Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft
File: R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft (raw, json)
Hash identifier: vAIgG9uWICCKCPrEUCsD0Z/Rn/ICTSEfsdIJFu35OjM=
Subject key identifier: BE:5A:28:9B:9D:F3:91:67:F8:18:D3:35:6D:F0:0D:53:27:61:BD:B4
Authority key identifier: 47:7F:4B:6E:C4:34:71:57:C4:D1:3E:F0:E7:AB:E1:29:0A:0B:F5:7C
Certificate issuer: /CN=477f4b6ec4347157c4d13ef0e7abe1290a0bf57c
Certificate serial: 01A15966B5A76D7A1FBCFFD45CDC230A544C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R39LbsQ0cVfE0T7w56vhKQoL9Xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft
Manifest number: 0ABA
Signing time: Tue 20 Oct 2026 13:01:05 +0000
Manifest this update: Tue 20 Oct 2026 13:01:05 +0000
Manifest next update: Wed 21 Oct 2026 13:01:05 +0000
Files and hashes: 1: R39LbsQ0cVfE0T7w56vhKQoL9Xw.crl (hash: N3lVd6e6ggQ92FdUo8Y2ZP06ESrmIssNqANG2HBh6GE=)
2: WTosev28vey7PdFKL1WZrUA91xA.roa (hash: ekI8w6gEsIIlqKjdpz2Fpya3mgwzySEILZV+ipAS2Wc=)
3: oRnNr1FlB4M-Ncw9fTwXwhAU40Q.roa (hash: y4K7So4r58lf5Yn7iRGJ9lrvo2ssl9GpvWxcRF0or7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/R39LbsQ0cVfE0T7w56vhKQoL9Xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 13:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:59:66:b5:a7:6d:7a:1f:bc:ff:d4:5c:dc:23:0a:54:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=477f4b6ec4347157c4d13ef0e7abe1290a0bf57c
Validity
Not Before: Oct 20 13:01:05 2026 GMT
Not After : Oct 21 13:01:05 2026 GMT
Subject: CN=be5a289b9df39167f818d3356df00d532761bdb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b2:2d:9e:4c:04:86:de:6f:9f:90:2e:7a:fc:
78:1f:a6:94:08:d1:7a:e3:7a:73:d8:9c:93:97:74:
12:c2:02:6e:12:41:92:8e:60:91:64:51:d1:f7:0a:
d5:b7:cd:85:07:3f:7c:05:41:32:f2:d0:11:6f:13:
37:31:63:41:f5:82:10:d8:02:83:d6:cb:89:10:a3:
6b:27:93:bb:0f:7f:47:2e:58:e0:a5:40:fb:a1:59:
e7:02:5b:85:20:35:fd:9e:8d:c6:db:7d:a2:8c:28:
31:dd:ff:95:33:49:58:e6:6f:b9:6f:29:95:24:22:
fa:d5:db:10:e7:40:0d:b1:39:72:c9:db:2d:16:23:
b4:69:8f:21:03:d4:b1:e2:3f:50:44:e5:f4:62:7e:
ee:9e:d5:f7:db:24:d5:a1:64:ff:aa:bc:a6:ac:0f:
b3:5a:74:b1:58:4d:98:23:1d:2c:99:68:67:aa:e4:
7b:ec:a2:80:f7:b0:ef:12:f5:5b:25:12:1c:6b:ff:
a1:3c:91:27:2b:dc:3d:19:56:36:a1:0b:23:ff:cb:
8c:40:ba:d1:34:f1:d1:18:09:fb:84:bd:1e:ec:96:
75:6b:b7:16:81:80:28:68:51:37:2a:9c:cd:65:83:
85:5f:17:77:35:cc:0e:f4:1f:f3:16:78:2a:a6:32:
0d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:5A:28:9B:9D:F3:91:67:F8:18:D3:35:6D:F0:0D:53:27:61:BD:B4
X509v3 Authority Key Identifier:
keyid:47:7F:4B:6E:C4:34:71:57:C4:D1:3E:F0:E7:AB:E1:29:0A:0B:F5:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R39LbsQ0cVfE0T7w56vhKQoL9Xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:6b:95:18:44:8f:38:3a:eb:ad:b7:b5:9b:3e:dd:b1:6c:bd:
e7:14:02:a5:87:e7:5b:54:6d:1b:68:bf:b5:b5:59:02:d8:5a:
0a:73:50:00:61:77:e0:38:b7:92:a6:d8:09:67:d9:27:32:a9:
08:91:26:db:09:0a:9d:ca:61:e9:82:82:2d:55:01:17:29:e1:
96:bf:0d:57:43:a6:b8:c7:97:bd:82:c1:ae:6a:07:6d:91:5a:
6a:a2:d4:0f:f2:1b:2b:45:cc:1c:de:17:91:02:86:a6:f7:07:
56:0f:99:e7:d0:57:c9:d0:e0:08:eb:18:ed:0b:73:af:d6:5f:
ea:41:c4:bc:a1:fc:d9:ed:20:73:b2:04:b8:d2:9f:b6:bf:ce:
de:af:86:90:99:24:49:4d:bf:45:ec:15:de:ab:2e:b6:8f:dd:
cd:90:a7:93:36:0f:95:3f:45:ad:9c:e8:78:1a:17:14:2f:45:
bf:70:bb:d5:1a:33:8d:1c:08:2a:ca:a1:90:f2:03:d9:6d:d9:
fa:8e:23:e4:31:94:dc:e2:e8:d9:e7:e9:ab:e2:b1:68:d0:66:
ff:27:ef:14:ff:4c:3d:db:60:2c:a6:4c:db:37:62:dd:be:ed:
b8:87:f0:39:09:13:35:5b:92:d6:38:ec:a0:91:e5:74:80:ba:
8a:83:e5:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 23:48:29 2026 by rpki-client