Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft
File: R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft (raw, json)
Hash identifier: ndgBrTLTjwY8pU7jUUaiq24F9yMkFtB2noJC9Cc4CaU=
Subject key identifier: CF:A0:E0:C5:45:6D:1A:52:74:4F:EC:3F:99:3B:87:5E:7D:50:34:72
Authority key identifier: 47:7F:4B:6E:C4:34:71:57:C4:D1:3E:F0:E7:AB:E1:29:0A:0B:F5:7C
Certificate issuer: /CN=477f4b6ec4347157c4d13ef0e7abe1290a0bf57c
Certificate serial: 01A001A63D478AA9D30773BEE1178995E16D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R39LbsQ0cVfE0T7w56vhKQoL9Xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft
Manifest number: 0A08
Signing time: Fri 14 Aug 2026 19:01:06 +0000
Manifest this update: Fri 14 Aug 2026 19:01:06 +0000
Manifest next update: Sat 15 Aug 2026 19:01:06 +0000
Files and hashes: 1: R39LbsQ0cVfE0T7w56vhKQoL9Xw.crl (hash: YqrcUHF8LEKFnfkY+Dny8FgeWGBgWsJjHOEiPsCRVd4=)
2: WTosev28vey7PdFKL1WZrUA91xA.roa (hash: ekI8w6gEsIIlqKjdpz2Fpya3mgwzySEILZV+ipAS2Wc=)
3: oRnNr1FlB4M-Ncw9fTwXwhAU40Q.roa (hash: y4K7So4r58lf5Yn7iRGJ9lrvo2ssl9GpvWxcRF0or7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/R39LbsQ0cVfE0T7w56vhKQoL9Xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a6:3d:47:8a:a9:d3:07:73:be:e1:17:89:95:e1:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=477f4b6ec4347157c4d13ef0e7abe1290a0bf57c
Validity
Not Before: Aug 14 19:01:06 2026 GMT
Not After : Aug 15 19:01:06 2026 GMT
Subject: CN=cfa0e0c5456d1a52744fec3f993b875e7d503472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bc:fc:d4:e0:f4:9c:fd:2c:43:4a:db:f2:11:
fb:aa:e8:99:a7:f7:1e:17:db:3a:17:aa:02:cf:8e:
0e:f1:43:ee:ab:f9:2f:7f:e3:78:3c:23:23:93:b6:
58:61:f4:31:30:df:f3:3d:60:96:65:eb:29:c7:71:
3d:41:fb:12:2a:5b:5b:eb:d2:96:04:24:bb:ef:ab:
d4:69:45:d9:00:e0:47:4a:31:1d:82:ba:02:f0:76:
18:35:1e:67:d1:f2:18:d8:5e:fe:80:6b:ea:5d:24:
5f:1c:9a:13:22:9c:c1:67:7b:c3:16:fd:94:08:b4:
e1:01:77:4d:02:2a:31:eb:ba:8e:9a:82:58:f1:ee:
54:c4:1b:ca:c7:7b:30:53:05:ae:21:09:4a:36:df:
d4:09:df:81:3b:54:02:50:92:1a:9a:1f:4a:3f:78:
19:74:35:bc:6e:30:17:64:b7:5d:08:bd:22:fd:2e:
96:89:62:64:17:75:d2:74:6f:fe:91:92:07:57:94:
0a:d0:ac:68:fd:b0:39:ac:2e:d6:ea:6d:a2:3a:f3:
49:60:28:4b:0a:5c:60:81:2d:9f:03:ab:2f:14:71:
04:8d:a2:61:95:87:49:aa:11:c6:aa:62:ac:a9:78:
49:be:12:cc:c7:d2:48:fb:a5:6f:fc:57:4a:76:30:
a3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:A0:E0:C5:45:6D:1A:52:74:4F:EC:3F:99:3B:87:5E:7D:50:34:72
X509v3 Authority Key Identifier:
keyid:47:7F:4B:6E:C4:34:71:57:C4:D1:3E:F0:E7:AB:E1:29:0A:0B:F5:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R39LbsQ0cVfE0T7w56vhKQoL9Xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:9a:11:48:f0:0e:eb:87:ab:aa:35:f9:2f:82:3a:71:ac:99:
d7:f5:91:95:58:5e:8b:4d:02:3b:6b:d4:89:61:61:0f:2d:b8:
93:97:70:a8:66:3b:b9:63:a7:0d:87:44:84:3e:06:21:ee:0a:
a8:ca:a1:2a:fd:88:cb:1f:63:3c:ca:49:f7:59:c3:c6:ac:10:
8e:46:27:02:50:77:da:60:f8:84:fe:7f:93:30:97:8a:ef:56:
1c:77:42:ae:72:7f:5c:83:fd:2d:7c:ff:b9:e1:70:fb:80:b1:
f5:3b:fb:6a:6e:98:d7:22:c2:14:b1:90:b7:c8:45:9e:4b:30:
1b:4b:4e:83:f9:fb:e6:73:6e:74:3a:1a:7b:0e:6c:d8:67:77:
99:9c:5a:f2:9e:42:1e:41:2b:b9:f6:99:d0:bc:fa:21:cb:b6:
9e:9d:7b:1b:c3:2d:9a:d2:d0:9e:13:e7:cf:c9:ef:97:60:32:
01:37:61:f6:42:36:b4:c4:79:34:b7:83:62:49:e6:6d:98:03:
77:31:f5:68:9f:d2:e2:fa:f3:c4:c9:a6:94:57:7e:bc:e3:e2:
29:71:dc:23:13:b8:4f:9e:4f:0c:e9:3a:39:cd:a9:f0:7f:81:
9b:b9:4e:d3:7c:4f:9e:34:5d:54:4f:a4:51:82:de:94:2f:06:
f2:2c:0f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:23:47 2026 by rpki-client