Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.mft
File: fJEmcywvAZO8PeTo06vBX0uu1i0.mft (raw, json)
Hash identifier: 2ZpZkzI79LBlKA72L7gMgR7YFOeM0DF9reRwlg5emaY=
Subject key identifier: 31:B1:5F:E7:A7:E8:8D:A2:E3:EE:2A:D3:8D:F7:82:F9:2C:E2:82:6D
Authority key identifier: 7C:91:26:73:2C:2F:01:93:BC:3D:E4:E8:D3:AB:C1:5F:4B:AE:D6:2D
Certificate issuer: /CN=7c9126732c2f0193bc3de4e8d3abc15f4baed62d
Certificate serial: 019DCD4F6B2DA10023EF2551240396A683CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fJEmcywvAZO8PeTo06vBX0uu1i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.mft
Manifest number: 18E2
Signing time: Mon 27 Apr 2026 05:00:26 +0000
Manifest this update: Mon 27 Apr 2026 05:00:26 +0000
Manifest next update: Tue 28 Apr 2026 05:00:26 +0000
Files and hashes: 1: Cpv7g6rHzUKgueybQcWvoRtVjCs.roa (hash: d2rLyuCnEu9URy6j2Ic8MNgDzmSJl5ABOrOYqoRSP3Y=)
2: SEMIltwG2Mp0INuZM2-Rtzcwd0Q.roa (hash: MM7jqLrGrNs0gRxIUqYxEKdS0toE1JlDNhc6tBIS7qg=)
3: fJEmcywvAZO8PeTo06vBX0uu1i0.crl (hash: 2/5e7PzleBRSq7VkCF8/f4KEgRgS/4WaVOtQR+cdR1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fJEmcywvAZO8PeTo06vBX0uu1i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:4f:6b:2d:a1:00:23:ef:25:51:24:03:96:a6:83:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c9126732c2f0193bc3de4e8d3abc15f4baed62d
Validity
Not Before: Apr 27 05:00:26 2026 GMT
Not After : Apr 28 05:00:26 2026 GMT
Subject: CN=31b15fe7a7e88da2e3ee2ad38df782f92ce2826d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5a:d1:51:ea:5a:43:57:ec:62:f6:b3:23:36:
bc:5a:c1:bf:26:d4:db:62:58:a0:60:ac:a3:50:01:
fc:22:dc:90:2e:ad:8a:7f:75:a2:ae:f3:09:e8:c9:
5c:47:33:56:ba:23:e0:c5:06:1a:33:3a:93:5c:df:
00:94:7b:37:9a:85:92:c0:28:40:35:da:5f:47:5a:
85:c8:82:9f:5a:b5:45:af:8c:af:f8:e0:c0:12:d8:
46:d1:9b:cc:7a:a4:f8:28:05:bd:10:cc:b7:eb:de:
7f:1b:12:d4:07:80:ee:19:d4:d5:41:27:c9:b4:4e:
de:ff:b2:99:16:fc:74:25:7c:27:01:30:94:46:1c:
d4:7a:fa:f6:e0:f5:a3:18:10:25:c7:1d:e1:80:7f:
c4:58:51:55:f2:65:10:c3:bc:8b:ed:5b:e2:24:e7:
06:81:60:c5:51:6c:e1:f8:7b:26:e1:7c:61:49:fb:
9b:51:07:3b:47:b6:43:ef:a2:60:38:fa:40:52:26:
2e:59:63:9b:8c:e6:8f:46:5f:25:d9:90:72:c3:43:
42:90:19:6e:78:c0:51:d0:e8:12:19:e4:96:14:31:
f1:13:af:06:4e:31:70:ed:84:6e:e8:4d:a6:b4:e1:
6d:8b:b4:33:04:48:29:e4:65:d1:6e:01:b5:ae:59:
46:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:B1:5F:E7:A7:E8:8D:A2:E3:EE:2A:D3:8D:F7:82:F9:2C:E2:82:6D
X509v3 Authority Key Identifier:
keyid:7C:91:26:73:2C:2F:01:93:BC:3D:E4:E8:D3:AB:C1:5F:4B:AE:D6:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fJEmcywvAZO8PeTo06vBX0uu1i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:1d:2b:e1:52:49:f2:72:cb:3e:a6:d5:c3:1b:b4:8f:ac:15:
eb:45:ea:f1:14:40:9a:98:70:b9:76:63:a1:dc:9f:c5:fd:b5:
c8:aa:11:8a:dd:7a:49:26:03:56:9d:4d:9e:e7:e5:d9:ed:e8:
db:4f:e8:02:bb:d5:9c:cd:94:b3:5c:de:2b:1a:ce:6f:e5:d4:
7f:d0:13:35:0e:94:bf:c4:46:bc:ac:68:5b:bc:dd:e5:49:ab:
4d:ea:66:de:47:50:9a:da:2f:bb:0e:8d:95:da:ca:4f:17:a0:
d9:fc:03:b1:f1:de:8d:14:a8:a6:7e:68:a6:0b:1f:50:a1:23:
33:5e:23:cb:85:d6:ba:aa:62:f2:10:a0:b2:38:ea:06:11:b1:
5f:87:6f:ac:9e:07:e7:c3:ea:7e:52:95:1c:9e:ac:fe:a9:62:
b1:48:48:a1:03:ab:d8:60:da:cd:07:43:a6:c0:3e:38:3c:54:
2e:6c:17:51:da:82:bb:46:55:4b:2b:61:af:f2:33:06:c0:05:
07:2a:4d:30:e9:f0:ee:cd:a5:e7:1b:8b:88:ec:16:1f:c1:9d:
ea:d4:d5:e6:94:de:d2:c1:19:27:24:8b:8e:7c:c4:43:d9:4f:
73:1a:82:c4:80:04:c4:3a:38:71:f7:40:9c:f4:dd:65:db:4d:
65:51:cd:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 11:20:05 2026 by rpki-client