Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft
File: R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft (raw, json)
Hash identifier: ++28Q8htNaq55zCjDyhk7Sffw7DUfqYILURZ7BDkdAg=
Subject key identifier: 2E:B8:04:F1:5F:8F:67:FA:51:19:C5:2C:2A:43:69:E5:3D:49:AC:97
Authority key identifier: 47:7F:4B:6E:C4:34:71:57:C4:D1:3E:F0:E7:AB:E1:29:0A:0B:F5:7C
Certificate issuer: /CN=477f4b6ec4347157c4d13ef0e7abe1290a0bf57c
Certificate serial: 019F19E8701DF7018D7067531CED0403C756
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R39LbsQ0cVfE0T7w56vhKQoL9Xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft
Manifest number: 0990
Signing time: Tue 30 Jun 2026 19:01:31 +0000
Manifest this update: Tue 30 Jun 2026 19:01:31 +0000
Manifest next update: Wed 01 Jul 2026 19:01:31 +0000
Files and hashes: 1: R39LbsQ0cVfE0T7w56vhKQoL9Xw.crl (hash: x7uD4xbiZXSGItEnq0PYXKqi6gnSXktlE+0zjKUjhJY=)
2: WTosev28vey7PdFKL1WZrUA91xA.roa (hash: ekI8w6gEsIIlqKjdpz2Fpya3mgwzySEILZV+ipAS2Wc=)
3: oRnNr1FlB4M-Ncw9fTwXwhAU40Q.roa (hash: y4K7So4r58lf5Yn7iRGJ9lrvo2ssl9GpvWxcRF0or7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/R39LbsQ0cVfE0T7w56vhKQoL9Xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:e8:70:1d:f7:01:8d:70:67:53:1c:ed:04:03:c7:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=477f4b6ec4347157c4d13ef0e7abe1290a0bf57c
Validity
Not Before: Jun 30 19:01:31 2026 GMT
Not After : Jul 1 19:01:31 2026 GMT
Subject: CN=2eb804f15f8f67fa5119c52c2a4369e53d49ac97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ea:0f:10:bd:d6:67:7d:9b:85:bd:ce:e5:50:
ec:41:5e:6a:0d:10:cd:09:e4:38:cb:81:0f:08:1b:
56:58:62:ec:21:69:a8:b0:94:cd:5f:b0:87:f0:5a:
db:65:bf:d8:6d:17:fb:4d:34:eb:93:30:32:e1:3b:
7c:ed:fd:4b:2a:16:6a:58:6f:0f:e7:60:07:0e:8a:
8d:9a:04:fc:d7:8a:2d:47:3c:1e:9f:5a:35:03:fd:
a5:11:b5:1a:90:17:3f:37:f9:af:55:ff:41:cd:dd:
08:84:5f:96:68:94:eb:cf:36:3a:81:10:74:b7:c3:
1e:9c:0c:35:28:0e:a6:30:40:ae:bf:33:01:de:bc:
56:5d:c6:ef:cb:7b:e5:66:45:67:58:27:fe:c6:d0:
be:34:cb:14:93:a8:ce:40:46:b1:3f:96:5b:4d:b2:
d0:64:e9:95:ad:a9:37:33:e9:49:b0:47:93:09:79:
f9:cf:be:77:d8:e6:54:db:11:87:3f:c3:82:88:0d:
f2:64:76:43:31:a2:25:17:80:2f:20:f5:f9:0e:67:
84:4e:59:58:a7:1e:0e:e2:83:03:f4:cf:db:f0:47:
0d:ea:3f:a4:5f:6d:bb:d6:ea:44:f1:bd:0f:8b:4e:
b6:90:c2:25:98:16:c4:cb:b3:a6:66:29:27:dd:31:
aa:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:B8:04:F1:5F:8F:67:FA:51:19:C5:2C:2A:43:69:E5:3D:49:AC:97
X509v3 Authority Key Identifier:
keyid:47:7F:4B:6E:C4:34:71:57:C4:D1:3E:F0:E7:AB:E1:29:0A:0B:F5:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R39LbsQ0cVfE0T7w56vhKQoL9Xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:7e:79:aa:7b:90:70:47:7a:35:40:75:7b:31:c3:55:dc:15:
ae:d1:d3:6d:89:83:89:d6:84:42:9d:64:12:79:be:19:c9:95:
74:44:07:fd:06:c2:ef:aa:4e:ea:99:46:b5:ad:8b:fd:2d:03:
20:44:2c:7f:f7:2b:dc:57:38:28:59:36:a4:df:69:0c:02:bb:
cb:c2:c4:c1:7a:31:6f:e5:fa:a8:fa:7d:50:86:a9:11:f5:bc:
9b:18:38:29:88:51:48:8b:6c:b1:a0:06:be:41:5d:64:6b:da:
87:c0:8c:51:7c:2b:2d:66:65:65:13:f3:58:cc:bc:22:40:17:
da:ff:4f:b1:62:2f:57:45:5c:f6:60:4e:16:0f:17:75:54:d0:
78:be:07:a7:96:30:5b:22:ec:d6:e3:a5:cd:69:cc:e1:c4:dd:
b3:ff:37:5d:f7:b1:c8:3e:ca:b4:74:4b:6c:b0:a7:e8:3e:e3:
13:ea:ab:3f:c4:f5:28:37:f8:e9:64:3e:0a:03:34:a3:57:8a:
c6:8e:be:78:ce:ea:1d:fe:93:37:5d:0f:4e:7c:a8:82:9e:08:
42:f0:fd:38:07:ab:f9:b5:1d:97:d0:91:69:3b:6a:8c:9a:d2:
54:5e:ef:1b:c3:88:fd:3f:8a:68:a3:a2:04:26:ab:73:fe:4f:
f9:60:f1:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:42:53 2026 by rpki-client