Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.mft
File: 39BGr17cEZZAltwg9q8d5V2ckDA.mft (raw, json)
Hash identifier: xk8W77rDulx+a+gJYRtWmZjOJ/ybu5fU/nt/YKc+Kco=
Subject key identifier: 06:37:F3:97:2D:19:B9:11:9A:B1:74:F6:3A:38:65:1E:52:45:DB:83
Authority key identifier: DF:D0:46:AF:5E:DC:11:96:40:96:DC:20:F6:AF:1D:E5:5D:9C:90:30
Certificate issuer: /CN=dfd046af5edc11964096dc20f6af1de55d9c9030
Certificate serial: 019DD5E589FC47143310B5248A3027533F02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39BGr17cEZZAltwg9q8d5V2ckDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.mft
Manifest number: 07C2
Signing time: Tue 28 Apr 2026 21:01:23 +0000
Manifest this update: Tue 28 Apr 2026 21:01:23 +0000
Manifest next update: Wed 29 Apr 2026 21:01:23 +0000
Files and hashes: 1: 1R8Nv6bwHGDwo2mOtPOF_3tZNSM.asa (hash: tt15uIuTQgd6Syibc3srDH+USXZ4ejIXqOAjH/FfWt0=)
2: 39BGr17cEZZAltwg9q8d5V2ckDA.crl (hash: Ce63sXxrwTe4PcsTlV4zbVd08OYo/aTOdMKVT1CsMYc=)
3: QTUs2t29sOiO1bQndfZmKxNAYdQ.roa (hash: myzQSNEVPstuOfu5qsB9AEg4A9vQ4YhsK6/lq/QzmjU=)
4: V0dM0OGiOIRr_LANVdvcw5kopNw.roa (hash: LNRzC3fIfmhFsLHaDaO4AM9qxVQUMv8ErtHtGjlMGJw=)
5: sbN8EnhWE2l__QvXJmkc9vK_YUw.roa (hash: Uceuxsw6EIStQVLEZXyq2I0QPItxAW4XKZWxVvN6eTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/39BGr17cEZZAltwg9q8d5V2ckDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 14:21:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d5:e5:89:fc:47:14:33:10:b5:24:8a:30:27:53:3f:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd046af5edc11964096dc20f6af1de55d9c9030
Validity
Not Before: Apr 28 21:01:23 2026 GMT
Not After : Apr 29 21:01:23 2026 GMT
Subject: CN=0637f3972d19b9119ab174f63a38651e5245db83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:96:a7:b5:3b:98:6e:c8:58:59:de:09:0c:56:
28:96:da:3a:8d:c9:ad:09:24:8a:90:3a:21:3e:1e:
79:1b:2f:96:fe:a0:a3:d2:1f:7a:c7:bc:ee:59:1d:
fe:3d:a5:d3:6f:38:57:0e:04:2d:24:63:60:28:fd:
f3:37:73:65:df:fb:30:de:7f:da:04:8f:3f:b6:b9:
52:76:ae:14:25:cc:2b:ef:e1:1a:69:22:c0:46:fb:
a2:4b:d5:ba:5a:2d:19:1b:b7:f9:90:aa:b1:35:e2:
93:f7:73:71:63:16:90:53:0b:f6:45:77:5f:fb:fa:
88:26:e5:f5:4e:10:ee:b5:7c:ce:cf:ee:53:46:43:
68:a1:4f:0e:c1:92:9c:aa:b8:79:2e:07:a1:ea:3d:
19:35:5c:71:1d:9a:ba:f4:9f:8b:de:ed:43:ad:1c:
bf:1d:b2:9e:f3:0a:ec:7c:35:da:c0:7d:7f:d1:bb:
5a:89:cc:67:80:92:56:fe:b9:d7:53:cc:2d:d4:29:
b3:a6:17:99:92:53:dc:b8:ec:95:d3:8d:5f:f6:76:
7a:96:5b:04:3c:6b:f3:77:56:9b:9c:78:6e:fe:28:
71:24:e0:bb:1b:b3:2e:ef:74:1e:6c:13:74:3b:fe:
29:96:c2:02:73:f9:bc:9d:3d:73:fe:8d:81:4a:66:
34:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:37:F3:97:2D:19:B9:11:9A:B1:74:F6:3A:38:65:1E:52:45:DB:83
X509v3 Authority Key Identifier:
keyid:DF:D0:46:AF:5E:DC:11:96:40:96:DC:20:F6:AF:1D:E5:5D:9C:90:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39BGr17cEZZAltwg9q8d5V2ckDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:20:6a:f6:02:a3:1b:2f:99:42:4d:ef:a9:97:6e:5c:16:c5:
2e:15:a0:94:d3:d1:b8:af:1e:9b:e0:c9:98:7e:ec:d0:c6:9a:
b8:61:1f:81:5c:dd:66:55:95:b7:f1:ab:f9:4e:5f:56:c3:f7:
2e:95:c9:94:fb:ab:47:1b:54:6f:29:bb:e1:a8:2b:f7:d6:a0:
9c:f4:48:b3:2a:98:57:be:60:91:39:eb:fd:3e:2f:e4:b7:3c:
f2:1e:ab:d4:36:d6:17:f6:38:0c:8c:3a:9b:e1:43:b8:d3:dd:
a6:e1:b9:3b:37:bb:cc:b4:5e:bf:7a:87:6f:fc:ba:3a:70:6b:
aa:30:f8:9c:a2:bc:ff:05:8c:e3:3a:2b:9b:d5:f2:ea:29:34:
7d:04:59:3c:ab:41:d4:be:8b:43:d3:77:a8:35:5e:09:ea:47:
70:10:ce:c3:c7:73:fc:22:3b:35:39:b6:7d:f2:42:f8:c6:2c:
1f:27:3c:30:f7:ec:2f:d1:ec:32:e3:ef:93:f1:10:42:8c:e9:
c2:29:f1:91:62:bf:28:e6:30:8a:72:a2:7e:5d:06:9e:9e:67:
18:80:b6:3d:ee:42:b7:a1:2d:a5:9e:31:bd:8e:d6:2d:e4:c9:
c5:0a:4f:6a:51:17:25:e0:f5:7d:32:4e:a2:46:aa:db:04:f9:
2a:99:18:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 23:59:17 2026 by rpki-client