Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/245873-1ca7-4b71-b220-edb0418cac4d/1/39D7xN6B7icnq6PpEK_NKlOmZAw.mft
File: 39D7xN6B7icnq6PpEK_NKlOmZAw.mft (raw, json)
Hash identifier: mgN5O5UNC/33IK2VSPbu1rLl6JPlpDWJGv45X15/Bl4=
Subject key identifier: 5F:01:CA:91:C2:98:5A:4F:B1:BC:0F:53:8B:82:20:84:A3:CE:D5:56
Authority key identifier: DF:D0:FB:C4:DE:81:EE:27:27:AB:A3:E9:10:AF:CD:2A:53:A6:64:0C
Certificate issuer: /CN=dfd0fbc4de81ee2727aba3e910afcd2a53a6640c
Certificate serial: 019EBF9104B598B8010642976BA798992183
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39D7xN6B7icnq6PpEK_NKlOmZAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/245873-1ca7-4b71-b220-edb0418cac4d/1/39D7xN6B7icnq6PpEK_NKlOmZAw.mft
Manifest number: 025C
Signing time: Sat 13 Jun 2026 06:00:12 +0000
Manifest this update: Sat 13 Jun 2026 06:00:12 +0000
Manifest next update: Sun 14 Jun 2026 06:00:12 +0000
Files and hashes: 1: 39D7xN6B7icnq6PpEK_NKlOmZAw.crl (hash: ZBw/a4mRdaCyGOpG85aVl9kW/41+JGMqvNrKORch8l4=)
2: 3_WOSnpd_DmYlCPJ_IFRim5NhZk.roa (hash: sOMgzGx8D+jagL2hwOlgBVbXLz9AMFtBb5Q7En33UDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/245873-1ca7-4b71-b220-edb0418cac4d/1/39D7xN6B7icnq6PpEK_NKlOmZAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/245873-1ca7-4b71-b220-edb0418cac4d/1/39D7xN6B7icnq6PpEK_NKlOmZAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/39D7xN6B7icnq6PpEK_NKlOmZAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 06:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:91:04:b5:98:b8:01:06:42:97:6b:a7:98:99:21:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd0fbc4de81ee2727aba3e910afcd2a53a6640c
Validity
Not Before: Jun 13 06:00:12 2026 GMT
Not After : Jun 14 06:00:12 2026 GMT
Subject: CN=5f01ca91c2985a4fb1bc0f538b822084a3ced556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:06:40:6a:cc:7d:ea:f1:5f:5c:8c:fd:48:47:
11:1b:e7:10:b1:71:c5:7c:68:c3:28:cf:5f:95:2a:
5f:2a:33:64:08:12:cd:5a:bd:59:8b:00:d3:54:12:
52:ee:28:36:f8:d4:aa:dd:36:37:2d:92:d7:1d:f0:
9b:be:9a:73:fb:95:32:6b:b0:dd:cc:33:06:a3:c2:
0f:e6:9b:f8:79:1f:40:33:4f:b9:9c:3c:3e:6b:77:
6d:d9:b1:33:a2:ce:18:f0:53:fc:b8:bd:7e:23:b0:
cd:8e:7b:90:1c:88:54:70:70:b7:23:00:df:bc:5a:
d3:ff:68:85:41:40:00:9f:bf:c5:9b:f3:48:a0:3b:
da:13:c0:3c:56:a9:88:b0:9c:90:c0:31:2d:3b:95:
f6:42:d6:3b:21:87:80:57:d2:26:a9:0f:59:e7:e3:
9f:d6:ae:9e:aa:0f:b5:f1:33:6b:97:bf:65:95:f2:
47:21:23:13:b6:3c:6d:c4:be:af:00:6b:31:63:09:
58:15:5b:8d:ae:c6:32:f3:04:f3:76:9f:90:ea:4d:
51:a6:e1:cd:70:02:49:6b:cc:6d:64:cb:31:65:d9:
05:36:cd:2a:8e:cc:9f:ba:91:51:74:9e:76:b3:76:
2b:0c:27:70:07:90:02:19:cd:94:d7:b7:70:75:70:
bf:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:01:CA:91:C2:98:5A:4F:B1:BC:0F:53:8B:82:20:84:A3:CE:D5:56
X509v3 Authority Key Identifier:
keyid:DF:D0:FB:C4:DE:81:EE:27:27:AB:A3:E9:10:AF:CD:2A:53:A6:64:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39D7xN6B7icnq6PpEK_NKlOmZAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/245873-1ca7-4b71-b220-edb0418cac4d/1/39D7xN6B7icnq6PpEK_NKlOmZAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/245873-1ca7-4b71-b220-edb0418cac4d/1/39D7xN6B7icnq6PpEK_NKlOmZAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:68:8a:d1:d7:5e:2a:cf:75:03:f1:24:0c:e0:43:6d:cc:7b:
a8:eb:2f:63:81:be:49:8b:ad:b5:03:8b:b0:a3:ff:49:96:60:
08:85:ad:40:ed:f4:ac:fd:1b:39:87:18:96:ad:4d:67:75:80:
16:df:f2:9c:92:ef:ca:90:ab:87:ef:bc:2f:2d:90:22:eb:51:
3a:ef:70:3c:c9:1d:16:61:23:38:a0:3f:51:9f:6d:91:b9:d2:
f5:fc:51:de:67:f4:76:cd:a4:a8:97:e1:db:ba:15:9b:7a:94:
ac:ca:39:c7:6d:7e:ca:df:90:28:b4:f7:2b:6a:fe:c3:d9:b5:
22:ff:67:8c:29:0a:1c:ed:dd:64:d7:30:ac:c3:8b:d1:44:1e:
43:c6:99:c6:3c:56:2c:f3:cc:ce:1f:cc:96:fe:cd:3d:51:16:
fe:20:7a:6a:f2:fc:6f:02:af:07:e8:3f:e0:61:05:e6:92:fb:
86:c3:68:32:6f:4f:41:81:9b:05:ec:74:15:e7:21:2a:d2:d8:
19:8b:66:9d:9f:46:d2:f6:3b:d5:99:b2:87:2b:69:be:91:06:
27:2c:66:06:63:6f:0e:dd:50:9d:1e:99:9a:a9:f4:57:1c:b6:
59:ec:09:9d:7b:0e:c5:c2:f5:9c:35:40:37:81:fc:00:76:49:
b1:ca:78:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:01:58 2026 by rpki-client