Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.mft
File: 39BGr17cEZZAltwg9q8d5V2ckDA.mft (raw, json)
Hash identifier: ZcjEsNHlyBn5QcZ9sFcd8wXOYtPxT9kV4VanlVE1T6I=
Subject key identifier: C3:A5:C0:E9:EE:17:DD:27:7D:01:CC:82:FB:22:14:D1:87:62:87:A1
Authority key identifier: DF:D0:46:AF:5E:DC:11:96:40:96:DC:20:F6:AF:1D:E5:5D:9C:90:30
Certificate issuer: /CN=dfd046af5edc11964096dc20f6af1de55d9c9030
Certificate serial: 01A1AABA76271B870538F61A191DFC4A6BA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39BGr17cEZZAltwg9q8d5V2ckDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.mft
Manifest number: 09C7
Signing time: Thu 05 Nov 2026 08:01:48 +0000
Manifest this update: Thu 05 Nov 2026 08:01:48 +0000
Manifest next update: Fri 06 Nov 2026 08:01:48 +0000
Files and hashes: 1: 1R8Nv6bwHGDwo2mOtPOF_3tZNSM.asa (hash: tt15uIuTQgd6Syibc3srDH+USXZ4ejIXqOAjH/FfWt0=)
2: 39BGr17cEZZAltwg9q8d5V2ckDA.crl (hash: g47pqgARdJ5FR3NRu8+EJQYzI8vDj+riZ9etW7z7PrM=)
3: BCUoExG5S0e92RDrAPVZHuPQWo4.roa (hash: ga/42q8ZFF14X/F1Dex6MdKyB0ci7C/L853gqTlJbMo=)
4: QTUs2t29sOiO1bQndfZmKxNAYdQ.roa (hash: myzQSNEVPstuOfu5qsB9AEg4A9vQ4YhsK6/lq/QzmjU=)
5: V0dM0OGiOIRr_LANVdvcw5kopNw.roa (hash: LNRzC3fIfmhFsLHaDaO4AM9qxVQUMv8ErtHtGjlMGJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/39BGr17cEZZAltwg9q8d5V2ckDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:aa:ba:76:27:1b:87:05:38:f6:1a:19:1d:fc:4a:6b:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd046af5edc11964096dc20f6af1de55d9c9030
Validity
Not Before: Nov 5 08:01:48 2026 GMT
Not After : Nov 6 08:01:48 2026 GMT
Subject: CN=c3a5c0e9ee17dd277d01cc82fb2214d1876287a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:22:54:ca:31:fb:b7:ff:e4:20:f5:bd:45:78:
35:44:27:77:d9:c7:d3:2f:4a:68:c3:21:fa:6f:a2:
72:75:f9:4a:81:06:6c:06:6d:c6:c2:36:29:ba:cc:
1c:79:56:0e:70:d4:83:7e:6a:43:ee:0e:0a:c0:6c:
cc:8e:25:81:27:80:92:d5:b6:4b:4f:d7:5d:26:6e:
ef:9c:54:be:7c:3a:5d:90:fe:f4:14:70:5b:5a:40:
f9:e7:9f:15:4b:cc:0a:5c:02:5e:18:ec:5d:a1:e2:
a2:7b:f8:9b:d5:6c:ee:44:df:2a:f1:d7:34:c1:32:
9e:f4:3a:77:2c:77:e4:6b:b8:fc:aa:d4:e2:c5:fd:
9b:7c:7f:5b:38:a6:f3:a2:a2:8f:dc:ca:ca:b3:63:
08:52:dd:e5:d4:a1:9e:ce:41:34:f5:e4:48:c6:0b:
d9:24:6e:1b:e3:93:ba:7a:c1:bc:da:f1:86:6e:00:
04:85:51:66:2e:50:7f:6f:88:9b:18:e1:75:17:a0:
f4:87:b5:f4:8b:54:0d:59:31:3b:96:0c:cd:2f:af:
14:0f:02:2a:f3:d0:b9:74:25:d2:f6:35:40:2e:54:
30:b6:29:d4:c7:0c:b4:12:a8:e2:5e:2e:79:3b:98:
b9:da:5a:f0:b2:7b:bc:23:a7:56:7b:1f:f7:98:13:
d5:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:A5:C0:E9:EE:17:DD:27:7D:01:CC:82:FB:22:14:D1:87:62:87:A1
X509v3 Authority Key Identifier:
keyid:DF:D0:46:AF:5E:DC:11:96:40:96:DC:20:F6:AF:1D:E5:5D:9C:90:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39BGr17cEZZAltwg9q8d5V2ckDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:db:7c:92:b2:06:1f:e8:0e:a6:5c:b6:67:60:ec:be:5b:0a:
5d:fa:12:f5:9e:62:aa:2f:74:8f:64:07:eb:e9:68:cf:dd:57:
fb:0a:4d:c2:4f:1b:78:24:07:60:39:95:f1:f0:66:1d:b4:15:
39:03:c6:45:63:18:22:ef:fd:58:a0:f8:b0:e7:14:b7:93:91:
cf:12:0a:a3:0e:0d:13:75:33:48:bf:4a:36:11:75:d6:25:90:
35:96:2d:a4:71:76:f4:ca:91:ba:21:b9:2d:61:43:b6:85:b2:
14:25:70:dd:fc:cc:9e:44:90:d5:e8:3e:9a:8e:97:1a:54:21:
68:56:b9:46:6c:d9:88:8d:41:44:65:06:6c:ab:cb:b5:7e:04:
3b:8f:4c:1b:95:8b:d1:29:70:86:0e:a6:2d:30:7b:7b:6f:54:
bd:8d:1c:8f:5f:54:56:84:00:00:49:30:e8:e0:81:f5:38:44:
9b:ab:3e:cf:f7:fd:5d:db:0f:2e:06:87:57:f3:68:a9:c8:aa:
7d:0b:48:b9:ae:1c:ab:a2:c4:7e:69:c9:65:f8:37:77:f7:b7:
8a:97:2c:aa:16:be:3d:b8:eb:c3:1e:20:64:50:ce:df:79:0c:
38:a4:79:bf:a4:7a:5c:ac:71:1f:b7:ea:c4:40:cd:b4:ba:29:
22:3b:d7:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 17:26:21 2026 by rpki-client