Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft
File: R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft (raw, json)
Hash identifier: lh1vFfnB+zEc/niF5qBF6zzGSehrSMpVSL2W/8GnZNU=
Subject key identifier: B8:1C:45:4E:3E:E5:44:30:4E:4B:F7:84:36:9B:B5:14:4C:94:6A:A0
Authority key identifier: 47:7F:4B:6E:C4:34:71:57:C4:D1:3E:F0:E7:AB:E1:29:0A:0B:F5:7C
Certificate issuer: /CN=477f4b6ec4347157c4d13ef0e7abe1290a0bf57c
Certificate serial: 019CAC0FD9D1A56A435878E0B4E73FA05284
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R39LbsQ0cVfE0T7w56vhKQoL9Xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft
Manifest number: 084E
Signing time: Mon 02 Mar 2026 01:00:45 +0000
Manifest this update: Mon 02 Mar 2026 01:00:45 +0000
Manifest next update: Tue 03 Mar 2026 01:00:45 +0000
Files and hashes: 1: R39LbsQ0cVfE0T7w56vhKQoL9Xw.crl (hash: r4Q3vNUeMvpqnYH3ZYYtcH8uIdVK9ph9w3FLJn2AD/8=)
2: WTosev28vey7PdFKL1WZrUA91xA.roa (hash: ekI8w6gEsIIlqKjdpz2Fpya3mgwzySEILZV+ipAS2Wc=)
3: oRnNr1FlB4M-Ncw9fTwXwhAU40Q.roa (hash: y4K7So4r58lf5Yn7iRGJ9lrvo2ssl9GpvWxcRF0or7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/R39LbsQ0cVfE0T7w56vhKQoL9Xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:d9:d1:a5:6a:43:58:78:e0:b4:e7:3f:a0:52:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=477f4b6ec4347157c4d13ef0e7abe1290a0bf57c
Validity
Not Before: Mar 2 01:00:45 2026 GMT
Not After : Mar 3 01:00:45 2026 GMT
Subject: CN=b81c454e3ee544304e4bf784369bb5144c946aa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7f:b6:c5:6f:d6:e9:69:e0:2c:ed:9d:c5:3c:
dc:5a:4b:08:74:fe:23:5d:6c:0a:a2:10:80:39:4d:
02:d3:ea:f4:eb:83:d1:9c:52:2d:f6:96:5b:53:9c:
a6:75:67:08:77:8c:54:b9:2e:5a:b2:a4:8c:fa:b2:
f2:e0:c5:13:c3:ad:af:09:b3:2e:56:83:1a:c0:23:
d3:83:96:94:0b:42:91:97:72:1b:f2:9d:55:f8:0c:
84:6f:72:0c:1d:28:bd:e0:ed:a2:da:16:a8:d4:20:
80:0a:4d:39:f1:5b:d1:91:95:94:c0:1f:6f:33:e6:
ac:43:8a:5d:d3:75:ad:d9:48:4d:81:08:58:d1:9d:
53:95:14:0e:51:e3:a0:41:95:c7:62:d8:cb:6c:9c:
4f:9f:b6:ea:13:11:25:40:ad:68:83:8d:9e:41:95:
e7:d8:6a:ec:8b:7d:fc:7f:18:b2:11:20:1b:90:35:
0a:17:00:17:86:75:99:db:45:dc:39:6a:0a:5b:37:
32:fb:7f:4c:d6:57:0e:7a:0e:47:1f:f3:33:c0:75:
01:7a:fd:e6:da:b5:ac:ed:aa:e2:7b:f9:77:1d:d3:
76:e9:21:ff:9a:74:1e:20:4f:99:30:44:fa:4b:83:
aa:a3:cc:99:fb:e2:bf:36:87:c2:68:b7:5d:e1:30:
cf:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:1C:45:4E:3E:E5:44:30:4E:4B:F7:84:36:9B:B5:14:4C:94:6A:A0
X509v3 Authority Key Identifier:
keyid:47:7F:4B:6E:C4:34:71:57:C4:D1:3E:F0:E7:AB:E1:29:0A:0B:F5:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R39LbsQ0cVfE0T7w56vhKQoL9Xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:d6:b8:c9:00:23:10:d7:45:c5:47:84:41:df:d1:a0:9c:35:
95:c8:cc:b6:43:61:34:53:f1:db:51:fa:fb:0e:c0:15:00:71:
4c:42:6a:9a:0b:72:fd:d8:80:4f:e9:07:e0:e2:2a:80:e9:48:
7a:33:b0:34:d0:b0:5a:02:9a:42:67:3e:1f:5c:3d:b1:01:aa:
18:d1:be:64:c6:93:bd:e2:2e:4c:e4:98:bd:8b:ed:66:3e:5b:
2f:df:ee:28:7c:83:4e:70:c0:aa:8e:7d:e7:7d:b2:45:4e:e5:
11:c8:7f:95:59:19:1f:c9:03:55:43:52:d8:c6:48:85:8d:9d:
57:64:15:d0:53:51:eb:2e:90:34:f7:cf:38:9b:c8:d6:f1:e6:
73:0d:6c:02:f5:7e:7d:2e:4b:4b:35:c7:58:63:37:be:8c:d9:
e5:9e:ed:23:47:e0:87:98:28:fb:67:42:0e:38:55:f8:b6:c7:
7a:b1:98:9a:bb:6e:f2:91:bb:36:9b:2f:e3:1a:e5:c0:43:fc:
39:e9:e9:67:34:44:46:8e:4a:d8:a5:44:b6:47:81:31:50:5d:
34:7b:b3:4f:da:70:ea:77:a5:b2:fa:ac:79:13:6d:e8:5d:70:
73:fd:e9:c1:c5:e5:42:37:b8:eb:14:83:ff:fa:0f:5a:a6:4f:
79:9f:f9:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:36:13 2026 by rpki-client