Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/245873-1ca7-4b71-b220-edb0418cac4d/1/39D7xN6B7icnq6PpEK_NKlOmZAw.mft
File: 39D7xN6B7icnq6PpEK_NKlOmZAw.mft (raw, json)
Hash identifier: XmzL08Tg9JJqZyZoQb1FUX9Qg6QxA4cssyGElwWULqA=
Subject key identifier: 60:AB:43:6A:0A:9F:7C:64:A4:26:4E:5B:71:35:33:3D:AA:B3:EE:B4
Authority key identifier: DF:D0:FB:C4:DE:81:EE:27:27:AB:A3:E9:10:AF:CD:2A:53:A6:64:0C
Certificate issuer: /CN=dfd0fbc4de81ee2727aba3e910afcd2a53a6640c
Certificate serial: 01A1754C19C46097A9AC41BBBFC873E6EC84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39D7xN6B7icnq6PpEK_NKlOmZAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/245873-1ca7-4b71-b220-edb0418cac4d/1/39D7xN6B7icnq6PpEK_NKlOmZAw.mft
Manifest number: 03C6
Signing time: Sun 25 Oct 2026 23:01:23 +0000
Manifest this update: Sun 25 Oct 2026 23:01:23 +0000
Manifest next update: Mon 26 Oct 2026 23:01:23 +0000
Files and hashes: 1: 39D7xN6B7icnq6PpEK_NKlOmZAw.crl (hash: kBvy3AwWyAb/ASpVmcC5FUWUnHDwfGNrkI6bidd7lUw=)
2: N90w3kPyDChOm91Ds-QEoi6QI_M.roa (hash: mfNvOCZmL0owJcxp861BO+lWyVu4sB66xy2QLj0cRcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/245873-1ca7-4b71-b220-edb0418cac4d/1/39D7xN6B7icnq6PpEK_NKlOmZAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/245873-1ca7-4b71-b220-edb0418cac4d/1/39D7xN6B7icnq6PpEK_NKlOmZAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/39D7xN6B7icnq6PpEK_NKlOmZAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:75:4c:19:c4:60:97:a9:ac:41:bb:bf:c8:73:e6:ec:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd0fbc4de81ee2727aba3e910afcd2a53a6640c
Validity
Not Before: Oct 25 23:01:23 2026 GMT
Not After : Oct 26 23:01:23 2026 GMT
Subject: CN=60ab436a0a9f7c64a4264e5b7135333daab3eeb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0e:8f:a0:d5:e1:55:64:4e:ac:01:66:63:9a:
c8:5f:c9:95:37:69:13:36:a9:7b:d8:66:1b:53:1c:
7e:a1:e5:bc:10:71:98:4f:3c:87:54:77:3f:07:9e:
ed:0d:e8:19:41:69:01:09:b9:d8:2d:d8:6e:0a:b8:
3a:84:93:52:1c:0c:8e:b1:bb:e7:99:98:d0:b0:a9:
5f:e5:92:6b:f7:75:d2:57:65:eb:3b:54:2a:6a:85:
f0:28:13:78:11:0f:f5:50:e5:3e:c4:f2:d0:fa:59:
49:7c:36:e3:39:02:24:8c:7f:7d:da:51:de:a7:6c:
6e:37:1b:b0:f3:47:08:80:41:0b:59:b7:fd:91:c9:
34:90:23:2b:cb:7e:7f:d8:91:da:17:f0:e7:89:5a:
c6:d5:7c:53:e5:4b:0a:9f:22:f7:82:b9:54:54:69:
bc:52:15:96:6c:20:9b:83:ae:a5:7c:f8:98:0f:7f:
26:2d:30:7a:dc:83:24:2d:b9:7e:d4:ed:4e:88:0b:
7f:88:d7:75:d8:96:af:67:23:bb:f4:4e:dc:48:e7:
3c:9f:ad:e1:8a:15:25:5b:c2:b2:bd:12:04:07:e6:
0d:74:28:13:aa:ae:04:39:48:cd:10:c6:a8:4c:db:
c6:4e:66:c8:90:8c:a3:b1:5d:9f:9f:7e:06:3b:08:
b7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:AB:43:6A:0A:9F:7C:64:A4:26:4E:5B:71:35:33:3D:AA:B3:EE:B4
X509v3 Authority Key Identifier:
keyid:DF:D0:FB:C4:DE:81:EE:27:27:AB:A3:E9:10:AF:CD:2A:53:A6:64:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39D7xN6B7icnq6PpEK_NKlOmZAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/245873-1ca7-4b71-b220-edb0418cac4d/1/39D7xN6B7icnq6PpEK_NKlOmZAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/245873-1ca7-4b71-b220-edb0418cac4d/1/39D7xN6B7icnq6PpEK_NKlOmZAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:0b:92:b5:b8:46:4f:05:5a:13:56:48:df:c6:f5:cd:fc:12:
48:22:3c:63:b2:d5:41:c5:5e:d4:4e:b7:53:44:7f:7f:4e:75:
d8:36:1e:c8:00:10:89:79:4d:90:05:7e:0c:0e:de:e4:63:ce:
7c:99:eb:9a:4c:ef:4c:40:b9:8a:ef:e6:de:59:4e:0c:38:ca:
a8:38:eb:fa:d3:95:f7:2e:bb:b2:c0:49:19:d4:67:50:3f:cd:
c6:63:7e:73:1a:5a:b2:3a:31:14:2d:c0:46:03:ef:ea:fc:51:
3b:be:47:67:87:06:cf:84:84:ef:19:b4:23:b1:cf:70:87:58:
22:6c:ed:91:7c:8c:dd:14:9c:db:8f:0e:b1:b6:8a:58:db:d3:
3b:7d:b7:d1:ec:df:68:8e:51:68:3a:30:2a:8a:be:c5:da:be:
d7:9c:8f:e8:a4:ee:b2:88:70:34:26:8e:da:72:87:57:29:f2:
dc:7c:d3:8a:e8:34:8f:09:2c:f4:e6:f3:b5:f4:68:b3:8d:a2:
3e:f4:d0:e2:93:1c:57:3b:4b:84:3d:b7:28:1a:70:b6:73:c9:
3b:be:dc:4f:6e:0a:b6:5a:31:4e:b2:86:0e:3c:dd:49:7a:17:
05:8e:a8:b1:77:28:d1:73:a4:a8:23:ea:d6:7f:12:4a:4a:79:
4e:83:2a:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF1TBnEYJeprEG7v8hz5uyEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmZDBmYmM0ZGU4MWVlMjcyN2FiYTNlOTEwYWZjZDJhNTNh
NjY0MGMwHhcNMjYxMDI1MjMwMTIzWhcNMjYxMDI2MjMwMTIzWjAzMTEwLwYDVQQD
Eyg2MGFiNDM2YTBhOWY3YzY0YTQyNjRlNWI3MTM1MzMzZGFhYjNlZWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApg6PoNXhVWROrAFmY5rIX8mVN2kT
Nql72GYbUxx+oeW8EHGYTzyHVHc/B57tDegZQWkBCbnYLdhuCrg6hJNSHAyOsbvn
mZjQsKlf5ZJr93XSV2XrO1QqaoXwKBN4EQ/1UOU+xPLQ+llJfDbjOQIkjH992lHe
p2xuNxuw80cIgEELWbf9kck0kCMry35/2JHaF/DniVrG1XxT5UsKnyL3grlUVGm8
UhWWbCCbg66lfPiYD38mLTB63IMkLbl+1O1OiAt/iNd12JavZyO79E7cSOc8n63h
ihUlW8KyvRIEB+YNdCgTqq4EOUjNEMaoTNvGTmbIkIyjsV2fn34GOwi3mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGCrQ2oKn3xkpCZOW3E1Mz2qs+60MB8GA1UdIwQY
MBaAFN/Q+8Tege4nJ6uj6RCvzSpTpmQMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzlEN3hONkI3aWNucTZQcEVLX05LbE9tWkF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8yNDU4NzMtMWNhNy00YjcxLWIyMjAt
ZWRiMDQxOGNhYzRkLzEvMzlEN3hONkI3aWNucTZQcEVLX05LbE9tWkF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8yNDU4NzMtMWNhNy00YjcxLWIyMjAtZWRiMDQxOGNhYzRk
LzEvMzlEN3hONkI3aWNucTZQcEVLX05LbE9tWkF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGguStbhG
TwVaE1ZI38b1zfwSSCI8Y7LVQcVe1E63U0R/f0512DYeyAAQiXlNkAV+DA7e5GPO
fJnrmkzvTEC5iu/m3llODDjKqDjr+tOV9y67ssBJGdRnUD/NxmN+cxpasjoxFC3A
RgPv6vxRO75HZ4cGz4SE7xm0I7HPcIdYImztkXyM3RSc248OsbaKWNvTO3230ezf
aI5RaDowKoq+xdq+15yP6KTusohwNCaO2nKHVyny3HzTiug0jwks9ObztfRos42i
PvTQ4pMcVztLhD23KBpwtnPJO77cT24KtloxTrKGDjzdSXoXBY6osXco0XOkqCPq
1n8SSkp5ToMqBQ==
-----END CERTIFICATE-----
Generated at Mon Oct 26 03:49:30 2026 by rpki-client