Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.mft
File: 39hkHjKKpdGclg1Ikc-Gd84Siec.mft (raw, json)
Hash identifier: 3HfEWTi3bRLG16t1bEMUdrSJUyaObdRw8UeWzvUVZRE=
Subject key identifier: CD:AF:36:00:89:9C:B1:7D:67:0B:A0:CA:04:8E:E5:DC:09:AD:27:30
Authority key identifier: DF:D8:64:1E:32:8A:A5:D1:9C:96:0D:48:91:CF:86:77:CE:12:89:E7
Certificate issuer: /CN=dfd8641e328aa5d19c960d4891cf8677ce1289e7
Certificate serial: 019EBFC867731270DDBB9E9F197FB20675AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39hkHjKKpdGclg1Ikc-Gd84Siec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.mft
Manifest number: 025F
Signing time: Sat 13 Jun 2026 07:00:42 +0000
Manifest this update: Sat 13 Jun 2026 07:00:42 +0000
Manifest next update: Sun 14 Jun 2026 07:00:42 +0000
Files and hashes: 1: 2qvSkbHTsb98tl7LYwqPesWPH0g.roa (hash: Y4264CBO/wnBYQA3v/iM8WdJyQ6sBIxNEIMB+ic9wcM=)
2: 39hkHjKKpdGclg1Ikc-Gd84Siec.crl (hash: ZHp2yzo6KjMa/TJHSFofTR4xuKvg5a+2BUDU36ddplU=)
3: eOukcSE4vv2_C-0yT3bFz9tAp8Q.roa (hash: ni8P4L+TMFDjolGG4Odq13TtGL18OXau4ZR/dJyb4Yk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.mft
rsync://rpki.ripe.net/repository/DEFAULT/39hkHjKKpdGclg1Ikc-Gd84Siec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c8:67:73:12:70:dd:bb:9e:9f:19:7f:b2:06:75:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd8641e328aa5d19c960d4891cf8677ce1289e7
Validity
Not Before: Jun 13 07:00:42 2026 GMT
Not After : Jun 14 07:00:42 2026 GMT
Subject: CN=cdaf3600899cb17d670ba0ca048ee5dc09ad2730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5f:76:5c:08:4f:7b:33:4d:57:c1:b2:5e:b3:
73:7d:60:7d:cf:e6:8e:e6:4b:34:6e:5e:4a:a9:56:
50:aa:16:66:8c:8a:b8:6f:7a:7a:52:70:59:1d:a1:
a0:24:02:12:26:01:06:21:ff:e5:bb:5d:13:24:59:
c5:09:e1:47:d5:4c:69:7a:ba:ed:7d:8e:40:6c:40:
6e:35:03:05:0a:5f:13:98:e1:32:2a:85:21:dd:ac:
fe:74:b4:22:5a:75:3a:67:ac:d7:ad:81:e7:0a:67:
ff:06:37:a4:b1:c5:e3:d9:7e:44:4a:12:18:de:bf:
84:1c:c3:6a:0b:af:65:b0:55:6d:b5:df:3d:3b:f5:
b1:66:50:93:bb:de:60:3e:71:a6:4b:8f:16:d0:42:
d1:35:ab:b1:82:b7:e1:b4:ab:b2:7c:d3:91:6d:28:
a5:23:40:30:ee:6c:8c:46:96:52:42:be:e6:9a:7e:
11:93:6c:03:56:45:59:26:39:70:3b:70:d5:64:7e:
ae:5a:f3:be:f6:11:b3:7b:a9:2d:0f:4c:8e:96:4f:
eb:e8:47:44:81:e6:7c:a4:ec:d4:e0:e8:c2:ab:56:
1c:50:dc:77:ba:5f:51:b1:42:aa:5c:c1:03:98:0c:
53:9a:fb:a8:bf:c9:10:91:f5:8e:2c:35:86:7a:ed:
3f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:AF:36:00:89:9C:B1:7D:67:0B:A0:CA:04:8E:E5:DC:09:AD:27:30
X509v3 Authority Key Identifier:
keyid:DF:D8:64:1E:32:8A:A5:D1:9C:96:0D:48:91:CF:86:77:CE:12:89:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39hkHjKKpdGclg1Ikc-Gd84Siec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:ce:f2:73:a1:08:5d:23:15:48:1c:d8:95:a0:d7:24:16:34:
10:55:3f:93:4f:2c:03:26:27:45:98:39:1b:ee:1c:fd:0e:1b:
2b:76:aa:16:78:56:77:cd:95:1f:36:78:c0:7a:05:05:6b:98:
34:e0:1e:47:6f:74:0f:6b:b3:72:dc:e2:58:80:87:ed:54:53:
05:7d:93:b2:25:46:40:c2:8c:75:51:66:28:bc:6f:1e:7d:a9:
13:7d:09:69:43:d4:3c:6f:6e:a0:29:27:3b:36:d2:fa:4a:93:
a9:e2:26:ed:d9:c4:07:60:44:76:7c:4f:eb:78:8e:b6:38:2d:
49:36:f7:8e:a9:3b:f8:dd:36:bd:fd:b9:08:88:d2:35:b5:ff:
52:8a:4e:97:61:64:01:15:1c:f7:ce:e0:1c:8e:c1:d4:42:0e:
60:af:23:35:8c:11:b6:25:87:a5:b2:e7:22:89:fa:55:61:28:
0b:71:ec:9f:93:96:92:c0:f0:68:f8:a6:9d:6c:6a:71:a1:49:
9f:29:62:cf:ff:03:65:8b:66:40:67:53:85:af:15:60:ad:c4:
64:37:7f:70:15:26:be:94:4d:6b:29:41:51:69:1a:d3:4b:18:
8f:4d:ee:01:fa:0b:4c:51:06:7a:c7:00:74:ba:0c:41:3a:e1:
46:34:65:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:48:29 2026 by rpki-client