Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft
File: R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft (raw, json)
Hash identifier: olNuCneVh6e9hTH5isLoOukTIoXmWTAKWgkhPdK6SSQ=
Subject key identifier: 56:38:A7:53:C2:C8:A8:F7:F4:F1:8C:4F:79:FE:E5:3D:9D:E3:FF:E9
Authority key identifier: 47:7F:4B:6E:C4:34:71:57:C4:D1:3E:F0:E7:AB:E1:29:0A:0B:F5:7C
Certificate issuer: /CN=477f4b6ec4347157c4d13ef0e7abe1290a0bf57c
Certificate serial: 01A14FBEF12DAF0BB7DA33F2D429A1D57B69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R39LbsQ0cVfE0T7w56vhKQoL9Xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft
Manifest number: 0AB5
Signing time: Sun 18 Oct 2026 16:01:15 +0000
Manifest this update: Sun 18 Oct 2026 16:01:15 +0000
Manifest next update: Mon 19 Oct 2026 16:01:15 +0000
Files and hashes: 1: R39LbsQ0cVfE0T7w56vhKQoL9Xw.crl (hash: NFMI7q2EAr0IdQ/8wThixTNJeCHW+0Bny345cfOmtPc=)
2: WTosev28vey7PdFKL1WZrUA91xA.roa (hash: ekI8w6gEsIIlqKjdpz2Fpya3mgwzySEILZV+ipAS2Wc=)
3: oRnNr1FlB4M-Ncw9fTwXwhAU40Q.roa (hash: y4K7So4r58lf5Yn7iRGJ9lrvo2ssl9GpvWxcRF0or7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/R39LbsQ0cVfE0T7w56vhKQoL9Xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 16:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4f:be:f1:2d:af:0b:b7:da:33:f2:d4:29:a1:d5:7b:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=477f4b6ec4347157c4d13ef0e7abe1290a0bf57c
Validity
Not Before: Oct 18 16:01:15 2026 GMT
Not After : Oct 19 16:01:15 2026 GMT
Subject: CN=5638a753c2c8a8f7f4f18c4f79fee53d9de3ffe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a3:45:43:50:b4:3f:76:c0:c1:77:cd:6f:8b:
c7:c0:28:bb:33:4a:d3:53:83:d1:94:44:ea:fc:9d:
04:32:d2:59:5a:cb:f6:b9:13:78:86:8c:b5:af:11:
b7:c4:f9:c8:ec:a0:0f:a4:ba:7b:fb:b6:d9:60:da:
42:6f:34:1f:8a:ab:9f:d2:93:d0:32:8e:bc:7b:a8:
90:d8:38:4d:d1:5c:b6:3b:8d:ce:b1:eb:d1:52:3b:
9a:41:4f:df:15:f7:db:77:b0:be:f1:00:7f:17:fa:
2b:e9:15:ea:7e:fd:20:0e:7d:d4:d4:c0:ca:4e:2b:
11:cc:88:ed:d4:95:ce:dc:36:bb:74:30:bb:fd:11:
dc:3d:eb:1a:eb:75:da:65:55:c5:aa:33:5a:df:13:
f6:81:d1:0c:b5:d1:f2:a2:75:12:92:6e:bd:83:16:
85:ed:fa:38:29:b3:34:53:6d:cf:ae:2c:70:d3:0a:
74:9c:db:db:07:77:65:d9:2c:57:84:39:c8:05:75:
e0:a9:34:2c:56:1e:97:af:3d:ff:f6:41:f2:20:45:
e5:05:b2:1c:01:4d:2c:8d:26:d5:aa:4c:ec:84:ab:
f4:77:5d:d9:4e:53:86:9d:ed:dd:18:a2:3d:7c:a3:
26:e2:16:5a:89:3c:68:7b:ec:9a:e1:5c:1a:2b:2d:
47:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:38:A7:53:C2:C8:A8:F7:F4:F1:8C:4F:79:FE:E5:3D:9D:E3:FF:E9
X509v3 Authority Key Identifier:
keyid:47:7F:4B:6E:C4:34:71:57:C4:D1:3E:F0:E7:AB:E1:29:0A:0B:F5:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R39LbsQ0cVfE0T7w56vhKQoL9Xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:b9:e6:96:a8:93:71:2a:a9:f8:cf:b6:99:2b:a3:bc:ea:86:
c2:0e:82:c8:69:e6:3b:0e:eb:17:9e:86:d7:dd:60:52:6e:1c:
37:7f:1e:f1:b1:b4:29:81:76:e1:8b:19:11:bb:ee:ff:ca:42:
ee:a9:d3:3f:ef:43:57:28:35:1b:60:35:9d:49:a1:b1:a2:02:
2f:b0:fa:14:b7:5c:f6:6c:35:a9:f1:83:1d:15:10:60:b5:b6:
f8:c4:1e:2e:91:fd:3d:3b:6d:50:1c:5d:21:5c:32:b5:f7:58:
19:1b:f3:91:c1:0c:58:63:93:05:6c:91:f7:ef:2f:0f:b2:5f:
19:56:25:09:f8:d9:ae:c9:93:41:d9:7a:1c:f4:a5:72:4f:cc:
8b:6f:06:f6:73:b7:d4:e9:ac:da:5f:b3:84:01:ef:f8:69:96:
31:46:18:49:03:02:20:c3:14:d6:33:0a:dd:b5:66:21:8f:05:
76:ee:4f:e6:c7:3c:16:2c:e6:6c:40:d2:5c:7d:27:58:bc:78:
06:bc:e2:f4:60:3d:4c:9e:49:6a:b3:9f:ec:e4:44:a7:35:f2:
ad:4a:48:00:ae:a2:6e:cd:39:ed:ca:b1:13:51:d1:71:e8:94:
a7:4e:bf:c1:10:ab:43:c3:c0:36:03:5d:26:92:2a:2a:90:6b:
2a:0d:51:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 01:44:16 2026 by rpki-client