Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.mft
File: fJEmcywvAZO8PeTo06vBX0uu1i0.mft (raw, json)
Hash identifier: h3/GlOkDIoi7iAC8lfmnTWoe5FtUWflA7VJiVcCtgZk=
Subject key identifier: 32:0C:9B:AA:21:41:EB:CB:28:D1:5C:BB:D1:7B:81:8F:F6:5E:8B:4C
Authority key identifier: 7C:91:26:73:2C:2F:01:93:BC:3D:E4:E8:D3:AB:C1:5F:4B:AE:D6:2D
Certificate issuer: /CN=7c9126732c2f0193bc3de4e8d3abc15f4baed62d
Certificate serial: 01A109CB8D12F3AA36156C6B82EF4EA60A80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fJEmcywvAZO8PeTo06vBX0uu1i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.mft
Manifest number: 1A8F
Signing time: Mon 05 Oct 2026 02:01:37 +0000
Manifest this update: Mon 05 Oct 2026 02:01:37 +0000
Manifest next update: Tue 06 Oct 2026 02:01:37 +0000
Files and hashes: 1: Cpv7g6rHzUKgueybQcWvoRtVjCs.roa (hash: d2rLyuCnEu9URy6j2Ic8MNgDzmSJl5ABOrOYqoRSP3Y=)
2: SEMIltwG2Mp0INuZM2-Rtzcwd0Q.roa (hash: MM7jqLrGrNs0gRxIUqYxEKdS0toE1JlDNhc6tBIS7qg=)
3: fJEmcywvAZO8PeTo06vBX0uu1i0.crl (hash: sR4zenmt3TPjdHBmlpsMA4z+2JWPp0qpbVIycrhQ/Ys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fJEmcywvAZO8PeTo06vBX0uu1i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 23:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:09:cb:8d:12:f3:aa:36:15:6c:6b:82:ef:4e:a6:0a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c9126732c2f0193bc3de4e8d3abc15f4baed62d
Validity
Not Before: Oct 5 02:01:37 2026 GMT
Not After : Oct 6 02:01:37 2026 GMT
Subject: CN=320c9baa2141ebcb28d15cbbd17b818ff65e8b4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:32:a2:1d:b5:be:68:27:8e:9f:9b:bf:27:93:
f3:9d:92:b1:3d:4c:07:0d:64:9c:ad:94:9a:3f:00:
9f:44:ef:37:2d:c6:7a:41:e1:37:17:fa:0c:a5:7f:
6f:96:89:2e:50:83:6f:6d:55:64:7e:a8:f8:6e:6a:
37:d7:f7:82:d6:da:43:dd:21:62:79:bd:34:8b:1b:
5f:6d:78:5a:39:6f:d3:23:be:1b:02:ab:6a:6d:36:
93:40:a8:7e:e8:5c:e2:07:13:fa:65:d9:a2:d8:f7:
d2:d5:e8:88:c7:f9:ee:e1:36:b7:4d:44:10:80:7b:
fa:31:0f:11:79:38:ad:83:2a:a6:3e:e5:09:9d:9c:
d0:75:75:45:64:4c:1d:50:e1:c5:68:bb:9c:ad:5a:
9c:9e:57:60:55:48:98:8c:88:2d:50:a0:73:d4:80:
5f:be:c1:a2:ec:98:bc:59:ea:a9:df:83:f5:1a:45:
63:cb:db:6e:b0:01:25:6a:82:e5:94:b5:0c:33:41:
60:35:53:f6:9b:95:d9:e1:6e:1e:3e:4f:d5:6d:d5:
fc:2c:27:af:ba:7e:9d:7d:bf:62:4f:b6:35:76:e4:
de:86:13:c2:08:90:4b:7b:9c:68:e9:52:b2:ce:b0:
85:d3:d6:72:f4:ae:32:45:e2:55:ce:28:fb:a3:33:
27:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:0C:9B:AA:21:41:EB:CB:28:D1:5C:BB:D1:7B:81:8F:F6:5E:8B:4C
X509v3 Authority Key Identifier:
keyid:7C:91:26:73:2C:2F:01:93:BC:3D:E4:E8:D3:AB:C1:5F:4B:AE:D6:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fJEmcywvAZO8PeTo06vBX0uu1i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:4f:1e:4a:8c:86:8c:bd:5d:ee:db:96:72:6d:eb:35:fb:e3:
6f:9e:a8:9f:ff:c6:22:a6:73:27:53:ef:fc:6b:f5:78:17:3a:
5b:0a:59:48:38:9e:3b:33:18:4f:6b:10:ac:6a:d8:6c:fd:c1:
06:39:82:07:ec:8b:c9:04:38:ab:b2:f7:01:9b:08:4f:95:13:
89:d6:ad:0f:43:6a:81:cb:0c:03:94:00:26:ce:d6:b8:2a:42:
73:2e:48:7c:e4:03:85:04:88:0c:9d:14:be:7b:f6:6a:ab:b4:
65:f6:bf:c2:8e:a2:db:7f:60:79:1c:67:7f:de:74:fd:14:bd:
68:47:d9:68:18:11:10:c8:40:a7:4a:64:0b:fc:a9:d6:83:08:
2d:27:d3:e7:98:69:25:f6:3c:81:a0:1d:06:99:bc:9d:15:56:
f3:f9:7d:b2:56:c5:0f:ac:57:d1:d8:8a:f8:6d:89:d8:81:8b:
c8:7e:9c:ed:34:84:cf:79:b0:19:0e:63:5f:61:70:ae:e1:84:
b7:19:88:d6:ee:20:70:f5:1a:0f:ec:5f:38:ce:ff:11:77:8f:
08:b6:21:35:1f:aa:06:c4:c7:fd:76:36:52:f7:3b:78:e5:16:
aa:dd:c5:d2:6e:1b:09:c3:d0:fb:05:3b:05:ab:2e:83:bf:16:
25:5b:fd:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEJy40S86o2FWxrgu9OpgqAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjOTEyNjczMmMyZjAxOTNiYzNkZTRlOGQzYWJjMTVmNGJh
ZWQ2MmQwHhcNMjYxMDA1MDIwMTM3WhcNMjYxMDA2MDIwMTM3WjAzMTEwLwYDVQQD
EygzMjBjOWJhYTIxNDFlYmNiMjhkMTVjYmJkMTdiODE4ZmY2NWU4YjRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjKiHbW+aCeOn5u/J5PznZKxPUwH
DWScrZSaPwCfRO83LcZ6QeE3F/oMpX9vlokuUINvbVVkfqj4bmo31/eC1tpD3SFi
eb00ixtfbXhaOW/TI74bAqtqbTaTQKh+6FziBxP6Zdmi2PfS1eiIx/nu4Ta3TUQQ
gHv6MQ8ReTitgyqmPuUJnZzQdXVFZEwdUOHFaLucrVqcnldgVUiYjIgtUKBz1IBf
vsGi7Ji8Weqp34P1GkVjy9tusAElaoLllLUMM0FgNVP2m5XZ4W4ePk/VbdX8LCev
un6dfb9iT7Y1duTehhPCCJBLe5xo6VKyzrCF09Zy9K4yReJVzij7ozMn1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDIMm6ohQevLKNFcu9F7gY/2XotMMB8GA1UdIwQY
MBaAFHyRJnMsLwGTvD3k6NOrwV9LrtYtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkpFbWN5d3ZBWk84UGVUbzA2dkJYMHV1MWkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi85NDYzMmUtOTlkMy00YzIxLWI2N2Qt
ZDZiNzMwMjY2ZTc2LzEvZkpFbWN5d3ZBWk84UGVUbzA2dkJYMHV1MWkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi85NDYzMmUtOTlkMy00YzIxLWI2N2QtZDZiNzMwMjY2ZTc2
LzEvZkpFbWN5d3ZBWk84UGVUbzA2dkJYMHV1MWkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEE8eSoyG
jL1d7tuWcm3rNfvjb56on//GIqZzJ1Pv/Gv1eBc6WwpZSDieOzMYT2sQrGrYbP3B
BjmCB+yLyQQ4q7L3AZsIT5UTidatD0NqgcsMA5QAJs7WuCpCcy5IfOQDhQSIDJ0U
vnv2aqu0Zfa/wo6i239geRxnf950/RS9aEfZaBgREMhAp0pkC/yp1oMILSfT55hp
JfY8gaAdBpm8nRVW8/l9slbFD6xX0diK+G2J2IGLyH6c7TSEz3mwGQ5jX2FwruGE
txmI1u4gcPUaD+xfOM7/EXePCLYhNR+qBsTH/XY2Uvc7eOUWqt3F0m4bCcPQ+wU7
Basug78WJVv9bA==
-----END CERTIFICATE-----
Generated at Mon Oct 5 09:34:05 2026 by rpki-client