4:F3
X509v3 Authority Key Identifier:
keyid:7C:91:26:73:2C:2F:01:93:BC:3D:E4:E8:D3:AB:C1:5F:4B:AE:D6:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fJEmcywvAZO8PeTo06vBX0uu1i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:ee:a8:80:eb:fc:9e:3d:10:7f:09:28:d4:b5:4b:b7:8c:b4:
19:45:6e:21:f1:de:60:97:63:d3:04:9a:ac:f6:bb:27:ee:ad:
9b:13:0f:cb:2a:a2:30:31:52:3d:a5:ce:5f:65:b6:64:cc:c6:
eb:58:dc:16:f6:1d:a7:a7:96:14:fa:c5:f4:4a:b4:7d:f6:b7:
8d:80:d3:93:ff:da:11:5c:fc:c2:33:d4:82:86:93:4b:1a:fe:
fd:71:7b:52:fc:87:c3:13:a1:8a:8f:1d:90:b6:08:d2:6b:7c:
f8:96:65:c5:24:fa:df:ff:aa:7a:ea:90:91:e0:cf:f0:cc:1f:
7e:9f:79:da:73:5e:b7:5a:e2:55:b0:a5:01:93:fc:bb:b4:a5:
59:d7:b5:06:da:a6:2a:a3:8b:9b:01:47:66:2f:e1:3c:ed:67:
1c:1f:8f:c6:46:f5:57:9b:59:36:3e:9a:01:72:7a:5b:98:ba:
3f:6e:ca:64:d8:29:0c:d3:76:90:fe:60:22:4a:c5:30:c5:06:
07:53:ba:37:77:c9:70:e7:fc:50:76:7d:cb:9a:53:94:46:bc:
98:94:14:63:aa:e8:a7:97:13:b3:60:3a:37:f5:4f:f1:9e:d0:
4b:1f:a4:f5:0c:7a:b2:3b:20:46:e1:a7:a5:e5:09:bf:d1:7f:
0a:ce:c7:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:44:16 2026 by rpki-client