Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft
File: R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft (raw, json)
Hash identifier: ydaFvAbkGd8BCZsTffSZADBGSRMT11RWwLcLucQQ55A=
Subject key identifier: 2E:80:9B:43:33:DA:BA:23:78:78:3C:A0:B7:96:0B:09:3D:C8:D1:3E
Authority key identifier: 47:7F:4B:6E:C4:34:71:57:C4:D1:3E:F0:E7:AB:E1:29:0A:0B:F5:7C
Certificate issuer: /CN=477f4b6ec4347157c4d13ef0e7abe1290a0bf57c
Certificate serial: 019D390A4E0F3C731CA182DD8D9DC854C2E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R39LbsQ0cVfE0T7w56vhKQoL9Xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft
Manifest number: 0897
Signing time: Sun 29 Mar 2026 10:01:09 +0000
Manifest this update: Sun 29 Mar 2026 10:01:09 +0000
Manifest next update: Mon 30 Mar 2026 10:01:09 +0000
Files and hashes: 1: R39LbsQ0cVfE0T7w56vhKQoL9Xw.crl (hash: s+1z3F77UhaDC9000+SL2SzMNZ6l91gepdhoti0Tfgk=)
2: WTosev28vey7PdFKL1WZrUA91xA.roa (hash: ekI8w6gEsIIlqKjdpz2Fpya3mgwzySEILZV+ipAS2Wc=)
3: oRnNr1FlB4M-Ncw9fTwXwhAU40Q.roa (hash: y4K7So4r58lf5Yn7iRGJ9lrvo2ssl9GpvWxcRF0or7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/R39LbsQ0cVfE0T7w56vhKQoL9Xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:4e:0f:3c:73:1c:a1:82:dd:8d:9d:c8:54:c2:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=477f4b6ec4347157c4d13ef0e7abe1290a0bf57c
Validity
Not Before: Mar 29 10:01:09 2026 GMT
Not After : Mar 30 10:01:09 2026 GMT
Subject: CN=2e809b4333daba2378783ca0b7960b093dc8d13e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b5:8d:8f:39:55:f7:bb:66:54:1c:2b:2d:62:
9c:93:8d:0d:f7:5b:72:bd:c2:0b:b6:41:7f:97:e4:
01:9a:dd:a4:4d:25:bd:9b:82:c5:85:60:d7:23:fb:
2d:73:c2:b4:69:49:e9:66:a0:b5:0f:5d:2f:2b:b9:
18:81:cb:51:6e:ef:3e:e4:e3:99:2d:28:37:f2:d5:
f9:5d:73:b2:fd:a8:16:82:76:ef:a9:ca:ae:7d:53:
13:7d:11:e3:8d:2e:fc:31:54:2a:ca:20:6e:fe:9b:
72:1e:f4:e7:df:a1:34:4e:79:07:33:42:25:fd:5a:
b1:79:d4:90:dc:cf:fc:00:fe:e9:cd:83:08:3d:ca:
43:b4:f8:f2:e2:e2:04:54:02:6a:74:39:57:b4:44:
66:47:c7:c0:94:86:76:1a:7b:9c:01:71:3e:9b:fc:
17:19:a7:3e:bf:b0:95:79:25:e4:4d:49:ec:e0:f5:
09:de:45:1b:bc:6d:a3:b6:42:d2:94:b8:5d:e3:09:
5f:ac:75:7c:60:06:95:99:96:3f:bc:a0:7a:63:06:
fd:83:a3:03:6c:5b:c2:dc:9e:83:18:0e:76:1d:21:
aa:75:5e:fb:6e:f5:18:c9:43:ac:19:ff:a9:e4:1c:
c9:de:de:a6:a1:78:ba:fc:4d:b0:6e:f1:f6:bc:ae:
76:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:80:9B:43:33:DA:BA:23:78:78:3C:A0:B7:96:0B:09:3D:C8:D1:3E
X509v3 Authority Key Identifier:
keyid:47:7F:4B:6E:C4:34:71:57:C4:D1:3E:F0:E7:AB:E1:29:0A:0B:F5:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R39LbsQ0cVfE0T7w56vhKQoL9Xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:a3:b5:6b:cf:74:bf:a4:c6:3e:8a:bb:80:4a:2b:82:e2:79:
45:1f:21:19:c5:b2:ea:f4:58:bf:ff:ee:59:8b:33:e6:e2:f7:
61:a5:f9:0f:2e:6b:aa:2b:0c:d9:5a:33:a9:c5:94:e3:b7:9a:
af:c6:df:13:08:46:b0:8f:d6:5e:00:aa:05:5a:85:f8:4a:67:
52:3a:4f:04:24:fe:5c:30:69:73:ad:36:96:e8:4c:f3:88:01:
08:fc:85:16:a8:4b:fc:28:e7:9e:02:e6:75:64:1d:c5:48:11:
85:a1:97:54:d6:7f:7e:19:be:bb:f2:8e:f9:cc:f9:c0:24:c0:
cf:e5:bf:0c:fc:f1:78:7d:c3:ac:b1:ba:4e:88:e4:5f:63:98:
0d:ff:db:fc:78:19:b3:3b:5c:69:78:51:2b:14:3f:5b:31:b2:
35:bc:25:39:e2:8e:a0:cc:4c:c6:a9:a6:fe:9e:a9:cb:6b:a3:
fc:9b:42:3d:ae:99:58:38:6c:32:20:15:a8:2c:0e:1b:9c:c1:
5c:b6:d4:1c:da:bf:aa:74:27:27:f3:ed:09:c8:c8:a1:c9:9a:
39:da:8d:e8:66:3b:27:b0:38:db:30:a0:fd:f2:9f:e6:ca:40:
44:07:0b:92:1f:39:ef:cf:7c:94:28:37:de:78:9e:c6:82:1d:
48:41:8f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:45 2026 by rpki-client