Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft
File: R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft (raw, json)
Hash identifier: SRJ4CFHe+b4O7OLhat1GQ6G9mOT34y26NhneL3wjQAI=
Subject key identifier: C5:ED:3B:B7:04:CB:F4:F8:6D:EE:E4:4B:5A:74:C1:73:2F:F8:94:BB
Authority key identifier: 47:7F:4B:6E:C4:34:71:57:C4:D1:3E:F0:E7:AB:E1:29:0A:0B:F5:7C
Certificate issuer: /CN=477f4b6ec4347157c4d13ef0e7abe1290a0bf57c
Certificate serial: 019D999964C036004FB39671A6148EE3EA3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R39LbsQ0cVfE0T7w56vhKQoL9Xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft
Manifest number: 08C9
Signing time: Fri 17 Apr 2026 04:00:59 +0000
Manifest this update: Fri 17 Apr 2026 04:00:59 +0000
Manifest next update: Sat 18 Apr 2026 04:00:59 +0000
Files and hashes: 1: R39LbsQ0cVfE0T7w56vhKQoL9Xw.crl (hash: XHS3O26H5sIOCphP4KwG0+BK7HEoUqwss51Qic8EslY=)
2: WTosev28vey7PdFKL1WZrUA91xA.roa (hash: ekI8w6gEsIIlqKjdpz2Fpya3mgwzySEILZV+ipAS2Wc=)
3: oRnNr1FlB4M-Ncw9fTwXwhAU40Q.roa (hash: y4K7So4r58lf5Yn7iRGJ9lrvo2ssl9GpvWxcRF0or7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/R39LbsQ0cVfE0T7w56vhKQoL9Xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:64:c0:36:00:4f:b3:96:71:a6:14:8e:e3:ea:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=477f4b6ec4347157c4d13ef0e7abe1290a0bf57c
Validity
Not Before: Apr 17 04:00:59 2026 GMT
Not After : Apr 18 04:00:59 2026 GMT
Subject: CN=c5ed3bb704cbf4f86deee44b5a74c1732ff894bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a4:47:5b:19:a6:1c:b8:6a:4c:55:31:71:c8:
f8:5c:f2:15:49:a0:30:df:79:98:c1:5f:f5:e4:55:
e7:8f:47:62:cd:c8:a2:8f:54:f3:ed:0d:1f:54:f6:
53:26:4f:76:b3:51:c7:89:02:24:3c:de:be:ee:b3:
22:06:66:b3:1b:a5:d8:07:d9:0a:90:9d:66:32:ae:
c4:d3:5b:30:3c:df:95:2b:de:1a:b1:f5:b4:3c:29:
36:b0:48:93:d8:4d:e2:94:dd:13:98:04:c7:fc:ec:
e8:c7:03:03:f8:67:ec:e7:26:20:b5:02:b2:9b:ca:
d6:3f:45:92:8f:3e:fb:11:9d:f2:e8:01:55:fd:1a:
00:d4:f0:02:ac:5e:bd:03:0d:74:f9:16:ef:ff:59:
51:a9:ee:6b:00:74:b1:09:9c:19:a5:44:d2:2d:c3:
cd:11:f6:51:75:4a:90:c4:cc:98:df:7c:3c:61:ce:
c8:a2:f1:51:90:48:7e:0d:bf:a8:c1:fd:75:fb:3b:
7d:f4:e9:5c:e9:8e:b6:2c:28:9d:3d:fc:34:5c:c3:
e1:4b:b8:6e:97:ac:a8:aa:f2:77:95:cb:b5:e9:3d:
3d:ba:ae:39:bc:bb:db:5a:55:f5:22:1f:dc:0d:54:
79:1a:98:4b:3c:c8:95:81:48:03:13:ac:96:8c:22:
62:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:ED:3B:B7:04:CB:F4:F8:6D:EE:E4:4B:5A:74:C1:73:2F:F8:94:BB
X509v3 Authority Key Identifier:
keyid:47:7F:4B:6E:C4:34:71:57:C4:D1:3E:F0:E7:AB:E1:29:0A:0B:F5:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R39LbsQ0cVfE0T7w56vhKQoL9Xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:9a:1e:c6:5f:41:ff:61:38:97:96:11:69:0b:ee:94:dd:4d:
b1:a8:36:cd:37:ec:ed:a2:71:fe:05:16:b3:a8:0d:17:dd:90:
db:cd:53:a3:e8:a0:89:77:9f:c3:56:35:b7:3f:d1:70:32:74:
74:3f:d1:a3:43:e0:07:fe:00:a3:bc:79:db:39:91:b9:42:fb:
b1:a6:1b:e8:bc:b4:9f:7a:30:8c:7d:a7:8a:8f:d3:f0:15:94:
cf:67:49:0c:3b:85:32:94:e0:b7:dd:33:ba:04:11:79:70:1c:
02:4e:db:55:f5:8b:5c:7b:26:13:4b:f1:83:11:34:78:16:75:
ca:2a:e6:44:88:e0:ee:03:55:95:ad:50:77:31:67:a4:50:f7:
15:9f:bf:4a:bf:fb:bb:40:f7:07:31:22:ba:83:f9:6b:fb:76:
a8:14:32:0d:bd:6d:df:3d:09:12:59:0f:3b:ab:49:f9:cd:56:
0f:bf:65:f7:ef:d9:fa:1d:f2:ff:a4:77:c1:84:83:d8:2e:0d:
2a:8b:b5:d6:61:b1:06:88:fc:10:5d:f1:99:c1:b6:5c:9c:d1:
f0:83:6b:9b:44:3a:0b:7d:38:49:92:7e:f8:d1:24:8c:3e:c2:
37:d4:cc:8e:49:ab:fe:00:d8:86:d4:d5:bb:02:b0:6c:d2:e0:
c1:e8:f7:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZmWTANgBPs5ZxphSO4+o9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3N2Y0YjZlYzQzNDcxNTdjNGQxM2VmMGU3YWJlMTI5MGEw
YmY1N2MwHhcNMjYwNDE3MDQwMDU5WhcNMjYwNDE4MDQwMDU5WjAzMTEwLwYDVQQD
EyhjNWVkM2JiNzA0Y2JmNGY4NmRlZWU0NGI1YTc0YzE3MzJmZjg5NGJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6RHWxmmHLhqTFUxccj4XPIVSaAw
33mYwV/15FXnj0dizciij1Tz7Q0fVPZTJk92s1HHiQIkPN6+7rMiBmazG6XYB9kK
kJ1mMq7E01swPN+VK94asfW0PCk2sEiT2E3ilN0TmATH/OzoxwMD+Gfs5yYgtQKy
m8rWP0WSjz77EZ3y6AFV/RoA1PACrF69Aw10+Rbv/1lRqe5rAHSxCZwZpUTSLcPN
EfZRdUqQxMyY33w8Yc7IovFRkEh+Db+owf11+zt99Olc6Y62LCidPfw0XMPhS7hu
l6yoqvJ3lcu16T09uq45vLvbWlX1Ih/cDVR5GphLPMiVgUgDE6yWjCJiEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMXtO7cEy/T4be7kS1p0wXMv+JS7MB8GA1UdIwQY
MBaAFEd/S27ENHFXxNE+8Oer4SkKC/V8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjM5TGJzUTBjVmZFMFQ3dzU2dmhLUW9MOVh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zOTNlMTYtODk4ZS00NWQ4LTlkNzIt
ZDhiZDI1MGI2NGY5LzEvUjM5TGJzUTBjVmZFMFQ3dzU2dmhLUW9MOVh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8zOTNlMTYtODk4ZS00NWQ4LTlkNzItZDhiZDI1MGI2NGY5
LzEvUjM5TGJzUTBjVmZFMFQ3dzU2dmhLUW9MOVh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhJoexl9B
/2E4l5YRaQvulN1Nsag2zTfs7aJx/gUWs6gNF92Q281To+igiXefw1Y1tz/RcDJ0
dD/Ro0PgB/4Ao7x52zmRuUL7saYb6Ly0n3owjH2nio/T8BWUz2dJDDuFMpTgt90z
ugQReXAcAk7bVfWLXHsmE0vxgxE0eBZ1yirmRIjg7gNVla1QdzFnpFD3FZ+/Sr/7
u0D3BzEiuoP5a/t2qBQyDb1t3z0JElkPO6tJ+c1WD79l9+/Z+h3y/6R3wYSD2C4N
Kou11mGxBoj8EF3xmcG2XJzR8INrm0Q6C304SZJ++NEkjD7CN9TMjkmr/gDYhtTV
uwKwbNLgwej3EQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:00:53 2026 by rpki-client