Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/48a3fd-b030-4a2a-ae08-cb7808b35f51/1/k8OMzbPnZ_cPY-lNquZienY5Gp4.mft
File: k8OMzbPnZ_cPY-lNquZienY5Gp4.mft (raw, json)
Hash identifier: iE+c3enhGlSTQpJgT1GcA641IGzbEi6o2wkFAAbUT8k=
Subject key identifier: 39:23:4B:C2:38:32:03:0C:D2:45:D9:FA:A2:AA:7C:F4:A7:2F:49:78
Authority key identifier: 93:C3:8C:CD:B3:E7:67:F7:0F:63:E9:4D:AA:E6:62:7A:76:39:1A:9E
Certificate issuer: /CN=93c38ccdb3e767f70f63e94daae6627a76391a9e
Certificate serial: 019FA7F44F71FA8CB909907C24442B781D5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k8OMzbPnZ_cPY-lNquZienY5Gp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/48a3fd-b030-4a2a-ae08-cb7808b35f51/1/k8OMzbPnZ_cPY-lNquZienY5Gp4.mft
Manifest number: 39
Signing time: Tue 28 Jul 2026 09:00:33 +0000
Manifest this update: Tue 28 Jul 2026 09:00:33 +0000
Manifest next update: Wed 29 Jul 2026 09:00:33 +0000
Files and hashes: 1: eT0Sy6tDGtgX-Y9srl2GPKJATgM.asa (hash: V53TyFVRC2e2wVXKB2UhGceHoadRfVhBdlMdmun7Fkk=)
2: k8OMzbPnZ_cPY-lNquZienY5Gp4.crl (hash: BwHAQ26MEH96uDuuBTbwyKf9LXcGmrJ/QsMJJil1Rmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/48a3fd-b030-4a2a-ae08-cb7808b35f51/1/k8OMzbPnZ_cPY-lNquZienY5Gp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/48a3fd-b030-4a2a-ae08-cb7808b35f51/1/k8OMzbPnZ_cPY-lNquZienY5Gp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/k8OMzbPnZ_cPY-lNquZienY5Gp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 09:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:f4:4f:71:fa:8c:b9:09:90:7c:24:44:2b:78:1d:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93c38ccdb3e767f70f63e94daae6627a76391a9e
Validity
Not Before: Jul 28 09:00:33 2026 GMT
Not After : Jul 29 09:00:33 2026 GMT
Subject: CN=39234bc23832030cd245d9faa2aa7cf4a72f4978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c4:17:17:92:ce:33:03:ae:b3:83:0d:97:a0:
aa:df:61:69:0d:cf:70:42:bc:51:00:50:a0:f8:46:
ad:a7:65:3f:6e:57:40:14:d9:1f:8c:ed:9e:7e:da:
94:aa:a0:4d:f6:66:cc:a3:ad:a3:5a:de:e6:40:b8:
ae:d0:f9:c3:04:fa:aa:75:17:ca:71:1c:f0:70:d4:
ca:35:75:b1:5e:48:2f:07:cc:32:60:8a:e2:6d:5a:
b6:21:5a:2e:ba:0f:8f:41:09:a5:0d:2b:3f:f1:4c:
8e:86:7f:d3:64:72:c0:43:e3:c5:3a:b1:00:ba:2f:
6c:07:7d:5d:05:7f:97:51:29:50:e9:fb:ea:23:44:
bf:0f:c0:71:26:a5:79:48:ef:46:1c:0e:36:1e:d3:
7b:9b:e5:2a:08:7d:22:a6:2a:71:68:49:0b:db:6b:
d8:46:e9:c7:70:c1:39:b5:43:05:f3:3d:07:e9:e4:
dc:f9:be:3f:1c:17:b7:ca:31:e7:be:4e:bf:60:7c:
98:9b:39:ab:62:67:95:93:e0:df:41:08:60:8f:6f:
78:50:65:65:ec:45:bb:29:3c:42:65:66:aa:94:9b:
39:7a:f2:e6:2e:3a:a4:2f:29:04:a7:a3:b3:e4:3a:
f3:93:19:35:e0:00:f5:01:de:ba:39:36:92:eb:e8:
f3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:23:4B:C2:38:32:03:0C:D2:45:D9:FA:A2:AA:7C:F4:A7:2F:49:78
X509v3 Authority Key Identifier:
keyid:93:C3:8C:CD:B3:E7:67:F7:0F:63:E9:4D:AA:E6:62:7A:76:39:1A:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8OMzbPnZ_cPY-lNquZienY5Gp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/48a3fd-b030-4a2a-ae08-cb7808b35f51/1/k8OMzbPnZ_cPY-lNquZienY5Gp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/48a3fd-b030-4a2a-ae08-cb7808b35f51/1/k8OMzbPnZ_cPY-lNquZienY5Gp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:1b:aa:ea:d0:8a:91:f5:d1:22:07:1e:31:12:7b:6f:ac:0b:
9b:86:e7:52:a0:91:f5:8c:99:70:7b:f2:74:f3:15:fc:73:82:
16:f0:6b:d4:81:cb:4c:10:0c:fb:42:9a:40:1e:62:6c:ed:3d:
45:48:f8:b9:5b:73:0b:6c:cb:25:d0:60:ab:87:67:5d:c0:9a:
16:c5:b5:38:7e:8d:41:84:62:41:5e:b9:13:45:a0:60:75:38:
a9:8a:09:ca:52:e0:9d:3d:31:9f:94:6a:ce:18:b3:f7:e2:7c:
19:a8:30:f8:3f:96:3f:8d:c8:e3:2e:96:67:1a:07:f5:12:22:
bc:3e:f1:26:82:3d:ee:36:d4:d5:d4:62:85:ed:45:ba:78:74:
53:64:93:65:75:df:d7:f1:2d:8c:1f:2c:39:dd:ef:93:b3:29:
d9:a5:6a:5e:4c:b4:4b:f8:8b:76:03:1d:f2:64:b2:b2:a0:d3:
fc:62:08:cf:f4:ac:59:0b:41:da:a3:5a:32:5f:c3:66:15:c5:
b6:a7:b3:15:a6:2b:a6:93:41:68:dc:01:19:34:98:1b:58:7c:
73:cc:35:8b:c9:ac:db:95:af:1a:b9:a1:da:f9:00:92:09:7a:
3f:27:a5:5b:3a:b6:a2:14:f8:77:3b:ea:27:20:3b:9a:be:0b:
9b:34:e5:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:40:50 2026 by rpki-client