Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.mft
File: 39hkHjKKpdGclg1Ikc-Gd84Siec.mft (raw, json)
Hash identifier: xoOmg/eH3QbQylLv+uhBBmKOxuf3L19Vf21W1MWY7UE=
Subject key identifier: 10:48:C7:70:A8:8A:5A:C7:00:8D:23:21:E7:C7:C4:35:F6:66:38:B3
Authority key identifier: DF:D8:64:1E:32:8A:A5:D1:9C:96:0D:48:91:CF:86:77:CE:12:89:E7
Certificate issuer: /CN=dfd8641e328aa5d19c960d4891cf8677ce1289e7
Certificate serial: 019F0D085598F5CFE433D4915E1166C7C0FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39hkHjKKpdGclg1Ikc-Gd84Siec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.mft
Manifest number: 0287
Signing time: Sun 28 Jun 2026 07:01:17 +0000
Manifest this update: Sun 28 Jun 2026 07:01:17 +0000
Manifest next update: Mon 29 Jun 2026 07:01:17 +0000
Files and hashes: 1: 2qvSkbHTsb98tl7LYwqPesWPH0g.roa (hash: Y4264CBO/wnBYQA3v/iM8WdJyQ6sBIxNEIMB+ic9wcM=)
2: 39hkHjKKpdGclg1Ikc-Gd84Siec.crl (hash: Qrh+HbVUklfjFY/XCYBjo7Nv8aJ+zmIwaWApAZdbmvA=)
3: eOukcSE4vv2_C-0yT3bFz9tAp8Q.roa (hash: ni8P4L+TMFDjolGG4Odq13TtGL18OXau4ZR/dJyb4Yk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.mft
rsync://rpki.ripe.net/repository/DEFAULT/39hkHjKKpdGclg1Ikc-Gd84Siec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Jun 2026 03:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:0d:08:55:98:f5:cf:e4:33:d4:91:5e:11:66:c7:c0:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd8641e328aa5d19c960d4891cf8677ce1289e7
Validity
Not Before: Jun 28 07:01:17 2026 GMT
Not After : Jun 29 07:01:17 2026 GMT
Subject: CN=1048c770a88a5ac7008d2321e7c7c435f66638b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ed:00:46:30:2b:2f:0f:9e:ed:86:fc:de:bc:
b2:e5:c1:ba:47:e9:88:48:5d:1c:1d:46:8b:2e:ba:
6c:cd:da:38:0d:35:45:a3:d3:fd:43:f9:f9:07:8a:
62:cd:9c:f1:10:f4:91:7d:da:b1:8e:f2:54:01:3c:
c2:cf:20:07:b9:41:57:b6:b2:72:d1:99:c8:82:9b:
c5:70:1a:9d:17:9e:75:33:ca:b1:9e:77:01:74:fe:
b7:c5:73:fa:ea:c4:17:ed:23:4e:65:51:ee:4f:86:
5e:ec:49:47:d7:8b:50:d6:c6:59:19:cb:26:e3:ae:
49:64:50:7f:12:a2:11:f0:4b:1a:19:2f:68:9a:96:
d4:1b:48:1f:d7:c0:f8:c9:47:1a:84:1c:a7:22:57:
43:e6:f4:14:80:7c:41:0f:77:fe:0d:d2:6c:16:30:
ea:24:0d:68:ec:f4:69:c7:73:a6:c9:1d:a7:1c:41:
99:42:d8:0e:3e:4c:55:a7:d4:a2:51:11:ac:c2:b2:
1c:3a:a2:68:61:95:58:03:9d:f3:3a:dc:46:d4:24:
eb:2b:30:46:76:e7:7c:79:db:cb:14:63:bd:9d:82:
d8:d7:8c:10:d7:7f:5b:09:06:fc:c5:ee:b6:6a:85:
59:da:9e:c1:9e:06:0f:75:28:91:b5:81:a7:98:0b:
47:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:48:C7:70:A8:8A:5A:C7:00:8D:23:21:E7:C7:C4:35:F6:66:38:B3
X509v3 Authority Key Identifier:
keyid:DF:D8:64:1E:32:8A:A5:D1:9C:96:0D:48:91:CF:86:77:CE:12:89:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39hkHjKKpdGclg1Ikc-Gd84Siec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:62:5f:09:cb:95:7f:09:cc:03:4b:2c:9d:da:b4:f2:41:e2:
76:31:60:8c:c5:b3:31:8d:5f:2f:7c:76:25:a7:b8:d7:e6:e3:
0c:fb:2a:22:d0:8a:16:bd:a9:73:de:60:a0:4e:60:e6:d2:ed:
dc:6c:2a:e7:90:32:3a:86:46:a9:e7:a9:9b:a9:53:cb:90:e2:
79:a3:66:7b:2a:5d:ad:49:f8:34:58:e7:58:50:fc:c8:6d:bc:
72:7a:33:74:b1:af:59:7e:0d:44:00:05:8f:5f:da:4b:8a:25:
1c:0d:e1:5c:9a:d0:59:8f:43:d5:9d:58:c1:f5:65:9d:b8:7a:
37:0e:5a:33:76:44:9d:a6:ba:14:83:90:7a:75:e4:a6:f7:a8:
b2:7b:81:87:10:93:96:18:3b:03:97:99:39:0b:19:2c:bf:d6:
40:fc:03:f1:a3:d3:32:31:9a:5c:b2:82:08:2d:3c:35:b2:f8:
98:4c:6d:ad:a4:62:cf:6d:3d:fc:05:10:0a:48:ee:2c:7c:91:
d8:20:ff:d9:60:98:ba:f9:96:6b:39:61:44:1b:17:63:89:6b:
8a:84:8c:a9:0b:e8:6e:06:a2:ea:c1:0c:8b:9c:4c:2a:11:28:
d9:59:01:ff:21:60:c3:a9:72:a4:cc:ba:4e:61:71:86:e9:b1:
9f:51:ad:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8NCFWY9c/kM9SRXhFmx8D/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmZDg2NDFlMzI4YWE1ZDE5Yzk2MGQ0ODkxY2Y4Njc3Y2Ux
Mjg5ZTcwHhcNMjYwNjI4MDcwMTE3WhcNMjYwNjI5MDcwMTE3WjAzMTEwLwYDVQQD
EygxMDQ4Yzc3MGE4OGE1YWM3MDA4ZDIzMjFlN2M3YzQzNWY2NjYzOGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtO0ARjArLw+e7Yb83ryy5cG6R+mI
SF0cHUaLLrpszdo4DTVFo9P9Q/n5B4pizZzxEPSRfdqxjvJUATzCzyAHuUFXtrJy
0ZnIgpvFcBqdF551M8qxnncBdP63xXP66sQX7SNOZVHuT4Ze7ElH14tQ1sZZGcsm
465JZFB/EqIR8EsaGS9ompbUG0gf18D4yUcahBynIldD5vQUgHxBD3f+DdJsFjDq
JA1o7PRpx3OmyR2nHEGZQtgOPkxVp9SiURGswrIcOqJoYZVYA53zOtxG1CTrKzBG
dud8edvLFGO9nYLY14wQ139bCQb8xe62aoVZ2p7BngYPdSiRtYGnmAtHtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBBIx3CoilrHAI0jIefHxDX2ZjizMB8GA1UdIwQY
MBaAFN/YZB4yiqXRnJYNSJHPhnfOEonnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzloa0hqS0twZEdjbGcxSWtjLUdkODRTaWVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8xZTNlYjQtNWRjZi00N2Q5LWJjNDYt
ZTNmYzUzNzkxNDkwLzEvMzloa0hqS0twZEdjbGcxSWtjLUdkODRTaWVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi8xZTNlYjQtNWRjZi00N2Q5LWJjNDYtZTNmYzUzNzkxNDkw
LzEvMzloa0hqS0twZEdjbGcxSWtjLUdkODRTaWVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcGJfCcuV
fwnMA0ssndq08kHidjFgjMWzMY1fL3x2Jae41+bjDPsqItCKFr2pc95goE5g5tLt
3Gwq55AyOoZGqeepm6lTy5DieaNmeypdrUn4NFjnWFD8yG28cnozdLGvWX4NRAAF
j1/aS4olHA3hXJrQWY9D1Z1YwfVlnbh6Nw5aM3ZEnaa6FIOQenXkpveosnuBhxCT
lhg7A5eZOQsZLL/WQPwD8aPTMjGaXLKCCC08NbL4mExtraRiz209/AUQCkjuLHyR
2CD/2WCYuvmWazlhRBsXY4lrioSMqQvobgai6sEMi5xMKhEo2VkB/yFgw6lypMy6
TmFxhumxn1Gtrw==
-----END CERTIFICATE-----
Generated at Sun Jun 28 12:12:57 2026 by rpki-client