Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.mft
File: fJEmcywvAZO8PeTo06vBX0uu1i0.mft (raw, json)
Hash identifier: DlhQWEZKQ1VakWeW78WRgOHD/wN3hZb5M/eZovdFyg8=
Subject key identifier: 58:10:D1:6D:F1:B3:D8:5F:DF:C8:06:FD:22:44:62:6F:5F:CE:9F:2A
Authority key identifier: 7C:91:26:73:2C:2F:01:93:BC:3D:E4:E8:D3:AB:C1:5F:4B:AE:D6:2D
Certificate issuer: /CN=7c9126732c2f0193bc3de4e8d3abc15f4baed62d
Certificate serial: 019D292938EAB1F17B1647A1AD68B7B51956
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fJEmcywvAZO8PeTo06vBX0uu1i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.mft
Manifest number: 188D
Signing time: Thu 26 Mar 2026 08:01:00 +0000
Manifest this update: Thu 26 Mar 2026 08:01:00 +0000
Manifest next update: Fri 27 Mar 2026 08:01:00 +0000
Files and hashes: 1: Cpv7g6rHzUKgueybQcWvoRtVjCs.roa (hash: d2rLyuCnEu9URy6j2Ic8MNgDzmSJl5ABOrOYqoRSP3Y=)
2: SEMIltwG2Mp0INuZM2-Rtzcwd0Q.roa (hash: MM7jqLrGrNs0gRxIUqYxEKdS0toE1JlDNhc6tBIS7qg=)
3: fJEmcywvAZO8PeTo06vBX0uu1i0.crl (hash: lJGzI0SWN+1/z+gsgQ4eH6TcNV1XxOdQtBNYOnohwpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fJEmcywvAZO8PeTo06vBX0uu1i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:38:ea:b1:f1:7b:16:47:a1:ad:68:b7:b5:19:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c9126732c2f0193bc3de4e8d3abc15f4baed62d
Validity
Not Before: Mar 26 08:01:00 2026 GMT
Not After : Mar 27 08:01:00 2026 GMT
Subject: CN=5810d16df1b3d85fdfc806fd2244626f5fce9f2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:fe:ff:54:11:cc:b2:45:dd:08:99:a5:e4:2e:
57:bf:ca:50:05:6b:df:4f:4c:f6:f4:cc:83:a3:67:
0d:40:e2:77:87:cd:40:f7:23:fd:72:83:02:51:19:
e9:32:e7:2d:00:84:9c:80:c1:59:f4:07:63:19:23:
19:e4:71:9a:3d:a5:06:61:47:93:44:07:a9:98:5f:
ca:74:64:c4:8a:45:97:2e:c8:6b:e1:aa:40:56:9c:
b6:96:76:0c:6e:1d:fc:8f:ae:db:bd:76:26:a5:13:
89:75:a6:3c:ce:19:63:54:fd:de:c6:b9:27:eb:84:
48:1d:80:2d:37:2b:29:a0:ab:64:23:00:37:31:b0:
8d:a2:92:fe:a2:02:73:38:e1:f5:96:4d:e1:53:df:
d5:29:da:2b:76:11:68:79:b6:48:b4:05:e5:04:33:
fd:fd:f6:38:98:be:4f:c1:82:33:e2:fa:bf:d6:a6:
e7:76:ac:09:b1:5e:49:63:73:0d:06:07:17:9a:4d:
0a:94:67:2e:dd:55:98:8f:a4:1a:b9:30:66:87:25:
50:38:58:c0:80:cb:b6:c8:bd:58:e3:18:db:d4:53:
40:87:8e:d3:54:74:44:fd:a8:b3:18:cf:e4:55:96:
38:1c:27:1b:cb:db:9d:c5:03:79:8a:9b:52:c6:66:
f9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:10:D1:6D:F1:B3:D8:5F:DF:C8:06:FD:22:44:62:6F:5F:CE:9F:2A
X509v3 Authority Key Identifier:
keyid:7C:91:26:73:2C:2F:01:93:BC:3D:E4:E8:D3:AB:C1:5F:4B:AE:D6:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fJEmcywvAZO8PeTo06vBX0uu1i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:a6:dd:3d:46:33:8b:56:4f:aa:cc:2a:28:ce:e9:e9:d9:8c:
5e:24:b1:4b:b8:91:9b:7f:e8:d4:37:31:9e:8c:7b:5a:2f:57:
b9:7a:3e:ba:01:05:46:44:c3:fe:df:30:30:f4:48:d8:ba:9c:
dc:c1:a9:57:34:48:d8:0a:a1:d2:42:78:d4:16:c3:32:c7:1f:
c2:fc:aa:e2:09:49:42:60:36:03:db:07:a1:c2:68:cf:32:e7:
ba:4b:14:78:5e:7e:b2:e0:35:ad:00:6f:d8:ac:3e:19:f1:1e:
bc:32:6b:55:3e:75:ac:a5:d2:69:30:43:34:c0:00:8b:b8:31:
59:58:01:36:e9:46:ff:ce:c7:31:a2:75:f9:bd:5a:e9:cc:87:
e5:6e:3c:00:cf:d1:87:c9:a2:c6:ec:de:c1:7d:f4:06:92:50:
e8:5f:3a:3c:d7:f3:b0:a1:12:06:45:00:18:43:c0:93:87:77:
a4:42:ca:60:cc:9b:08:b7:cf:93:03:6f:1f:14:be:77:51:22:
7d:85:d0:46:50:77:29:67:e6:f2:6a:6b:07:55:53:84:a6:65:
38:b0:2b:fc:e1:5f:6f:8b:0e:44:2c:9c:f6:54:60:6d:3e:3f:
ef:a1:c4:3d:1e:cf:35:78:7a:e3:b7:df:75:79:7b:6c:84:53:
0a:f8:fe:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pKTjqsfF7FkehrWi3tRlWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjOTEyNjczMmMyZjAxOTNiYzNkZTRlOGQzYWJjMTVmNGJh
ZWQ2MmQwHhcNMjYwMzI2MDgwMTAwWhcNMjYwMzI3MDgwMTAwWjAzMTEwLwYDVQQD
Eyg1ODEwZDE2ZGYxYjNkODVmZGZjODA2ZmQyMjQ0NjI2ZjVmY2U5ZjJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4/7/VBHMskXdCJml5C5Xv8pQBWvf
T0z29MyDo2cNQOJ3h81A9yP9coMCURnpMuctAIScgMFZ9AdjGSMZ5HGaPaUGYUeT
RAepmF/KdGTEikWXLshr4apAVpy2lnYMbh38j67bvXYmpROJdaY8zhljVP3exrkn
64RIHYAtNyspoKtkIwA3MbCNopL+ogJzOOH1lk3hU9/VKdordhFoebZItAXlBDP9
/fY4mL5PwYIz4vq/1qbndqwJsV5JY3MNBgcXmk0KlGcu3VWYj6QauTBmhyVQOFjA
gMu2yL1Y4xjb1FNAh47TVHRE/aizGM/kVZY4HCcby9udxQN5iptSxmb5zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFgQ0W3xs9hf38gG/SJEYm9fzp8qMB8GA1UdIwQY
MBaAFHyRJnMsLwGTvD3k6NOrwV9LrtYtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkpFbWN5d3ZBWk84UGVUbzA2dkJYMHV1MWkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi85NDYzMmUtOTlkMy00YzIxLWI2N2Qt
ZDZiNzMwMjY2ZTc2LzEvZkpFbWN5d3ZBWk84UGVUbzA2dkJYMHV1MWkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi85NDYzMmUtOTlkMy00YzIxLWI2N2QtZDZiNzMwMjY2ZTc2
LzEvZkpFbWN5d3ZBWk84UGVUbzA2dkJYMHV1MWkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADqbdPUYz
i1ZPqswqKM7p6dmMXiSxS7iRm3/o1Dcxnox7Wi9XuXo+ugEFRkTD/t8wMPRI2Lqc
3MGpVzRI2Aqh0kJ41BbDMscfwvyq4glJQmA2A9sHocJozzLnuksUeF5+suA1rQBv
2Kw+GfEevDJrVT51rKXSaTBDNMAAi7gxWVgBNulG/87HMaJ1+b1a6cyH5W48AM/R
h8mixuzewX30BpJQ6F86PNfzsKESBkUAGEPAk4d3pELKYMybCLfPkwNvHxS+d1Ei
fYXQRlB3KWfm8mprB1VThKZlOLAr/OFfb4sORCyc9lRgbT4/76HEPR7PNXh647ff
dXl7bIRTCvj+nw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:06:32 2026 by rpki-client