Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft
File: R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft (raw, json)
Hash identifier: PBd/hEGMu6LKUWtFABOFe6uFLHKnQ9zuYH4lpGhNOEQ=
Subject key identifier: 80:41:97:74:4C:A3:D9:B4:1B:78:D7:19:BD:59:BF:C6:09:19:93:29
Authority key identifier: 47:7F:4B:6E:C4:34:71:57:C4:D1:3E:F0:E7:AB:E1:29:0A:0B:F5:7C
Certificate issuer: /CN=477f4b6ec4347157c4d13ef0e7abe1290a0bf57c
Certificate serial: 019EC300CA14C0264BB2BB77DA449F4BBDF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R39LbsQ0cVfE0T7w56vhKQoL9Xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft
Manifest number: 0963
Signing time: Sat 13 Jun 2026 22:01:09 +0000
Manifest this update: Sat 13 Jun 2026 22:01:09 +0000
Manifest next update: Sun 14 Jun 2026 22:01:09 +0000
Files and hashes: 1: R39LbsQ0cVfE0T7w56vhKQoL9Xw.crl (hash: MDy2d1ZcjSM8o367SJ/LajMF21H1um7METBKgYT8dNk=)
2: WTosev28vey7PdFKL1WZrUA91xA.roa (hash: ekI8w6gEsIIlqKjdpz2Fpya3mgwzySEILZV+ipAS2Wc=)
3: oRnNr1FlB4M-Ncw9fTwXwhAU40Q.roa (hash: y4K7So4r58lf5Yn7iRGJ9lrvo2ssl9GpvWxcRF0or7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/R39LbsQ0cVfE0T7w56vhKQoL9Xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:00:ca:14:c0:26:4b:b2:bb:77:da:44:9f:4b:bd:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=477f4b6ec4347157c4d13ef0e7abe1290a0bf57c
Validity
Not Before: Jun 13 22:01:09 2026 GMT
Not After : Jun 14 22:01:09 2026 GMT
Subject: CN=804197744ca3d9b41b78d719bd59bfc609199329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7e:69:df:f3:89:20:fc:6d:70:10:5f:7f:fa:
3e:4f:ec:af:b1:72:b3:6b:fd:e9:2b:ab:0b:c5:1d:
36:f2:de:c9:fa:1d:11:94:65:67:56:75:ff:65:9b:
4d:81:96:d7:9b:e8:ff:d3:20:fd:49:cd:81:4c:56:
ac:ed:fb:ba:c8:54:16:e8:bf:ad:d1:af:f9:ed:b7:
b2:83:57:dd:a6:bb:35:f5:e1:ed:30:76:2a:51:cb:
4a:2f:a9:a2:3c:bc:d8:02:44:dd:29:dc:b5:5c:64:
1f:1a:32:48:41:e4:69:38:54:07:b2:dd:92:ba:fe:
e7:33:9e:0d:8d:b2:88:b1:24:2b:5c:8f:ba:b9:74:
12:1f:02:1a:b7:3b:6a:10:41:06:a0:db:f7:b7:1e:
5d:eb:ec:d2:3a:6e:79:a8:80:2b:91:72:a7:a4:22:
be:a1:0d:d9:22:05:75:3c:70:e2:65:c1:f5:bc:4b:
7e:68:0a:ff:24:aa:bb:f5:29:b0:44:b0:1b:65:77:
f0:5d:b5:cc:cc:eb:fb:bd:eb:8a:60:9f:5b:8d:fd:
27:d8:da:d5:df:d2:7d:d5:63:7e:5d:91:7d:fc:af:
25:7e:08:74:43:09:c0:c4:ec:23:06:54:42:c5:6e:
4e:c6:6b:c2:d1:19:61:f3:21:2e:49:7d:8d:b1:b6:
56:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:41:97:74:4C:A3:D9:B4:1B:78:D7:19:BD:59:BF:C6:09:19:93:29
X509v3 Authority Key Identifier:
keyid:47:7F:4B:6E:C4:34:71:57:C4:D1:3E:F0:E7:AB:E1:29:0A:0B:F5:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R39LbsQ0cVfE0T7w56vhKQoL9Xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:a3:84:c8:09:ce:5f:80:61:8b:72:42:c5:b1:aa:e5:a4:6c:
22:2f:a6:e0:34:62:79:fa:a5:44:67:2a:6c:98:4b:d2:eb:3d:
37:d3:d8:42:79:da:7f:b1:6d:d3:77:3a:eb:51:5d:1f:8c:95:
91:64:8d:c1:0f:83:c6:03:d1:59:a2:49:27:a7:20:47:4b:7e:
3d:f9:27:df:8e:e6:d0:9f:27:13:f8:63:14:62:f2:21:3a:84:
ba:ff:56:b5:4b:c0:5b:8b:0c:b3:fe:06:1a:69:98:a3:7f:a2:
df:6a:06:78:67:cc:26:67:ab:06:bf:ea:01:95:44:d1:2e:f6:
1c:f7:fa:27:c6:5a:3e:9e:29:0d:13:0f:d4:86:5b:b6:fa:52:
04:5e:58:3a:64:36:5e:df:23:e7:fa:1f:98:39:30:e1:54:94:
67:28:f2:0b:0c:38:f5:fb:95:f8:e3:87:c6:f4:b6:bd:6d:e1:
cb:69:14:b1:d6:69:d0:ce:01:92:f2:38:39:ba:ff:42:bf:cb:
44:fa:d6:05:01:9c:51:cd:ec:05:17:01:cb:19:72:19:09:18:
36:8f:2b:be:97:fe:82:f3:ed:2b:f6:de:df:c1:12:2d:52:34:
d8:ac:6a:87:da:7c:f3:97:b9:f7:fa:e4:e3:5b:01:f5:85:5f:
31:11:c9:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:22:37 2026 by rpki-client