Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.mft
File: 39hkHjKKpdGclg1Ikc-Gd84Siec.mft (raw, json)
Hash identifier: gdUYLsIAVLN9iVyG94n14lCMU7xqXzzsAV3pNEvnaaY=
Subject key identifier: A6:BC:F7:2A:62:F6:8D:8F:3F:9D:07:F6:C7:F8:14:B2:FF:8D:89:42
Authority key identifier: DF:D8:64:1E:32:8A:A5:D1:9C:96:0D:48:91:CF:86:77:CE:12:89:E7
Certificate issuer: /CN=dfd8641e328aa5d19c960d4891cf8677ce1289e7
Certificate serial: 019EC1B6E4EBCA0B369D0E4A9C279400BE62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39hkHjKKpdGclg1Ikc-Gd84Siec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.mft
Manifest number: 0260
Signing time: Sat 13 Jun 2026 16:00:49 +0000
Manifest this update: Sat 13 Jun 2026 16:00:49 +0000
Manifest next update: Sun 14 Jun 2026 16:00:49 +0000
Files and hashes: 1: 2qvSkbHTsb98tl7LYwqPesWPH0g.roa (hash: Y4264CBO/wnBYQA3v/iM8WdJyQ6sBIxNEIMB+ic9wcM=)
2: 39hkHjKKpdGclg1Ikc-Gd84Siec.crl (hash: KR0zEi0/1VEQ2rRFh+Gy0kS3E7ZEjltDVWDbNQ4N6cE=)
3: eOukcSE4vv2_C-0yT3bFz9tAp8Q.roa (hash: ni8P4L+TMFDjolGG4Odq13TtGL18OXau4ZR/dJyb4Yk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.mft
rsync://rpki.ripe.net/repository/DEFAULT/39hkHjKKpdGclg1Ikc-Gd84Siec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:b6:e4:eb:ca:0b:36:9d:0e:4a:9c:27:94:00:be:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd8641e328aa5d19c960d4891cf8677ce1289e7
Validity
Not Before: Jun 13 16:00:49 2026 GMT
Not After : Jun 14 16:00:49 2026 GMT
Subject: CN=a6bcf72a62f68d8f3f9d07f6c7f814b2ff8d8942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f9:5e:4b:2d:eb:51:aa:5b:12:13:25:40:0f:
98:45:79:8f:91:b8:34:56:86:58:7c:9a:8b:ff:b6:
7d:8a:b7:98:aa:5a:dd:5a:27:7d:41:4b:27:4a:3b:
1b:80:36:89:3d:ff:df:33:b1:be:2d:ef:c1:6f:08:
9e:4a:f8:62:49:3f:64:5f:f8:42:46:0d:e9:2a:1d:
dd:04:2e:35:9e:65:49:ab:3a:b8:ee:65:89:ef:1b:
17:9d:2e:61:49:60:d4:a9:2f:8b:78:6c:7e:9a:53:
51:22:85:68:76:c6:a6:d3:bc:3d:4f:11:cb:d9:73:
3b:e5:71:7c:28:d4:8b:9e:3e:45:e4:a0:e2:e2:68:
2c:b3:bb:de:59:bc:ca:95:f1:5f:54:55:aa:7a:4a:
7d:d1:a5:0e:6f:17:f3:83:17:ff:7a:c8:c1:1c:f3:
d6:0a:fd:50:93:43:de:9d:c7:61:34:c9:7d:c2:d0:
48:bd:9a:5a:df:c1:d9:be:18:b9:fd:df:c4:b5:7b:
b6:e5:86:fe:62:ff:d2:d7:d7:40:d8:76:dd:3f:e6:
93:e2:df:0d:ee:29:b1:45:5c:66:d6:7b:8c:89:28:
3f:18:cb:71:be:82:92:e0:07:6f:e6:9d:3c:2a:f4:
b4:a3:00:f1:46:14:ce:17:c7:58:19:76:b6:aa:e2:
2f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:BC:F7:2A:62:F6:8D:8F:3F:9D:07:F6:C7:F8:14:B2:FF:8D:89:42
X509v3 Authority Key Identifier:
keyid:DF:D8:64:1E:32:8A:A5:D1:9C:96:0D:48:91:CF:86:77:CE:12:89:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39hkHjKKpdGclg1Ikc-Gd84Siec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:20:3d:dc:0f:0f:b2:50:ed:c2:03:06:30:db:6f:7b:c5:b8:
d4:5b:75:7f:4c:dd:26:58:ba:b0:21:ef:60:83:b7:4e:1b:e9:
1a:92:99:e7:1b:51:bd:ef:7d:1d:3c:8d:6a:e3:5f:cc:14:a6:
28:3c:4c:03:c3:60:39:1c:f6:3e:6d:0e:11:a0:91:58:54:d7:
e3:4b:56:af:c7:8c:cf:20:9e:fd:ab:15:fb:30:cb:17:76:f0:
10:ff:66:4b:74:0c:2a:bb:fe:79:66:74:51:77:4d:6a:36:ee:
e1:47:c7:af:10:5e:fc:0a:da:7c:21:ed:39:8e:61:d5:f1:e0:
02:e2:b5:2a:17:9b:d6:3d:d3:4f:ed:ca:33:1f:a7:56:dd:5f:
35:72:66:e9:e2:ff:4d:e3:c9:db:f0:d4:2c:68:23:ef:82:3c:
74:cc:29:e3:01:b8:c4:a6:29:db:42:92:3b:87:97:ef:7a:27:
da:a4:3f:89:66:9d:0c:01:eb:be:94:c8:7a:01:10:fe:6c:a5:
6b:d4:67:38:aa:38:90:38:4f:d4:52:19:26:8f:fa:05:fd:c5:
b9:bb:f1:64:7e:5a:0a:a4:f1:a1:db:35:d5:1a:10:91:4a:14:
09:95:6a:8e:6b:ef:15:71:3a:05:ad:fb:f5:09:15:dd:00:b8:
d8:45:d2:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7BtuTrygs2nQ5KnCeUAL5iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmZDg2NDFlMzI4YWE1ZDE5Yzk2MGQ0ODkxY2Y4Njc3Y2Ux
Mjg5ZTcwHhcNMjYwNjEzMTYwMDQ5WhcNMjYwNjE0MTYwMDQ5WjAzMTEwLwYDVQQD
EyhhNmJjZjcyYTYyZjY4ZDhmM2Y5ZDA3ZjZjN2Y4MTRiMmZmOGQ4OTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/leSy3rUapbEhMlQA+YRXmPkbg0
VoZYfJqL/7Z9ireYqlrdWid9QUsnSjsbgDaJPf/fM7G+Le/BbwieSvhiST9kX/hC
Rg3pKh3dBC41nmVJqzq47mWJ7xsXnS5hSWDUqS+LeGx+mlNRIoVodsam07w9TxHL
2XM75XF8KNSLnj5F5KDi4mgss7veWbzKlfFfVFWqekp90aUObxfzgxf/esjBHPPW
Cv1Qk0PencdhNMl9wtBIvZpa38HZvhi5/d/EtXu25Yb+Yv/S19dA2HbdP+aT4t8N
7imxRVxm1nuMiSg/GMtxvoKS4Adv5p08KvS0owDxRhTOF8dYGXa2quIvNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKa89ypi9o2PP50H9sf4FLL/jYlCMB8GA1UdIwQY
MBaAFN/YZB4yiqXRnJYNSJHPhnfOEonnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzloa0hqS0twZEdjbGcxSWtjLUdkODRTaWVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8xZTNlYjQtNWRjZi00N2Q5LWJjNDYt
ZTNmYzUzNzkxNDkwLzEvMzloa0hqS0twZEdjbGcxSWtjLUdkODRTaWVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi8xZTNlYjQtNWRjZi00N2Q5LWJjNDYtZTNmYzUzNzkxNDkw
LzEvMzloa0hqS0twZEdjbGcxSWtjLUdkODRTaWVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYSA93A8P
slDtwgMGMNtve8W41Ft1f0zdJli6sCHvYIO3ThvpGpKZ5xtRve99HTyNauNfzBSm
KDxMA8NgORz2Pm0OEaCRWFTX40tWr8eMzyCe/asV+zDLF3bwEP9mS3QMKrv+eWZ0
UXdNajbu4UfHrxBe/ArafCHtOY5h1fHgAuK1Kheb1j3TT+3KMx+nVt1fNXJm6eL/
TePJ2/DULGgj74I8dMwp4wG4xKYp20KSO4eX73on2qQ/iWadDAHrvpTIegEQ/myl
a9RnOKo4kDhP1FIZJo/6Bf3FubvxZH5aCqTxods11RoQkUoUCZVqjmvvFXE6Ba37
9QkV3QC42EXS3Q==
-----END CERTIFICATE-----
Generated at Sat Jun 13 18:33:19 2026 by rpki-client