Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/245873-1ca7-4b71-b220-edb0418cac4d/1/39D7xN6B7icnq6PpEK_NKlOmZAw.mft
File: 39D7xN6B7icnq6PpEK_NKlOmZAw.mft (raw, json)
Hash identifier: J9xfio1kkDL2sc9ZGI1po6rrh7LRNA3GkHBjkcRWn7k=
Subject key identifier: A6:67:A3:FC:9C:42:F8:DA:DB:C2:5E:F1:C6:08:E7:35:50:46:EF:5B
Authority key identifier: DF:D0:FB:C4:DE:81:EE:27:27:AB:A3:E9:10:AF:CD:2A:53:A6:64:0C
Certificate issuer: /CN=dfd0fbc4de81ee2727aba3e910afcd2a53a6640c
Certificate serial: 01A04084FDEE1371BBB72D94E15C0D4CE562
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39D7xN6B7icnq6PpEK_NKlOmZAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/245873-1ca7-4b71-b220-edb0418cac4d/1/39D7xN6B7icnq6PpEK_NKlOmZAw.mft
Manifest number: 0325
Signing time: Thu 27 Aug 2026 00:00:52 +0000
Manifest this update: Thu 27 Aug 2026 00:00:52 +0000
Manifest next update: Fri 28 Aug 2026 00:00:52 +0000
Files and hashes: 1: 39D7xN6B7icnq6PpEK_NKlOmZAw.crl (hash: woc+PElRh6gdB3BCI9eY+pD71F65fnhuh3G2YsYySG0=)
2: SbQQ2AN295Q5ndar8yL54sGGq4E.roa (hash: T6gv6dIwlGoFALLgqsw4xKZ6JgXOgV/2sxGYkLgA1c0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/245873-1ca7-4b71-b220-edb0418cac4d/1/39D7xN6B7icnq6PpEK_NKlOmZAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/245873-1ca7-4b71-b220-edb0418cac4d/1/39D7xN6B7icnq6PpEK_NKlOmZAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/39D7xN6B7icnq6PpEK_NKlOmZAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:84:fd:ee:13:71:bb:b7:2d:94:e1:5c:0d:4c:e5:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd0fbc4de81ee2727aba3e910afcd2a53a6640c
Validity
Not Before: Aug 27 00:00:52 2026 GMT
Not After : Aug 28 00:00:52 2026 GMT
Subject: CN=a667a3fc9c42f8dadbc25ef1c608e7355046ef5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:16:13:bc:4d:09:8b:64:11:4f:6e:1b:52:13:
5b:5a:2d:8b:8b:ad:65:13:fe:cf:88:66:56:ba:5d:
1f:cf:c1:50:f5:81:3b:02:e8:be:e7:7c:82:ed:ab:
65:bd:35:1f:95:8d:e1:7a:7b:e8:b5:09:02:c3:56:
7f:75:5f:67:60:ad:7b:dd:59:28:91:24:ad:95:de:
54:54:2c:fd:21:e3:0c:9d:13:05:6b:60:6e:d1:34:
63:54:dd:da:5b:6f:50:77:0d:c8:59:4d:d4:dc:ca:
23:4f:9a:d4:69:1c:76:30:0b:b5:50:3f:ce:1c:d6:
aa:d8:5f:2c:99:79:72:d4:96:ca:75:c9:1c:6a:a6:
80:05:a9:74:df:36:2f:65:ff:93:91:80:c6:66:be:
f1:17:57:80:8c:27:bb:49:00:f5:1c:a7:5e:f4:0d:
ca:1d:08:12:d0:8a:5d:fb:5d:63:14:cc:c7:76:a5:
c0:db:81:21:8b:a5:8a:f3:55:fe:8e:3d:0c:e3:e2:
b4:88:03:90:69:b2:39:42:82:f9:c9:1e:02:dc:ed:
86:c9:a8:f1:90:db:4e:59:0f:31:a0:71:9d:5a:64:
30:7c:0c:87:59:96:fe:87:73:5a:7d:c2:77:b3:69:
35:9d:5e:4b:7a:bc:9b:42:45:5a:fa:4a:24:ed:74:
64:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:67:A3:FC:9C:42:F8:DA:DB:C2:5E:F1:C6:08:E7:35:50:46:EF:5B
X509v3 Authority Key Identifier:
keyid:DF:D0:FB:C4:DE:81:EE:27:27:AB:A3:E9:10:AF:CD:2A:53:A6:64:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39D7xN6B7icnq6PpEK_NKlOmZAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/245873-1ca7-4b71-b220-edb0418cac4d/1/39D7xN6B7icnq6PpEK_NKlOmZAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/245873-1ca7-4b71-b220-edb0418cac4d/1/39D7xN6B7icnq6PpEK_NKlOmZAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:14:a3:5e:c1:3a:df:d4:33:e6:ce:ec:88:1e:66:14:63:ee:
8b:3e:1f:e8:9e:e1:4b:fb:0f:35:ef:b3:9b:e4:ad:e4:1f:31:
21:f1:04:cf:0d:9f:d0:c7:ce:4a:c1:33:84:53:c1:9b:2d:36:
22:d9:e1:f3:a7:85:6c:c3:2e:86:b4:17:5f:54:65:59:83:d8:
40:5e:a6:ed:9a:b1:a6:ab:35:94:ba:0d:2d:d3:d1:22:7e:20:
33:14:bd:81:31:87:bb:83:a1:7d:52:59:6f:19:87:5b:f2:ed:
db:07:ab:54:c4:2b:50:5e:b3:5e:68:0e:3e:f1:92:fd:ea:99:
b7:b0:cf:41:36:ed:bb:f5:d6:a4:00:77:bd:88:96:8e:f5:ab:
45:15:5c:a5:cd:03:64:a3:35:a9:5b:3d:c8:2c:ee:4f:43:a4:
72:62:77:c3:33:96:c7:17:b0:ec:e5:ef:23:e2:54:13:8a:23:
46:64:a5:b7:fc:35:39:db:33:0b:97:12:31:97:cf:11:fc:73:
a4:7c:9c:b8:ef:a3:42:cb:51:25:02:98:61:8f:4d:82:27:4f:
1f:55:d8:aa:b5:fa:17:db:ae:4e:58:c8:ac:6e:1e:47:36:bb:
ac:7f:08:d9:66:c2:f2:bd:0e:05:74:f2:ce:b5:6b:b4:b3:53:
9a:c7:d6:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:53:09 2026 by rpki-client