Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/245873-1ca7-4b71-b220-edb0418cac4d/1/39D7xN6B7icnq6PpEK_NKlOmZAw.mft
File: 39D7xN6B7icnq6PpEK_NKlOmZAw.mft (raw, json)
Hash identifier: bTwrqwEmuMaUqeqpMsyTVGMWLF/+j4DZZ46yr+lEOi4=
Subject key identifier: 92:9C:CF:F8:D4:2B:89:D4:17:7F:EB:92:93:A6:89:DA:FD:38:37:47
Authority key identifier: DF:D0:FB:C4:DE:81:EE:27:27:AB:A3:E9:10:AF:CD:2A:53:A6:64:0C
Certificate issuer: /CN=dfd0fbc4de81ee2727aba3e910afcd2a53a6640c
Certificate serial: 019D99D06900677F5AD1FE3506890D24B5C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39D7xN6B7icnq6PpEK_NKlOmZAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/245873-1ca7-4b71-b220-edb0418cac4d/1/39D7xN6B7icnq6PpEK_NKlOmZAw.mft
Manifest number: 01C1
Signing time: Fri 17 Apr 2026 05:01:05 +0000
Manifest this update: Fri 17 Apr 2026 05:01:05 +0000
Manifest next update: Sat 18 Apr 2026 05:01:05 +0000
Files and hashes: 1: 39D7xN6B7icnq6PpEK_NKlOmZAw.crl (hash: HYIBeqBADqZqw1kthxAql5ufRUha/DV1onECVpJKbsM=)
2: G1iJHYXZZbAs4A1MhgUftxUGaws.roa (hash: 7QifEDFoU7RkmJKkZqgcMn81wo0EKV/iY/tFPszpQk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/245873-1ca7-4b71-b220-edb0418cac4d/1/39D7xN6B7icnq6PpEK_NKlOmZAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/245873-1ca7-4b71-b220-edb0418cac4d/1/39D7xN6B7icnq6PpEK_NKlOmZAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/39D7xN6B7icnq6PpEK_NKlOmZAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:69:00:67:7f:5a:d1:fe:35:06:89:0d:24:b5:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd0fbc4de81ee2727aba3e910afcd2a53a6640c
Validity
Not Before: Apr 17 05:01:05 2026 GMT
Not After : Apr 18 05:01:05 2026 GMT
Subject: CN=929ccff8d42b89d4177feb9293a689dafd383747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:06:a9:02:2e:b6:6b:f0:54:a1:c4:97:2f:a2:
27:ee:23:40:ce:9f:03:63:6b:b3:ca:92:54:1d:2f:
a8:8c:83:b2:ce:2a:e8:d8:9b:07:aa:3a:db:c0:fb:
c6:9a:f0:2a:78:2e:6b:34:6a:68:83:2e:38:c5:9c:
0f:c1:05:19:db:4d:43:af:15:19:64:a3:de:61:33:
71:86:c1:85:88:3e:02:75:e0:d5:5a:a3:4d:e5:a6:
2b:ff:09:0a:d8:b6:6f:63:9a:25:4c:ce:fb:ca:c8:
a9:e5:b6:d4:8f:cf:92:47:3e:8c:75:92:bd:64:22:
a3:b1:f0:76:02:ff:c1:a1:59:4f:68:05:67:28:cf:
7c:37:e1:84:31:6b:d9:4f:55:3c:dd:03:79:5c:64:
16:5b:01:73:b5:4b:a9:7e:59:a7:c9:09:f2:c4:7f:
3b:72:1f:fc:a5:00:f8:cb:a5:5b:15:38:25:11:d1:
da:80:f0:62:34:6b:20:eb:eb:ec:0b:3c:08:16:54:
23:3d:c7:bd:aa:5a:52:09:95:04:57:d8:f2:d6:ba:
90:f5:88:4d:29:c3:40:c3:36:09:18:b9:47:e5:36:
b6:ad:a5:ae:d3:92:4d:c2:47:92:bf:63:da:d6:33:
22:42:c2:ed:cd:53:c6:bd:da:02:6e:37:01:22:37:
22:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:9C:CF:F8:D4:2B:89:D4:17:7F:EB:92:93:A6:89:DA:FD:38:37:47
X509v3 Authority Key Identifier:
keyid:DF:D0:FB:C4:DE:81:EE:27:27:AB:A3:E9:10:AF:CD:2A:53:A6:64:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39D7xN6B7icnq6PpEK_NKlOmZAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/245873-1ca7-4b71-b220-edb0418cac4d/1/39D7xN6B7icnq6PpEK_NKlOmZAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/245873-1ca7-4b71-b220-edb0418cac4d/1/39D7xN6B7icnq6PpEK_NKlOmZAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:7d:13:fa:1f:c3:a1:d3:bc:02:5a:59:d4:34:46:56:61:a2:
e9:59:ea:77:ce:74:3a:67:81:47:97:6d:51:29:db:ca:ce:ae:
7d:21:d2:92:84:41:54:17:7d:0f:19:1a:b0:37:44:87:11:f0:
ca:6b:89:af:8d:ba:46:dd:97:16:56:9c:bb:53:2c:3a:61:5a:
99:ee:2d:fe:97:01:4a:84:95:1f:b9:11:6d:37:4b:81:34:35:
99:a0:b9:39:5d:f5:d2:84:19:85:8e:e0:a9:07:ff:2e:5d:3c:
c9:a3:58:17:41:ac:45:05:a2:fc:87:80:c9:46:9a:2f:dd:c9:
60:80:e0:18:6a:09:89:db:7c:8e:08:5d:82:e4:9a:45:ca:df:
e7:c9:68:e6:d6:8d:35:a7:85:79:4b:84:7d:f0:d4:20:92:8b:
c8:85:40:e9:90:25:62:8b:dc:41:c4:fc:1f:b2:fc:99:bd:3c:
25:d4:a3:28:60:00:08:ad:1a:6e:8c:e6:e2:70:da:f1:74:ab:
c1:57:bc:74:d8:87:7d:f4:4a:5c:06:fb:a9:9d:36:e1:90:1b:
55:b7:de:4b:53:8d:05:85:75:aa:18:20:0d:0e:9d:7c:30:a1:
29:84:14:0f:20:8a:3d:bf:49:a7:e4:72:e9:bb:25:08:9e:00:
2f:78:77:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:49:21 2026 by rpki-client