Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.mft
File: 39hkHjKKpdGclg1Ikc-Gd84Siec.mft (raw, json)
Hash identifier: hXz1tSgYrINYhdyeJPrTWC/Bqn46tB2kd2OFFr5OvGQ=
Subject key identifier: C5:C7:57:84:71:EC:F4:4F:25:B6:30:FD:CC:C3:AD:9C:AD:F1:14:24
Authority key identifier: DF:D8:64:1E:32:8A:A5:D1:9C:96:0D:48:91:CF:86:77:CE:12:89:E7
Certificate issuer: /CN=dfd8641e328aa5d19c960d4891cf8677ce1289e7
Certificate serial: 019E216D20B0E145CD608892FA6FF709ED0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39hkHjKKpdGclg1Ikc-Gd84Siec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.mft
Manifest number: 020D
Signing time: Wed 13 May 2026 13:01:00 +0000
Manifest this update: Wed 13 May 2026 13:01:00 +0000
Manifest next update: Thu 14 May 2026 13:01:00 +0000
Files and hashes: 1: 2qvSkbHTsb98tl7LYwqPesWPH0g.roa (hash: Y4264CBO/wnBYQA3v/iM8WdJyQ6sBIxNEIMB+ic9wcM=)
2: 39hkHjKKpdGclg1Ikc-Gd84Siec.crl (hash: g+0LTDNuqTDyxgfrcxod7GR7sudV2JvgmYRhZ/3b0Hk=)
3: eOukcSE4vv2_C-0yT3bFz9tAp8Q.roa (hash: ni8P4L+TMFDjolGG4Odq13TtGL18OXau4ZR/dJyb4Yk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.mft
rsync://rpki.ripe.net/repository/DEFAULT/39hkHjKKpdGclg1Ikc-Gd84Siec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 13:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:6d:20:b0:e1:45:cd:60:88:92:fa:6f:f7:09:ed:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd8641e328aa5d19c960d4891cf8677ce1289e7
Validity
Not Before: May 13 13:01:00 2026 GMT
Not After : May 14 13:01:00 2026 GMT
Subject: CN=c5c7578471ecf44f25b630fdccc3ad9cadf11424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:46:f2:6a:74:da:ae:94:ee:6c:36:c0:e7:c1:
62:ea:f7:19:b1:14:4d:3f:85:6d:4c:91:c3:d6:16:
f7:1d:7d:a9:ec:c3:87:e6:34:91:6d:68:c8:37:f5:
09:0c:9e:38:21:52:7a:93:39:1d:d0:c2:25:33:2b:
6f:f6:aa:78:ec:d4:b6:f6:68:c1:82:c0:4c:39:55:
75:cc:f6:ab:a4:58:d1:25:0e:ee:da:03:f6:53:6a:
b9:1b:09:12:8f:04:d6:cb:be:1e:54:90:a3:ca:c4:
1c:ea:6a:24:37:70:81:e4:82:6e:52:19:31:40:33:
cf:1b:7f:8c:4d:36:32:a8:d5:60:98:d9:2c:2c:95:
9c:cc:9d:b3:61:2f:98:3a:d0:0d:e0:a1:3b:6a:58:
e1:a1:c7:2c:4f:e6:10:3d:b6:3d:c2:89:2a:13:f1:
f9:cc:cc:ea:0b:68:43:ad:57:6c:38:10:6a:f2:ce:
39:7d:3c:ee:eb:21:6c:6d:79:78:a4:ae:50:b5:46:
b1:98:ea:ea:33:ed:e2:cb:5e:dd:aa:51:39:ba:cd:
e6:33:f8:e3:da:dc:3c:ac:f3:f6:96:78:c7:c9:05:
e5:c6:46:6c:fc:45:c5:01:1a:a2:f7:a8:84:41:11:
15:2d:9e:e1:dc:7c:2c:86:a1:0f:c1:f1:4a:fc:98:
f4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:C7:57:84:71:EC:F4:4F:25:B6:30:FD:CC:C3:AD:9C:AD:F1:14:24
X509v3 Authority Key Identifier:
keyid:DF:D8:64:1E:32:8A:A5:D1:9C:96:0D:48:91:CF:86:77:CE:12:89:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39hkHjKKpdGclg1Ikc-Gd84Siec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:61:76:03:b8:85:e7:97:e2:ed:41:b6:b8:4c:9d:66:b0:8f:
6d:41:13:6d:16:bd:8c:50:3f:d3:e1:be:94:ac:48:9e:af:ab:
09:63:54:9b:04:b2:8e:ac:86:87:d3:cc:3e:2d:81:30:26:02:
45:4f:ae:74:24:d7:30:f0:70:69:d0:da:21:8a:7f:4a:6d:70:
86:3c:14:0d:0a:7b:35:60:ae:93:08:63:0c:84:18:7a:29:9c:
e0:90:b1:0c:4a:f5:d8:08:71:9c:ab:75:12:57:ad:15:aa:98:
0e:d9:50:df:38:4f:4b:fe:c5:0b:de:47:67:a9:75:f8:21:74:
17:64:d8:88:34:47:d0:9c:54:58:ef:b8:1e:8e:e8:02:e2:c3:
82:ff:3e:b2:10:40:0a:ce:16:cd:b4:f3:7b:7d:21:76:ec:43:
e1:db:2d:1e:e5:cf:61:56:f3:c9:be:df:a3:2a:b3:91:02:1d:
2a:d4:c4:e5:6e:4f:78:49:dc:da:9b:67:9e:15:f2:0b:58:1e:
b8:92:68:a0:24:25:0a:b9:99:23:1f:83:4e:53:4e:81:34:0b:
89:66:d4:e0:06:43:e1:ae:fd:6c:ea:0d:ab:a3:73:2c:87:c7:
39:ab:b6:66:39:55:de:c2:eb:03:0e:b8:e7:66:b0:43:ab:a3:
e7:3e:6f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:14:55 2026 by rpki-client