Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft
File: R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft (raw, json)
Hash identifier: 7S/TtUmdwh8FWgXwbafZvSPYutpH73Pu3ijKVA5Ng/w=
Subject key identifier: CD:B2:EC:34:4C:5C:00:06:FE:41:45:97:C0:10:BF:13:A2:C4:DD:A0
Authority key identifier: 47:7F:4B:6E:C4:34:71:57:C4:D1:3E:F0:E7:AB:E1:29:0A:0B:F5:7C
Certificate issuer: /CN=477f4b6ec4347157c4d13ef0e7abe1290a0bf57c
Certificate serial: 019E322A01963A335CBE57A312E20F33F5F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R39LbsQ0cVfE0T7w56vhKQoL9Xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft
Manifest number: 0918
Signing time: Sat 16 May 2026 19:01:13 +0000
Manifest this update: Sat 16 May 2026 19:01:13 +0000
Manifest next update: Sun 17 May 2026 19:01:13 +0000
Files and hashes: 1: R39LbsQ0cVfE0T7w56vhKQoL9Xw.crl (hash: XEdIxtbMMHJ7XugI/ob/VEabJRdwkk8m0UVy91izCxQ=)
2: WTosev28vey7PdFKL1WZrUA91xA.roa (hash: ekI8w6gEsIIlqKjdpz2Fpya3mgwzySEILZV+ipAS2Wc=)
3: oRnNr1FlB4M-Ncw9fTwXwhAU40Q.roa (hash: y4K7So4r58lf5Yn7iRGJ9lrvo2ssl9GpvWxcRF0or7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/R39LbsQ0cVfE0T7w56vhKQoL9Xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:32:2a:01:96:3a:33:5c:be:57:a3:12:e2:0f:33:f5:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=477f4b6ec4347157c4d13ef0e7abe1290a0bf57c
Validity
Not Before: May 16 19:01:13 2026 GMT
Not After : May 17 19:01:13 2026 GMT
Subject: CN=cdb2ec344c5c0006fe414597c010bf13a2c4dda0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f6:3a:f7:2e:3c:a3:63:3d:f4:66:fc:68:84:
0e:2d:9c:ca:e0:64:de:85:30:eb:c4:6d:a8:01:96:
15:10:40:e8:cd:86:d5:64:0a:51:02:db:2c:76:d7:
ab:c2:6b:7c:dc:bd:28:8e:73:4f:25:35:65:cc:c8:
b8:53:27:99:19:d0:0a:eb:a9:c1:42:e3:ca:cb:4e:
5a:6e:2b:e1:48:ad:7c:c9:c7:87:57:1b:36:3d:fa:
98:52:20:8b:7a:10:6a:69:9b:f1:59:ce:ce:65:fe:
90:e7:06:8d:7b:66:d9:46:cf:c2:c2:04:d9:3a:d0:
67:ae:75:fb:2d:8b:b4:6c:e1:4f:54:64:81:ef:bc:
3e:02:16:d8:89:9c:74:10:15:e5:36:0b:2c:ca:ec:
01:a9:8c:5f:00:f5:4b:6b:91:b1:8d:c8:59:31:0d:
45:07:7c:37:b5:18:5f:67:d3:58:70:92:4b:a8:e6:
0a:49:56:2c:c3:27:75:b4:32:87:02:cc:92:9e:78:
5a:d3:8a:d5:e2:d6:0d:3f:5c:25:b1:21:da:4d:bb:
7d:e8:f5:b8:46:af:88:5c:34:07:63:4c:b5:65:80:
7a:e0:65:a8:26:ca:09:09:ef:d4:20:9a:8c:1b:47:
96:74:c7:36:22:8f:fa:60:36:77:a6:b9:bd:01:ac:
75:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B2:EC:34:4C:5C:00:06:FE:41:45:97:C0:10:BF:13:A2:C4:DD:A0
X509v3 Authority Key Identifier:
keyid:47:7F:4B:6E:C4:34:71:57:C4:D1:3E:F0:E7:AB:E1:29:0A:0B:F5:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R39LbsQ0cVfE0T7w56vhKQoL9Xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:36:30:e1:cf:8e:68:ca:b3:ff:b7:5c:78:7e:68:e2:ac:69:
0c:a1:8c:c3:8c:f7:d0:10:ca:1f:27:1c:94:9d:0c:f2:b6:45:
28:87:8c:8a:05:ee:4b:1e:fb:02:dd:06:3b:0c:1f:7d:ea:6c:
a4:f6:28:72:2d:76:e4:dc:41:c3:ba:3f:e1:3d:c3:3b:c8:8b:
4c:dd:b1:aa:93:69:f7:bb:72:dd:b0:11:c5:23:47:03:62:06:
73:82:2c:a3:7f:f4:65:29:bf:4c:5a:66:3a:35:f2:ce:8f:02:
2f:47:c4:40:5d:77:14:d2:eb:c1:df:dd:58:2f:2b:9f:d4:66:
ce:43:bb:44:4a:0a:52:b8:9d:3f:88:1d:a5:c0:91:23:0c:83:
ff:bb:d3:78:00:ce:00:47:46:b8:0c:e0:8a:22:ac:12:46:84:
2c:af:e2:a4:04:24:a2:40:22:92:41:07:d8:4f:83:6a:d5:bb:
60:57:de:30:06:11:36:68:7d:31:ce:4f:bc:cd:93:c6:ff:cb:
b3:35:10:0b:bf:d7:15:98:d9:1e:12:d9:16:fc:89:2c:36:c5:
08:0c:33:53:4e:83:b1:79:39:d8:6e:90:98:c1:d6:db:4c:86:
7f:1d:f0:cc:86:79:0a:a2:f4:d0:47:84:71:33:32:63:a4:5c:
48:23:0d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 21:14:13 2026 by rpki-client