Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/245873-1ca7-4b71-b220-edb0418cac4d/1/39D7xN6B7icnq6PpEK_NKlOmZAw.mft
File: 39D7xN6B7icnq6PpEK_NKlOmZAw.mft (raw, json)
Hash identifier: wbudU8zbtolqcpiZMgvt3Isrl8IZbTLQDIjTzWK9A2o=
Subject key identifier: 2D:CB:50:6D:0F:D2:96:E2:B1:46:40:AC:31:DD:69:13:65:B1:48:D5
Authority key identifier: DF:D0:FB:C4:DE:81:EE:27:27:AB:A3:E9:10:AF:CD:2A:53:A6:64:0C
Certificate issuer: /CN=dfd0fbc4de81ee2727aba3e910afcd2a53a6640c
Certificate serial: 01A0C1E8A52A4BBE9BFB4CA5A6B63B485C27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39D7xN6B7icnq6PpEK_NKlOmZAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/245873-1ca7-4b71-b220-edb0418cac4d/1/39D7xN6B7icnq6PpEK_NKlOmZAw.mft
Manifest number: 0369
Signing time: Mon 21 Sep 2026 03:00:44 +0000
Manifest this update: Mon 21 Sep 2026 03:00:44 +0000
Manifest next update: Tue 22 Sep 2026 03:00:44 +0000
Files and hashes: 1: 39D7xN6B7icnq6PpEK_NKlOmZAw.crl (hash: YJ90UkphA0/NaEJI6CrdbSeazt5o8sLFunw6uAHcJGc=)
2: M5WkYuReaq09MNJMaF9RecqaP3E.roa (hash: YWrcOU6fOxVzuzg11LAknyXhop8BLtiv/1aRQ3Wh99s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/245873-1ca7-4b71-b220-edb0418cac4d/1/39D7xN6B7icnq6PpEK_NKlOmZAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/245873-1ca7-4b71-b220-edb0418cac4d/1/39D7xN6B7icnq6PpEK_NKlOmZAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/39D7xN6B7icnq6PpEK_NKlOmZAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:e8:a5:2a:4b:be:9b:fb:4c:a5:a6:b6:3b:48:5c:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd0fbc4de81ee2727aba3e910afcd2a53a6640c
Validity
Not Before: Sep 21 03:00:44 2026 GMT
Not After : Sep 22 03:00:44 2026 GMT
Subject: CN=2dcb506d0fd296e2b14640ac31dd691365b148d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7a:87:47:97:9d:67:77:26:21:26:ac:66:94:
e4:00:ca:11:0c:92:2b:b6:e4:6e:c0:4a:2a:57:90:
d7:4e:25:fc:26:72:51:b8:09:94:71:2f:15:a2:87:
83:14:22:4b:61:0a:11:92:3a:a6:d1:74:a5:20:82:
31:94:3d:1a:da:f0:8f:88:32:7c:28:b7:9a:c2:3b:
c1:bc:e5:9a:4d:5f:65:f3:fa:46:39:69:6b:02:63:
32:c0:88:8b:d5:22:ab:eb:65:93:ea:26:38:af:af:
01:67:18:0b:12:68:c9:e3:93:ba:84:9b:24:e7:e9:
8b:b9:3d:20:2a:09:81:0c:a0:69:bd:bc:c5:9c:a4:
2f:22:ae:96:90:e2:15:71:5e:53:8a:68:5d:86:e6:
6b:97:ca:53:07:73:ae:76:5b:0a:59:8d:d0:41:be:
2b:e5:84:26:49:40:72:41:c1:24:e9:1a:c8:89:98:
7f:0c:70:af:71:40:02:18:48:16:f3:69:9d:42:c1:
0e:29:23:5a:67:a7:f2:47:67:b5:8d:c4:15:2a:34:
cc:73:6a:ab:42:b5:20:b5:32:1e:22:8c:cf:08:83:
ad:c6:e7:53:c8:17:07:ad:4f:85:0e:28:44:28:75:
cd:d0:ee:1e:aa:e1:32:2b:01:c4:3c:ca:11:fa:d0:
1b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:CB:50:6D:0F:D2:96:E2:B1:46:40:AC:31:DD:69:13:65:B1:48:D5
X509v3 Authority Key Identifier:
keyid:DF:D0:FB:C4:DE:81:EE:27:27:AB:A3:E9:10:AF:CD:2A:53:A6:64:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39D7xN6B7icnq6PpEK_NKlOmZAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/245873-1ca7-4b71-b220-edb0418cac4d/1/39D7xN6B7icnq6PpEK_NKlOmZAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/245873-1ca7-4b71-b220-edb0418cac4d/1/39D7xN6B7icnq6PpEK_NKlOmZAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:10:eb:d7:8c:1b:ba:db:f7:88:bf:39:1c:c3:41:a1:63:36:
f7:06:96:b8:82:1b:f8:10:a2:3c:04:9a:cc:30:c0:2f:27:41:
49:f1:54:a2:cf:fe:d1:fb:69:2e:a2:4e:6a:44:be:9c:30:dc:
1a:ac:ec:84:05:e3:0f:dd:01:25:49:06:d1:44:6a:cf:24:69:
63:33:53:eb:c1:9c:e7:85:67:4e:71:63:5a:e9:20:99:fc:c9:
11:58:57:e5:b3:d4:e5:62:13:b2:db:3d:2f:99:fb:e7:56:71:
1b:1c:f5:3b:38:9d:7c:25:2f:8e:87:f2:5e:06:95:34:28:e6:
90:ae:da:16:50:06:92:49:e5:7f:e6:ba:e5:64:da:b0:f3:f5:
60:30:de:1e:ae:67:fc:10:a2:2b:27:79:55:4e:49:35:77:90:
c9:8e:14:b2:36:a4:c0:59:b3:85:11:83:55:c5:67:90:b2:1f:
04:13:17:bd:36:2a:c7:1a:ef:e6:f0:e8:d3:3f:2e:eb:4d:c8:
59:39:dc:10:d3:36:89:b5:f7:55:c9:df:11:30:d0:e7:b5:0e:
49:ab:ef:e9:3a:3a:6a:75:bb:24:0a:13:87:7b:ca:85:0f:56:
ad:08:92:4e:55:26:ac:d7:e0:31:ee:11:e9:14:39:b7:b9:ad:
5c:6e:b5:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 08:07:08 2026 by rpki-client