Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft
File: R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft (raw, json)
Hash identifier: CqCPvPbQhVyCRrOiPyVJ1fw6KqFJfrGx3QB7ZqfWaxI=
Subject key identifier: F2:B0:13:53:E2:5C:52:D1:06:08:24:EC:4F:87:B4:41:E8:FA:B1:7B
Authority key identifier: 47:7F:4B:6E:C4:34:71:57:C4:D1:3E:F0:E7:AB:E1:29:0A:0B:F5:7C
Certificate issuer: /CN=477f4b6ec4347157c4d13ef0e7abe1290a0bf57c
Certificate serial: 01A0DBE0494B5D3BD22C6D24C9C384C49F26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R39LbsQ0cVfE0T7w56vhKQoL9Xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft
Manifest number: 0A79
Signing time: Sat 26 Sep 2026 04:01:44 +0000
Manifest this update: Sat 26 Sep 2026 04:01:44 +0000
Manifest next update: Sun 27 Sep 2026 04:01:44 +0000
Files and hashes: 1: R39LbsQ0cVfE0T7w56vhKQoL9Xw.crl (hash: vz0wpWZPPDlmFO1pW0xhDyw4FwikvcRHBP0Rzv9knBE=)
2: WTosev28vey7PdFKL1WZrUA91xA.roa (hash: ekI8w6gEsIIlqKjdpz2Fpya3mgwzySEILZV+ipAS2Wc=)
3: oRnNr1FlB4M-Ncw9fTwXwhAU40Q.roa (hash: y4K7So4r58lf5Yn7iRGJ9lrvo2ssl9GpvWxcRF0or7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/R39LbsQ0cVfE0T7w56vhKQoL9Xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:e0:49:4b:5d:3b:d2:2c:6d:24:c9:c3:84:c4:9f:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=477f4b6ec4347157c4d13ef0e7abe1290a0bf57c
Validity
Not Before: Sep 26 04:01:44 2026 GMT
Not After : Sep 27 04:01:44 2026 GMT
Subject: CN=f2b01353e25c52d1060824ec4f87b441e8fab17b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d7:72:02:b5:64:54:00:f2:4e:07:58:ba:f9:
89:83:08:1b:7f:17:6c:80:a1:ff:3d:04:51:0a:1a:
11:57:82:ee:01:de:73:9f:ee:10:8c:65:46:87:2e:
f0:66:fa:4a:11:58:1e:8e:ed:a5:e2:90:27:b6:ab:
75:c9:86:c4:d3:4f:e1:b2:4d:0c:7c:82:a6:f4:75:
45:b8:2e:1c:e0:39:cd:be:a2:0e:79:3b:ea:f8:6c:
7e:46:25:f9:72:05:57:6a:c7:4e:16:31:ce:da:bc:
ac:00:f0:d8:40:d5:c8:b3:1e:75:1a:2d:12:13:93:
8b:42:22:d5:53:10:74:c6:d5:1f:71:88:3a:26:fe:
3f:28:2d:17:b6:b9:cd:2f:6f:f4:65:76:84:98:20:
6f:fa:f0:10:09:55:79:b3:63:4f:bd:1b:d6:0b:e5:
dc:25:87:17:39:71:2b:7f:46:76:f7:9a:ff:f9:53:
7a:b8:b9:54:2e:f8:37:e2:d2:c9:94:f1:34:9c:75:
a1:b0:f1:48:63:bc:f0:ec:a9:f8:be:e0:7a:17:cc:
a3:69:0e:e4:1b:97:23:55:3b:00:89:c6:dc:5e:51:
d7:d7:95:30:e0:6b:d1:52:6e:42:35:27:69:69:6a:
16:f8:3b:94:ed:7f:f4:5a:c3:5d:f2:4f:69:4e:f6:
60:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:B0:13:53:E2:5C:52:D1:06:08:24:EC:4F:87:B4:41:E8:FA:B1:7B
X509v3 Authority Key Identifier:
keyid:47:7F:4B:6E:C4:34:71:57:C4:D1:3E:F0:E7:AB:E1:29:0A:0B:F5:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R39LbsQ0cVfE0T7w56vhKQoL9Xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:9f:cf:09:1f:dc:91:ce:1d:fa:ba:1d:26:21:14:83:57:1d:
3e:c7:30:51:b5:67:4c:64:1e:ac:df:78:b8:dc:cc:f7:3f:cb:
82:e7:0e:48:fa:b9:91:64:9e:bc:52:99:b0:14:c0:30:7c:1c:
2f:d5:a2:f5:df:62:f4:ad:14:97:b6:c7:94:ca:a3:56:9a:d7:
49:f3:d1:8e:42:1c:05:61:2c:d2:8c:92:8d:d8:4d:55:75:5d:
1f:ef:11:8b:52:56:1e:77:a1:3a:cb:90:66:f4:11:fb:77:cd:
d9:7d:2d:a3:50:db:1f:34:86:2d:ef:d1:e3:4e:1c:76:70:5c:
cf:35:97:2b:ca:59:64:99:44:2b:6a:b1:8d:f9:de:34:ba:0b:
e8:c7:58:2d:b7:07:a1:94:33:ee:84:b2:a2:9d:53:0f:00:4f:
6a:d4:b3:34:ef:e5:99:4b:83:df:2e:fc:be:6f:e3:09:bf:56:
3a:bd:1b:b0:2e:f0:a4:05:43:87:8c:34:d5:c0:f4:91:f8:15:
3b:0b:3d:e6:b7:5f:64:95:ef:7d:d1:7c:a5:6d:6c:39:51:f3:
46:43:c7:d1:59:53:65:70:db:34:2c:bf:3e:dc:a5:cb:7e:16:
ad:5c:13:8e:78:28:7e:31:a3:75:38:96:c2:91:2c:71:d6:c6:
44:c7:a3:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDb4ElLXTvSLG0kycOExJ8mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3N2Y0YjZlYzQzNDcxNTdjNGQxM2VmMGU3YWJlMTI5MGEw
YmY1N2MwHhcNMjYwOTI2MDQwMTQ0WhcNMjYwOTI3MDQwMTQ0WjAzMTEwLwYDVQQD
EyhmMmIwMTM1M2UyNWM1MmQxMDYwODI0ZWM0Zjg3YjQ0MWU4ZmFiMTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNdyArVkVADyTgdYuvmJgwgbfxds
gKH/PQRRChoRV4LuAd5zn+4QjGVGhy7wZvpKEVgeju2l4pAntqt1yYbE00/hsk0M
fIKm9HVFuC4c4DnNvqIOeTvq+Gx+RiX5cgVXasdOFjHO2rysAPDYQNXIsx51Gi0S
E5OLQiLVUxB0xtUfcYg6Jv4/KC0XtrnNL2/0ZXaEmCBv+vAQCVV5s2NPvRvWC+Xc
JYcXOXErf0Z295r/+VN6uLlULvg34tLJlPE0nHWhsPFIY7zw7Kn4vuB6F8yjaQ7k
G5cjVTsAicbcXlHX15Uw4GvRUm5CNSdpaWoW+DuU7X/0WsNd8k9pTvZgrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPKwE1PiXFLRBggk7E+HtEHo+rF7MB8GA1UdIwQY
MBaAFEd/S27ENHFXxNE+8Oer4SkKC/V8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjM5TGJzUTBjVmZFMFQ3dzU2dmhLUW9MOVh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zOTNlMTYtODk4ZS00NWQ4LTlkNzIt
ZDhiZDI1MGI2NGY5LzEvUjM5TGJzUTBjVmZFMFQ3dzU2dmhLUW9MOVh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8zOTNlMTYtODk4ZS00NWQ4LTlkNzItZDhiZDI1MGI2NGY5
LzEvUjM5TGJzUTBjVmZFMFQ3dzU2dmhLUW9MOVh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL5/PCR/c
kc4d+rodJiEUg1cdPscwUbVnTGQerN94uNzM9z/LgucOSPq5kWSevFKZsBTAMHwc
L9Wi9d9i9K0Ul7bHlMqjVprXSfPRjkIcBWEs0oySjdhNVXVdH+8Ri1JWHnehOsuQ
ZvQR+3fN2X0to1DbHzSGLe/R404cdnBczzWXK8pZZJlEK2qxjfneNLoL6MdYLbcH
oZQz7oSyop1TDwBPatSzNO/lmUuD3y78vm/jCb9WOr0bsC7wpAVDh4w01cD0kfgV
Ows95rdfZJXvfdF8pW1sOVHzRkPH0VlTZXDbNCy/Ptyly34WrVwTjngofjGjdTiW
wpEscdbGRMejOQ==
-----END CERTIFICATE-----
Generated at Sat Sep 26 12:22:09 2026 by rpki-client