Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.mft
File: 39hkHjKKpdGclg1Ikc-Gd84Siec.mft (raw, json)
Hash identifier: 3pFMKalBxwcIpf3DHedhioBkalppnghwMFrq5bCrKWo=
Subject key identifier: 5B:D2:5E:59:A1:92:A9:CE:F7:70:9A:72:ED:FF:5F:2D:31:0E:27:F3
Authority key identifier: DF:D8:64:1E:32:8A:A5:D1:9C:96:0D:48:91:CF:86:77:CE:12:89:E7
Certificate issuer: /CN=dfd8641e328aa5d19c960d4891cf8677ce1289e7
Certificate serial: 01A0CBFE83F58B6D782951B0656D1D09AEFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39hkHjKKpdGclg1Ikc-Gd84Siec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.mft
Manifest number: 036F
Signing time: Wed 23 Sep 2026 02:00:49 +0000
Manifest this update: Wed 23 Sep 2026 02:00:49 +0000
Manifest next update: Thu 24 Sep 2026 02:00:49 +0000
Files and hashes: 1: 2qvSkbHTsb98tl7LYwqPesWPH0g.roa (hash: Y4264CBO/wnBYQA3v/iM8WdJyQ6sBIxNEIMB+ic9wcM=)
2: 39hkHjKKpdGclg1Ikc-Gd84Siec.crl (hash: S5ZSy9/5+c3mOUazRY16gC58v/TCO/j9WdqlwII8WyQ=)
3: LPFoAB4sPBskTSmjN__uUCavKxw.roa (hash: ESBBS9bOaL8PT/NnpNwZWIjfHqj4VbeRzrLEqzVAw6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.mft
rsync://rpki.ripe.net/repository/DEFAULT/39hkHjKKpdGclg1Ikc-Gd84Siec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 02:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:fe:83:f5:8b:6d:78:29:51:b0:65:6d:1d:09:ae:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd8641e328aa5d19c960d4891cf8677ce1289e7
Validity
Not Before: Sep 23 02:00:49 2026 GMT
Not After : Sep 24 02:00:49 2026 GMT
Subject: CN=5bd25e59a192a9cef7709a72edff5f2d310e27f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:cb:be:f1:8e:af:f5:9c:ad:50:12:e1:21:f0:
f6:20:78:20:a2:12:90:4c:88:2a:a0:07:02:ee:77:
39:f3:23:5e:c5:f8:a8:1f:44:3e:41:52:19:af:da:
83:e7:67:c5:a8:b5:4f:3f:44:84:db:06:22:1b:62:
47:64:c9:cc:56:4b:ad:a4:10:f6:2b:84:ee:74:14:
1e:69:6d:6b:6b:33:63:9b:86:67:07:a6:3a:35:d6:
fa:89:bd:09:c9:28:45:73:59:87:0f:96:a0:67:27:
00:a9:aa:d8:06:19:52:19:e6:9e:df:e6:b5:2a:71:
2a:07:2b:bc:a9:f9:64:63:a5:ea:8a:fc:16:84:56:
08:07:2b:db:d1:91:44:ad:e7:c0:72:fc:e5:14:66:
22:ad:a9:12:c1:79:b1:26:52:a6:58:c1:ba:72:ce:
8d:90:69:6a:27:c5:ff:a3:3f:6e:88:74:7d:ec:de:
46:27:f1:cc:c0:a7:9f:c6:4d:b1:62:6e:be:48:d0:
73:93:19:bc:74:f4:00:b9:39:16:14:5b:e5:bb:8a:
68:d4:d1:f2:f4:63:a8:ca:10:76:00:61:63:64:54:
5b:e6:83:81:43:e1:d4:40:88:f2:de:3b:ee:b1:2a:
15:56:2b:59:88:6f:7c:8b:32:2b:9f:17:f2:e6:cd:
1f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:D2:5E:59:A1:92:A9:CE:F7:70:9A:72:ED:FF:5F:2D:31:0E:27:F3
X509v3 Authority Key Identifier:
keyid:DF:D8:64:1E:32:8A:A5:D1:9C:96:0D:48:91:CF:86:77:CE:12:89:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39hkHjKKpdGclg1Ikc-Gd84Siec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:7d:38:cf:e5:2a:8b:f0:e7:74:4e:95:ce:9b:d9:7d:83:11:
76:63:28:75:77:9d:08:03:2a:4b:6f:ad:a6:94:fa:b4:10:45:
d1:bb:3b:00:39:7a:c1:c3:37:2f:49:fb:18:1e:1c:27:94:42:
cd:3c:a2:a7:2d:9a:47:b5:28:24:26:22:6d:dd:c7:6d:be:cd:
19:4a:36:9b:e4:4f:ca:3d:e5:39:dd:ce:4e:1d:59:4e:6a:17:
b2:53:d7:ad:2d:44:6f:e6:b7:ae:07:e2:b5:55:5f:92:93:e8:
ae:d1:e5:be:53:9e:d4:63:87:56:dd:86:75:b6:3b:b0:46:34:
d7:57:ee:d1:5d:08:22:60:3d:57:cf:c7:dd:b4:bc:ab:e9:f3:
9b:bf:e4:8f:87:5a:e8:5e:0d:5e:4a:31:dd:ed:b7:a4:d0:84:
72:89:04:49:aa:00:9e:9a:df:0c:df:db:2f:a4:00:b6:0f:26:
c6:75:c7:a1:4e:f1:25:ff:61:d5:92:6c:3d:cc:8f:f1:bb:e9:
2e:64:d8:25:84:af:e5:01:88:8c:e5:64:16:01:e9:60:62:64:
99:b6:8c:aa:3c:16:82:a0:40:23:c8:5b:da:17:d2:99:8d:60:
5d:b3:63:6e:eb:85:4d:31:8d:f3:ec:65:d0:b5:d4:ba:c7:26:
5b:14:5a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:46:15 2026 by rpki-client