Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.mft
File: fJEmcywvAZO8PeTo06vBX0uu1i0.mft (raw, json)
Hash identifier: aTR2NMKSqWcUt8IpB9M/I4Xrhlk7imM1eSHs9u42hhM=
Subject key identifier: 71:2E:4B:29:11:41:75:1A:01:7D:AB:C8:2F:AC:72:94:12:68:00:DD
Authority key identifier: 7C:91:26:73:2C:2F:01:93:BC:3D:E4:E8:D3:AB:C1:5F:4B:AE:D6:2D
Certificate issuer: /CN=7c9126732c2f0193bc3de4e8d3abc15f4baed62d
Certificate serial: 01A17F98B74BFDF0C9AFE1F191B20E319E30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fJEmcywvAZO8PeTo06vBX0uu1i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.mft
Manifest number: 1ACC
Signing time: Tue 27 Oct 2026 23:01:17 +0000
Manifest this update: Tue 27 Oct 2026 23:01:17 +0000
Manifest next update: Wed 28 Oct 2026 23:01:17 +0000
Files and hashes: 1: Cpv7g6rHzUKgueybQcWvoRtVjCs.roa (hash: d2rLyuCnEu9URy6j2Ic8MNgDzmSJl5ABOrOYqoRSP3Y=)
2: SEMIltwG2Mp0INuZM2-Rtzcwd0Q.roa (hash: MM7jqLrGrNs0gRxIUqYxEKdS0toE1JlDNhc6tBIS7qg=)
3: fJEmcywvAZO8PeTo06vBX0uu1i0.crl (hash: HZdCt6TJyNymWTWJSgrUHT42AVmdDeEHQjqp1FFNndY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fJEmcywvAZO8PeTo06vBX0uu1i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:98:b7:4b:fd:f0:c9:af:e1:f1:91:b2:0e:31:9e:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c9126732c2f0193bc3de4e8d3abc15f4baed62d
Validity
Not Before: Oct 27 23:01:17 2026 GMT
Not After : Oct 28 23:01:17 2026 GMT
Subject: CN=712e4b291141751a017dabc82fac7294126800dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:fc:9c:40:b5:88:7c:75:78:96:1f:a0:87:66:
7d:2f:56:0f:b7:2b:bb:44:6e:74:b0:52:87:1f:d4:
95:69:f0:f3:d6:df:c4:9b:45:0a:ac:31:4b:cd:47:
05:76:3c:5e:9b:6b:8e:0a:44:ad:b0:86:3d:f7:34:
a5:1a:92:21:c0:4b:96:a5:49:27:29:ba:84:f7:68:
04:18:ef:bc:19:4e:b7:17:83:f6:c7:12:21:ad:51:
68:5e:1e:38:dd:01:02:f9:d0:e3:cb:f5:1a:87:92:
a3:43:6e:45:06:47:03:6b:c4:24:4a:d8:ec:fd:93:
30:43:5b:60:a1:df:8a:b3:37:97:95:77:07:d8:6b:
67:2c:bd:e9:41:f0:ce:65:c6:94:14:82:01:55:62:
f2:95:49:84:69:68:c4:f3:b0:b3:ce:48:a7:43:32:
04:9d:d9:9a:40:c0:1f:f3:e0:5f:b0:15:cb:55:21:
6b:f2:a2:a2:74:8f:5d:55:53:ea:29:35:e9:67:f0:
bf:8e:1f:1a:5b:b2:68:a7:63:d7:cc:f5:4a:69:29:
22:09:fa:36:4a:f6:71:25:0e:a3:f4:16:9b:f1:23:
0e:f0:45:f9:74:2e:07:a0:46:e8:89:83:b7:ff:23:
1b:63:47:94:2b:6e:ba:97:8e:c5:da:5d:93:61:00:
04:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:2E:4B:29:11:41:75:1A:01:7D:AB:C8:2F:AC:72:94:12:68:00:DD
X509v3 Authority Key Identifier:
keyid:7C:91:26:73:2C:2F:01:93:BC:3D:E4:E8:D3:AB:C1:5F:4B:AE:D6:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fJEmcywvAZO8PeTo06vBX0uu1i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:c3:e0:62:92:fc:09:9b:9d:3e:e2:03:90:e5:25:84:2c:dc:
13:a9:7f:2d:00:2d:9b:f9:e9:85:03:05:5d:01:f8:4b:20:bf:
73:51:37:38:4a:fc:50:52:74:c2:a1:dc:24:af:cd:6a:61:38:
7f:59:42:ee:78:96:60:4e:ad:77:75:e9:43:9f:aa:56:e7:59:
10:ac:4c:03:7b:07:61:3c:91:70:79:1a:d5:75:17:18:0b:48:
45:75:22:db:3d:20:53:10:a2:ce:1b:1f:b3:4d:36:ac:00:8e:
30:6b:91:a2:3e:36:7e:1a:17:15:d0:dc:43:2d:f7:a8:ad:0d:
24:5e:e7:05:d9:22:37:13:48:ab:f4:a0:d0:6c:c0:f2:08:02:
72:ee:1e:0b:61:88:1b:61:56:f6:a2:75:92:d8:6f:77:32:11:
e5:09:b5:53:a8:92:5d:08:8a:08:88:fe:1e:86:d6:de:8f:4a:
c5:59:06:19:4e:9b:8b:5d:e5:48:91:25:28:db:6f:19:36:0f:
02:fd:3b:45:f0:b4:72:4c:fe:e4:9c:b7:02:2e:d1:dd:33:95:
c8:15:68:c2:ef:71:08:1f:50:fc:c0:19:48:92:d0:45:1e:c2:
d5:33:6e:15:09:aa:dc:63:09:a6:41:6a:81:21:a9:a9:cd:61:
58:6a:f5:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 07:26:21 2026 by rpki-client