Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/245873-1ca7-4b71-b220-edb0418cac4d/1/39D7xN6B7icnq6PpEK_NKlOmZAw.mft
File: 39D7xN6B7icnq6PpEK_NKlOmZAw.mft (raw, json)
Hash identifier: aODoOnERH5CxvXbu16atpvGCLdIuSkhnPmytSTlI5VA=
Subject key identifier: 53:E9:26:34:4C:C6:DE:BF:9C:B1:7B:77:14:4F:F2:16:1A:A3:63:EA
Authority key identifier: DF:D0:FB:C4:DE:81:EE:27:27:AB:A3:E9:10:AF:CD:2A:53:A6:64:0C
Certificate issuer: /CN=dfd0fbc4de81ee2727aba3e910afcd2a53a6640c
Certificate serial: 019CAA582E76E1CA2F16C4AB48A20367F6E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39D7xN6B7icnq6PpEK_NKlOmZAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/245873-1ca7-4b71-b220-edb0418cac4d/1/39D7xN6B7icnq6PpEK_NKlOmZAw.mft
Manifest number: 0145
Signing time: Sun 01 Mar 2026 17:00:31 +0000
Manifest this update: Sun 01 Mar 2026 17:00:31 +0000
Manifest next update: Mon 02 Mar 2026 17:00:31 +0000
Files and hashes: 1: 39D7xN6B7icnq6PpEK_NKlOmZAw.crl (hash: +DjO8sRtzxOZ4V1mSxN8RYNbVN5IzsuBio8rnSjtX18=)
2: G1iJHYXZZbAs4A1MhgUftxUGaws.roa (hash: 7QifEDFoU7RkmJKkZqgcMn81wo0EKV/iY/tFPszpQk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/245873-1ca7-4b71-b220-edb0418cac4d/1/39D7xN6B7icnq6PpEK_NKlOmZAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/245873-1ca7-4b71-b220-edb0418cac4d/1/39D7xN6B7icnq6PpEK_NKlOmZAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/39D7xN6B7icnq6PpEK_NKlOmZAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:2e:76:e1:ca:2f:16:c4:ab:48:a2:03:67:f6:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd0fbc4de81ee2727aba3e910afcd2a53a6640c
Validity
Not Before: Mar 1 17:00:31 2026 GMT
Not After : Mar 2 17:00:31 2026 GMT
Subject: CN=53e926344cc6debf9cb17b77144ff2161aa363ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fd:d0:3b:ca:b6:b2:46:8a:bb:89:00:42:42:
c2:34:bb:18:36:0d:a9:1a:ff:75:12:0d:f9:85:4b:
e0:15:b9:1b:12:85:63:ff:5c:4e:7a:03:d0:04:da:
c5:49:7f:be:50:25:8b:bb:3f:f9:07:ba:e6:cf:54:
e9:76:20:49:b3:04:f3:07:70:ca:da:a1:71:59:81:
09:4d:3b:9c:50:98:d4:f4:e1:51:3a:f5:58:13:30:
fa:11:4b:6e:bc:c7:be:e9:fb:9e:94:30:d6:eb:1e:
d8:d9:03:b6:5c:79:5f:fc:72:ca:00:0e:d1:0b:12:
83:f5:24:8b:f7:2e:61:4f:d6:22:c1:1a:ab:72:cf:
62:f1:ef:c8:3c:4e:f9:5b:54:87:8e:de:ee:f1:17:
3b:90:e8:f0:53:e9:a2:31:77:9f:08:04:72:df:62:
05:8a:52:48:11:55:c7:bd:9f:49:32:07:5a:9f:d7:
07:a9:1e:b8:79:b8:67:ed:11:89:1c:a6:20:dc:7e:
ef:6a:bd:cc:8c:2e:33:44:2a:4e:96:8f:81:a4:10:
e9:89:88:80:ca:5f:32:8a:73:b2:0e:d8:d3:c7:41:
f0:4d:02:b2:b4:14:91:23:46:ee:48:a1:fd:cb:10:
af:8f:fd:1e:79:7a:25:f9:d8:21:40:65:3f:8d:c1:
50:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:E9:26:34:4C:C6:DE:BF:9C:B1:7B:77:14:4F:F2:16:1A:A3:63:EA
X509v3 Authority Key Identifier:
keyid:DF:D0:FB:C4:DE:81:EE:27:27:AB:A3:E9:10:AF:CD:2A:53:A6:64:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39D7xN6B7icnq6PpEK_NKlOmZAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/245873-1ca7-4b71-b220-edb0418cac4d/1/39D7xN6B7icnq6PpEK_NKlOmZAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/245873-1ca7-4b71-b220-edb0418cac4d/1/39D7xN6B7icnq6PpEK_NKlOmZAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:1b:21:65:7e:cc:bd:58:21:a7:21:9c:7d:97:4d:ce:81:a2:
f4:78:22:91:70:c2:87:61:dd:d5:26:d6:d6:9e:6a:39:a4:34:
5b:24:3f:99:cc:08:13:ab:42:19:31:a8:dd:af:cd:ec:f6:4e:
16:c2:90:ce:86:aa:0d:4d:33:59:c5:f9:69:12:41:2f:59:4b:
60:65:3b:e1:c4:c0:13:8b:d4:91:c6:a8:72:fc:14:38:0d:1d:
9a:c9:23:9e:38:7e:74:71:83:27:59:4b:07:d9:f3:20:7f:b0:
9c:89:d6:8a:ee:5b:5f:fb:34:41:b2:9b:89:e9:53:01:8e:c9:
75:cd:ce:1a:2e:a0:f7:ff:0d:58:8a:a5:23:6b:df:1a:27:ba:
cf:15:f9:05:5e:7e:58:67:62:25:a4:7a:c1:ac:0f:fd:86:41:
87:b7:2c:ff:06:71:37:e0:fd:9c:ec:db:d1:83:06:37:bb:4d:
54:b2:64:de:e9:ed:4a:cd:11:24:ff:79:6b:0c:7f:21:73:cf:
46:2e:04:e0:fc:8b:4c:e3:a6:c9:2b:d0:ff:7f:ce:05:f3:84:
ff:4a:41:f2:12:de:d7:40:04:5b:b8:e5:45:55:83:9b:48:0b:
9b:fc:b3:59:2a:32:bb:74:89:1a:4a:14:92:5b:db:9e:5b:0b:
bd:bd:79:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:51:53 2026 by rpki-client