
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.mft
File: fJEmcywvAZO8PeTo06vBX0uu1i0.mft (raw, json)
Hash identifier: TKLAjFYxUsn54Qli7FPed6xRRk/J6HRrnvOmHhvVPV8=
Subject key identifier: 72:D3:C1:D6:1D:D6:92:9E:A1:55:1B:6D:FE:F1:BB:B0:0D:3E:77:77
Authority key identifier: 7C:91:26:73:2C:2F:01:93:BC:3D:E4:E8:D3:AB:C1:5F:4B:AE:D6:2D
Certificate issuer: /CN=7c9126732c2f0193bc3de4e8d3abc15f4baed62d
Certificate serial: 019EB50DE3364E25731A3ADAA564C23FB7B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fJEmcywvAZO8PeTo06vBX0uu1i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.mft
Manifest number: 195A
Signing time: Thu 11 Jun 2026 05:00:46 +0000
Manifest this update: Thu 11 Jun 2026 05:00:46 +0000
Manifest next update: Fri 12 Jun 2026 05:00:46 +0000
Files and hashes: 1: Cpv7g6rHzUKgueybQcWvoRtVjCs.roa (hash: d2rLyuCnEu9URy6j2Ic8MNgDzmSJl5ABOrOYqoRSP3Y=)
2: SEMIltwG2Mp0INuZM2-Rtzcwd0Q.roa (hash: MM7jqLrGrNs0gRxIUqYxEKdS0toE1JlDNhc6tBIS7qg=)
3: fJEmcywvAZO8PeTo06vBX0uu1i0.crl (hash: XGXO2vwzyo1MaPzkrCgMrU9hSTD4H8Ii6gOQ2+GWULU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fJEmcywvAZO8PeTo06vBX0uu1i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 05:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b5:0d:e3:36:4e:25:73:1a:3a:da:a5:64:c2:3f:b7:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c9126732c2f0193bc3de4e8d3abc15f4baed62d
Validity
Not Before: Jun 11 05:00:46 2026 GMT
Not After : Jun 12 05:00:46 2026 GMT
Subject: CN=72d3c1d61dd6929ea1551b6dfef1bbb00d3e7777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bd:a6:11:02:60:d2:38:dc:21:ac:c0:fa:51:
b3:20:87:2b:00:d1:42:e5:66:8b:05:63:29:a1:fe:
18:04:0e:bc:bd:71:e7:9e:1e:ea:0f:73:45:96:2b:
45:cb:6b:7a:d7:a5:23:9b:0f:8f:0e:f1:ae:50:52:
e1:26:72:d5:3b:91:46:a5:57:a1:0c:c0:97:0f:5a:
0d:bc:9e:1b:fc:86:e9:f6:41:e6:79:28:0e:e9:18:
b2:9e:59:58:02:e3:ed:9d:5b:61:95:db:d4:f6:86:
e5:48:1d:fc:8a:f2:88:d7:54:6e:fb:24:d4:23:69:
d9:64:56:c4:37:70:78:67:78:7f:2c:8c:1a:c2:f0:
fb:5c:41:82:a7:10:77:b9:73:bf:b9:3f:b6:49:7b:
c2:bf:a4:d9:6b:ac:bf:52:e2:56:63:56:f2:e5:aa:
8d:fe:7a:fa:1f:f7:36:5c:0b:cf:55:e3:3d:14:e7:
3f:3c:cf:4d:47:d1:ca:56:84:7e:cd:bd:03:5a:e9:
32:34:89:03:71:cf:dc:ef:f5:3a:10:68:b3:0a:74:
43:56:c4:39:a0:1b:36:09:62:82:28:0c:fc:0a:1f:
89:59:55:3a:a1:2f:d4:4a:d9:85:bd:82:6c:37:81:
27:37:81:40:24:e6:28:54:59:eb:d6:6e:86:d6:e1:
cd:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:D3:C1:D6:1D:D6:92:9E:A1:55:1B:6D:FE:F1:BB:B0:0D:3E:77:77
X509v3 Authority Key Identifier:
keyid:7C:91:26:73:2C:2F:01:93:BC:3D:E4:E8:D3:AB:C1:5F:4B:AE:D6:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fJEmcywvAZO8PeTo06vBX0uu1i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:6c:7b:34:35:79:44:ab:7a:79:b3:24:46:7f:45:e8:98:85:
ad:36:04:1b:1c:ee:a2:a4:ca:97:f8:03:67:56:24:cd:39:85:
47:3e:2c:4d:43:dd:db:05:e2:c9:7e:76:52:63:f1:ab:dd:03:
cb:92:01:c4:43:98:ea:f8:55:30:0a:ca:ef:0c:5d:a6:bb:e5:
75:4d:69:04:5c:5d:37:91:3b:47:6f:ae:55:2c:26:00:bb:04:
84:ef:f4:a7:c8:c0:9a:f3:69:6d:0a:7e:38:6b:3e:67:ea:97:
a9:8e:5f:88:cb:ae:fe:c3:a1:d6:d5:a2:31:f3:40:b9:0d:3d:
9a:59:80:91:dc:fe:e5:e8:2e:72:3b:34:fb:4f:35:dc:43:f7:
2b:c8:33:4d:6e:60:1b:a1:ac:58:df:d5:12:d4:22:82:29:f3:
e6:07:1b:a1:8a:ea:46:8b:90:e4:27:99:0a:9d:55:6b:e8:fc:
64:8f:ae:2e:e2:4a:c7:ab:66:32:d2:f9:1c:5f:4f:c1:d5:c1:
81:75:45:ee:e7:cf:7c:e9:10:a5:e2:49:56:98:88:45:49:af:
d9:97:d8:f6:40:2d:4a:26:35:22:c8:7d:14:07:1a:cf:7a:59:
98:a6:da:49:3d:76:db:4a:1a:a0:ea:76:3a:13:15:e5:32:67:
74:27:e5:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 14:24:03 2026 by rpki-client