Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft
File: R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft (raw, json)
Hash identifier: BW/rYyNSUdXDhbQ6HHE0do37S1sCMiQiMmozKIPibtw=
Subject key identifier: 6B:7C:FB:33:7A:A7:CD:40:9C:32:54:C7:F5:5C:39:BF:06:B3:A3:46
Authority key identifier: 47:7F:4B:6E:C4:34:71:57:C4:D1:3E:F0:E7:AB:E1:29:0A:0B:F5:7C
Certificate issuer: /CN=477f4b6ec4347157c4d13ef0e7abe1290a0bf57c
Certificate serial: 019FAABE4961EC6C9F40120C0145D59DCE50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R39LbsQ0cVfE0T7w56vhKQoL9Xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft
Manifest number: 09DB
Signing time: Tue 28 Jul 2026 22:00:25 +0000
Manifest this update: Tue 28 Jul 2026 22:00:25 +0000
Manifest next update: Wed 29 Jul 2026 22:00:25 +0000
Files and hashes: 1: R39LbsQ0cVfE0T7w56vhKQoL9Xw.crl (hash: GfQAM5saWBS/T+pO30vNaCSMhvwWIMkpq5JfyiYdiOs=)
2: WTosev28vey7PdFKL1WZrUA91xA.roa (hash: ekI8w6gEsIIlqKjdpz2Fpya3mgwzySEILZV+ipAS2Wc=)
3: oRnNr1FlB4M-Ncw9fTwXwhAU40Q.roa (hash: y4K7So4r58lf5Yn7iRGJ9lrvo2ssl9GpvWxcRF0or7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/R39LbsQ0cVfE0T7w56vhKQoL9Xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:49:61:ec:6c:9f:40:12:0c:01:45:d5:9d:ce:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=477f4b6ec4347157c4d13ef0e7abe1290a0bf57c
Validity
Not Before: Jul 28 22:00:25 2026 GMT
Not After : Jul 29 22:00:25 2026 GMT
Subject: CN=6b7cfb337aa7cd409c3254c7f55c39bf06b3a346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2a:f2:4e:14:51:d6:0e:58:13:2f:b7:bf:51:
1c:f8:5a:62:81:98:c5:1f:61:ed:6e:43:82:b2:cc:
11:9e:47:92:b9:a2:2a:17:57:aa:7d:ce:1b:d1:36:
a9:16:24:79:92:d1:fd:0a:3a:61:42:bc:25:1f:61:
6f:6c:91:3d:18:c7:d0:82:1c:0f:34:40:28:54:a7:
46:bc:d8:6a:fb:00:99:ef:77:ed:27:24:e4:1d:81:
88:47:4d:7f:1c:01:a2:82:8e:f1:64:62:3b:eb:6d:
a9:2e:e7:c5:8f:d7:5a:72:6f:81:37:f7:2a:4c:43:
53:35:ef:85:67:de:18:57:85:cf:3d:8e:64:9f:cf:
ce:a7:b3:18:1d:74:0f:aa:66:a4:1c:f7:de:25:bb:
6a:89:8c:e2:d9:20:94:bd:fc:01:7d:67:be:15:04:
24:f5:14:4f:42:97:e6:84:41:62:d0:53:02:f9:50:
81:68:f3:13:59:7c:0b:5f:ac:65:62:a5:32:2a:17:
f2:ce:c2:1a:3a:d1:5a:9d:f2:6c:e9:42:fe:fa:2f:
2c:b0:d4:c7:d8:af:b9:88:a6:d8:4d:3f:cb:14:3b:
9f:c9:76:d9:ac:16:6a:08:99:79:35:be:17:38:70:
8a:a9:85:38:b3:ea:06:e4:8f:f9:03:3b:c2:51:1e:
8d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:7C:FB:33:7A:A7:CD:40:9C:32:54:C7:F5:5C:39:BF:06:B3:A3:46
X509v3 Authority Key Identifier:
keyid:47:7F:4B:6E:C4:34:71:57:C4:D1:3E:F0:E7:AB:E1:29:0A:0B:F5:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R39LbsQ0cVfE0T7w56vhKQoL9Xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:4e:f9:c8:c0:69:24:6c:c4:bc:3f:ab:6b:66:b4:c9:8a:4a:
81:91:01:05:43:39:a1:7c:de:13:c2:5c:17:42:1e:95:d3:2c:
81:ea:6e:d7:61:59:57:81:cf:bc:0b:1b:e9:f8:4f:60:9f:01:
b0:b4:6f:e3:79:a6:86:57:4e:52:d9:06:f1:2a:14:56:62:69:
da:46:26:5c:b7:03:12:b9:46:0e:85:80:36:70:56:f6:15:c2:
69:92:74:4c:3f:a3:7a:81:8f:e0:81:89:08:72:71:43:e8:da:
b7:e0:1d:c3:5f:09:c2:9a:90:1b:bb:49:ff:5b:6a:dc:1d:7d:
fb:1c:21:62:03:56:18:c2:ec:22:24:e9:7d:8d:68:91:93:e4:
c5:01:3b:3f:3b:55:44:f5:fd:92:81:75:ae:40:50:34:fc:a1:
8e:33:6a:40:d9:3f:cd:8f:b1:5d:c5:11:b2:eb:f4:02:e0:cb:
10:f6:eb:49:16:a9:46:0e:80:36:df:96:74:84:77:43:c8:2e:
e5:f1:e6:ce:fd:bd:c5:f5:57:1d:1b:0e:49:21:45:d7:e0:2c:
29:04:40:15:d6:53:df:05:99:30:ab:ce:de:e8:b9:50:03:f7:
03:0b:63:2c:81:83:00:63:bc:c0:3e:64:be:9c:87:84:a7:5d:
b9:a9:79:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qvklh7GyfQBIMAUXVnc5QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3N2Y0YjZlYzQzNDcxNTdjNGQxM2VmMGU3YWJlMTI5MGEw
YmY1N2MwHhcNMjYwNzI4MjIwMDI1WhcNMjYwNzI5MjIwMDI1WjAzMTEwLwYDVQQD
Eyg2YjdjZmIzMzdhYTdjZDQwOWMzMjU0YzdmNTVjMzliZjA2YjNhMzQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiryThRR1g5YEy+3v1Ec+FpigZjF
H2HtbkOCsswRnkeSuaIqF1eqfc4b0TapFiR5ktH9CjphQrwlH2FvbJE9GMfQghwP
NEAoVKdGvNhq+wCZ73ftJyTkHYGIR01/HAGigo7xZGI7622pLufFj9dacm+BN/cq
TENTNe+FZ94YV4XPPY5kn8/Op7MYHXQPqmakHPfeJbtqiYzi2SCUvfwBfWe+FQQk
9RRPQpfmhEFi0FMC+VCBaPMTWXwLX6xlYqUyKhfyzsIaOtFanfJs6UL++i8ssNTH
2K+5iKbYTT/LFDufyXbZrBZqCJl5Nb4XOHCKqYU4s+oG5I/5AzvCUR6NPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGt8+zN6p81AnDJUx/VcOb8Gs6NGMB8GA1UdIwQY
MBaAFEd/S27ENHFXxNE+8Oer4SkKC/V8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjM5TGJzUTBjVmZFMFQ3dzU2dmhLUW9MOVh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zOTNlMTYtODk4ZS00NWQ4LTlkNzIt
ZDhiZDI1MGI2NGY5LzEvUjM5TGJzUTBjVmZFMFQ3dzU2dmhLUW9MOVh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8zOTNlMTYtODk4ZS00NWQ4LTlkNzItZDhiZDI1MGI2NGY5
LzEvUjM5TGJzUTBjVmZFMFQ3dzU2dmhLUW9MOVh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADU75yMBp
JGzEvD+ra2a0yYpKgZEBBUM5oXzeE8JcF0IeldMsgepu12FZV4HPvAsb6fhPYJ8B
sLRv43mmhldOUtkG8SoUVmJp2kYmXLcDErlGDoWANnBW9hXCaZJ0TD+jeoGP4IGJ
CHJxQ+jat+Adw18JwpqQG7tJ/1tq3B19+xwhYgNWGMLsIiTpfY1okZPkxQE7PztV
RPX9koF1rkBQNPyhjjNqQNk/zY+xXcURsuv0AuDLEPbrSRapRg6ANt+WdIR3Q8gu
5fHmzv29xfVXHRsOSSFF1+AsKQRAFdZT3wWZMKvO3ui5UAP3AwtjLIGDAGO8wD5k
vpyHhKddual50Q==
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:46:22 2026 by rpki-client