Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.mft
File: 39hkHjKKpdGclg1Ikc-Gd84Siec.mft (raw, json)
Hash identifier: So8eu9m70r4rbvz77KSgZ4FunKo7BaV6VNZk1Viu5t8=
Subject key identifier: B1:7F:44:FB:2F:14:03:8E:6B:66:D3:E0:34:3D:BA:08:3A:8D:0A:AC
Authority key identifier: DF:D8:64:1E:32:8A:A5:D1:9C:96:0D:48:91:CF:86:77:CE:12:89:E7
Certificate issuer: /CN=dfd8641e328aa5d19c960d4891cf8677ce1289e7
Certificate serial: 019D31F4F8A774354DF4ED9CECA27152D61B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39hkHjKKpdGclg1Ikc-Gd84Siec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.mft
Manifest number: 0191
Signing time: Sat 28 Mar 2026 01:00:31 +0000
Manifest this update: Sat 28 Mar 2026 01:00:31 +0000
Manifest next update: Sun 29 Mar 2026 01:00:31 +0000
Files and hashes: 1: 2qvSkbHTsb98tl7LYwqPesWPH0g.roa (hash: Y4264CBO/wnBYQA3v/iM8WdJyQ6sBIxNEIMB+ic9wcM=)
2: 39hkHjKKpdGclg1Ikc-Gd84Siec.crl (hash: wzIeUcmfjuGk4ZcTBpdhjJ00I6yy/mhp2hfE1R0SQj0=)
3: eOukcSE4vv2_C-0yT3bFz9tAp8Q.roa (hash: ni8P4L+TMFDjolGG4Odq13TtGL18OXau4ZR/dJyb4Yk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.mft
rsync://rpki.ripe.net/repository/DEFAULT/39hkHjKKpdGclg1Ikc-Gd84Siec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:31:f4:f8:a7:74:35:4d:f4:ed:9c:ec:a2:71:52:d6:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd8641e328aa5d19c960d4891cf8677ce1289e7
Validity
Not Before: Mar 28 01:00:31 2026 GMT
Not After : Mar 29 01:00:31 2026 GMT
Subject: CN=b17f44fb2f14038e6b66d3e0343dba083a8d0aac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:dc:a8:5e:0f:04:58:23:66:31:a1:57:92:19:
76:45:83:05:0c:da:eb:d2:04:5b:e0:2d:c1:dd:0e:
3d:64:6d:63:8b:5a:a8:47:db:45:7c:80:04:ad:48:
0c:65:6b:f0:08:25:73:91:b1:85:13:4c:4c:88:e6:
5e:1d:10:0a:5d:22:3f:1a:d7:92:13:7c:3a:6c:2f:
c9:70:af:88:46:d8:1a:7f:6b:41:8f:11:93:f6:de:
a7:73:f8:bb:76:23:30:63:1b:a2:6f:a9:8d:9e:08:
57:33:49:f5:3f:30:f7:04:4a:19:90:90:9c:98:3a:
f2:63:d6:31:6a:2b:c7:ff:d6:1d:0b:34:e1:c0:b7:
7f:52:06:f0:19:b5:84:ea:7c:74:98:48:6f:12:2b:
c0:38:8d:57:db:9e:84:a5:47:98:50:20:5d:6c:3a:
71:05:06:93:c1:29:f0:9c:ba:76:a9:05:fd:1a:fc:
82:6f:9a:16:35:22:44:b4:e7:9d:15:cc:1d:3e:68:
4e:0b:7c:7d:64:12:f9:04:30:90:c7:e2:26:df:b7:
8c:57:ac:cb:be:da:a8:75:d5:d1:ce:04:10:2d:54:
a1:b3:4e:59:a2:b6:b2:e7:20:4b:c1:58:6b:40:c7:
b4:64:99:fc:77:d3:95:81:93:ca:ff:2c:a6:46:e7:
4f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:7F:44:FB:2F:14:03:8E:6B:66:D3:E0:34:3D:BA:08:3A:8D:0A:AC
X509v3 Authority Key Identifier:
keyid:DF:D8:64:1E:32:8A:A5:D1:9C:96:0D:48:91:CF:86:77:CE:12:89:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39hkHjKKpdGclg1Ikc-Gd84Siec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:f4:ee:6c:ef:61:07:e6:da:c0:ab:f6:2c:e2:11:a0:55:9f:
cd:a1:66:b5:93:b2:ba:b1:e8:06:ae:e6:55:8e:70:5f:01:2b:
4f:77:39:03:ec:eb:62:c3:5e:2d:9e:51:69:fd:82:2d:0e:df:
d5:1b:79:14:7e:4e:b4:34:a0:1a:25:f8:f5:85:1a:f6:53:a7:
09:9a:cf:e8:66:bd:41:1a:97:04:2d:7e:e6:df:26:bb:e4:b8:
cb:14:06:77:30:ad:38:b4:72:c7:ab:5e:38:de:5c:46:48:6a:
46:c2:d4:d4:0c:4e:47:c6:d0:dc:15:6e:38:ef:53:b5:48:0c:
13:3b:01:20:36:6b:a1:54:98:d7:0f:42:ff:c1:f8:06:87:99:
96:d8:87:4a:12:41:75:64:56:5f:71:c0:34:22:22:dd:26:6f:
2d:34:a9:58:6e:7c:8f:a5:2a:29:15:6f:b2:4f:f1:ed:43:f6:
66:87:c2:f4:8c:7e:0b:85:df:20:d8:c5:e0:93:46:0e:66:ef:
6b:a4:00:3c:75:a0:f0:fe:f2:dc:32:74:ee:09:6d:51:6f:9a:
3a:6b:56:90:bf:79:d5:ba:a3:a4:81:11:25:1b:39:74:da:df:
82:c5:fe:8b:21:b7:07:47:c0:7c:cf:bb:13:a0:f2:ad:2b:9b:
1b:f2:7f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:53:46 2026 by rpki-client