Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.mft
File: 39hkHjKKpdGclg1Ikc-Gd84Siec.mft (raw, json)
Hash identifier: bv7C8xwalxkhwWVbKW0nVjx9TsByYcKML1WqoRvqx4s=
Subject key identifier: 59:B4:A2:F5:0D:57:07:34:A3:A6:B6:88:BC:E2:20:D4:A0:25:15:6E
Authority key identifier: DF:D8:64:1E:32:8A:A5:D1:9C:96:0D:48:91:CF:86:77:CE:12:89:E7
Certificate issuer: /CN=dfd8641e328aa5d19c960d4891cf8677ce1289e7
Certificate serial: 019FAC3EDE41529A34E01E66015FB075E1D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39hkHjKKpdGclg1Ikc-Gd84Siec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.mft
Manifest number: 02DA
Signing time: Wed 29 Jul 2026 05:00:29 +0000
Manifest this update: Wed 29 Jul 2026 05:00:29 +0000
Manifest next update: Thu 30 Jul 2026 05:00:29 +0000
Files and hashes: 1: 2qvSkbHTsb98tl7LYwqPesWPH0g.roa (hash: Y4264CBO/wnBYQA3v/iM8WdJyQ6sBIxNEIMB+ic9wcM=)
2: 39hkHjKKpdGclg1Ikc-Gd84Siec.crl (hash: POMRm6F9d50RslLyzJ3mOaKYQlXF5m97W/hdaiz3T3Q=)
3: LPFoAB4sPBskTSmjN__uUCavKxw.roa (hash: ESBBS9bOaL8PT/NnpNwZWIjfHqj4VbeRzrLEqzVAw6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.mft
rsync://rpki.ripe.net/repository/DEFAULT/39hkHjKKpdGclg1Ikc-Gd84Siec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3e:de:41:52:9a:34:e0:1e:66:01:5f:b0:75:e1:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd8641e328aa5d19c960d4891cf8677ce1289e7
Validity
Not Before: Jul 29 05:00:29 2026 GMT
Not After : Jul 30 05:00:29 2026 GMT
Subject: CN=59b4a2f50d570734a3a6b688bce220d4a025156e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bf:18:98:9b:ad:68:b9:4a:ae:e7:22:b6:d7:
1e:00:bd:a0:26:a7:5f:cd:98:f9:99:70:a5:02:59:
ee:1b:ea:d9:82:ee:75:18:a6:ce:5f:0c:45:20:a0:
dc:12:54:c0:c6:25:e9:2f:44:09:3c:ee:b0:62:01:
26:33:a5:73:f6:6f:35:c2:d0:b4:90:38:84:fa:a9:
d3:5c:0a:9d:c4:4b:2d:8a:1f:55:e1:bf:b0:88:73:
cf:e3:d2:50:ab:71:51:dc:ba:99:8c:24:70:38:55:
2a:4d:b5:1a:04:90:b8:35:4c:bb:2d:3b:35:e5:8c:
dd:49:7b:df:05:d3:1f:8d:fc:f6:fd:0c:17:e3:f2:
a4:09:a9:41:5b:8f:a8:66:1a:7c:d0:36:91:8d:d1:
d9:ea:73:fe:45:38:aa:bc:66:19:d5:53:d6:1a:9c:
90:32:e5:2a:7a:34:d9:f8:27:f9:13:21:2a:4a:ac:
10:37:93:ee:28:49:5e:08:76:76:9e:29:04:7f:68:
d1:af:b7:e9:93:78:49:0a:84:99:59:09:2e:3a:6d:
55:c3:fa:c4:09:24:ca:6c:1c:f3:c2:f0:18:f9:22:
98:2e:73:46:74:34:1d:19:56:c9:ae:84:b6:3e:f4:
f9:eb:5c:3c:5f:73:0f:bf:9a:7f:5e:2a:ac:b0:5d:
aa:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:B4:A2:F5:0D:57:07:34:A3:A6:B6:88:BC:E2:20:D4:A0:25:15:6E
X509v3 Authority Key Identifier:
keyid:DF:D8:64:1E:32:8A:A5:D1:9C:96:0D:48:91:CF:86:77:CE:12:89:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39hkHjKKpdGclg1Ikc-Gd84Siec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:c7:69:cf:f7:b5:ba:30:21:57:c5:b3:25:e3:75:ca:47:df:
7e:fd:70:80:e4:83:2c:0f:f0:22:28:3d:ee:36:7e:bb:0d:09:
83:5f:bd:b1:f0:02:72:42:0e:d4:32:95:7d:3b:80:d5:8a:c9:
9f:d9:3e:92:b0:25:35:7d:78:0b:58:ba:45:06:b6:b4:72:19:
14:02:f7:d7:e6:76:92:b0:fe:9f:e5:06:b1:00:ce:87:3b:86:
77:a6:d3:15:87:6c:99:9f:fc:4d:d4:3f:00:ee:df:ed:52:ca:
76:c4:55:61:44:9c:71:07:4d:a4:84:28:89:24:6d:a3:8f:9b:
39:40:46:05:11:96:1c:dc:ce:da:2b:d2:aa:59:5a:2c:21:c8:
91:a8:a0:59:25:bc:ec:9a:cd:14:ad:bb:b5:a7:1c:71:ee:f0:
21:c6:78:5e:b8:a3:64:51:fd:70:b5:02:64:b6:d6:78:f8:f4:
1b:77:61:69:f6:ee:53:36:21:29:93:2f:eb:57:c2:8c:55:87:
77:88:65:ab:a6:14:44:53:38:6f:af:33:89:5d:02:be:c2:37:
d5:7c:41:f9:af:7b:35:e9:7e:89:63:1d:b0:b2:f6:87:e8:e9:
a8:1d:2b:80:cc:6a:19:10:20:be:c2:11:cb:0e:05:1f:d8:fd:
e0:d2:8d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:29:00 2026 by rpki-client