Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
File: 39UkoF1He4L7ypPnpQSqMaOtaGM.mft (raw, json)
Hash identifier: huh5Ijr0pvI/T5S+1jaSwkwljkqFRtt1el3KxEK9CyE=
Subject key identifier: 89:95:5D:63:2D:B9:36:42:DA:05:9B:3C:C2:74:66:BC:7A:F9:BF:D7
Authority key identifier: DF:D5:24:A0:5D:47:7B:82:FB:CA:93:E7:A5:04:AA:31:A3:AD:68:63
Certificate issuer: /CN=dfd524a05d477b82fbca93e7a504aa31a3ad6863
Certificate serial: 019FA4175943AB2E32E60EF1B5E062A53F41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
Manifest number: 19E2
Signing time: Mon 27 Jul 2026 15:00:21 +0000
Manifest this update: Mon 27 Jul 2026 15:00:21 +0000
Manifest next update: Tue 28 Jul 2026 15:00:21 +0000
Files and hashes: 1: 39UkoF1He4L7ypPnpQSqMaOtaGM.crl (hash: rli1GtRFAv7wNVNHh8BLEjbLhmweJ63TtsLLuFIaBxs=)
2: 9L-IlJy1MALfVsDOjOGM0zg9wIs.roa (hash: 25Zaxi4I4wwSZ07o8zwt446xfOQvwC6RY9wELrAw/sQ=)
3: lJu2Ar4sGLPORXpgczklcY8qF_E.roa (hash: JhRPmgHPgILgAzd5XOTBcsJ31hAepEsimX60PARvpIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a4:17:59:43:ab:2e:32:e6:0e:f1:b5:e0:62:a5:3f:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd524a05d477b82fbca93e7a504aa31a3ad6863
Validity
Not Before: Jul 27 15:00:21 2026 GMT
Not After : Jul 28 15:00:21 2026 GMT
Subject: CN=89955d632db93642da059b3cc27466bc7af9bfd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:25:aa:87:11:37:81:2c:f0:e1:f6:35:94:a2:
e4:ed:fe:56:8e:e0:97:3a:49:2a:1e:99:cf:b5:47:
5e:13:04:cc:5a:7a:c8:6e:2f:e7:dc:59:4c:5f:90:
b9:f6:29:92:c9:07:86:86:e6:f5:c0:7a:80:fb:9c:
12:e8:a6:e2:85:1f:37:5f:e9:38:bc:64:29:d8:57:
43:61:00:44:e7:94:9f:77:97:34:8d:15:a7:dc:4e:
78:6e:e1:58:f5:25:7b:f0:c0:b7:ee:46:c1:c2:ab:
77:ce:4c:0c:fd:52:87:68:87:02:be:fe:f0:72:6b:
2d:2f:52:cf:a8:0b:ce:d4:a0:92:39:d7:22:e6:6e:
7c:72:ab:52:07:5c:3d:cf:34:dc:d2:e6:f1:1a:89:
ed:4f:51:70:ef:23:4a:c7:f6:87:3a:e2:2e:e6:8c:
11:02:30:ad:c6:c2:8e:40:c5:61:07:9c:e2:6b:02:
ed:ed:eb:e3:06:48:5d:de:34:56:0d:d2:95:26:5d:
3f:83:df:2d:8f:3d:07:61:bf:b9:31:18:8b:f4:82:
0e:09:02:f5:f2:c9:07:f8:d5:63:b0:4d:ea:ac:4e:
85:5e:b5:50:05:42:fb:7d:2e:31:e9:83:cb:70:76:
3a:5c:65:69:67:50:d4:b9:10:e4:88:4b:b6:2a:6d:
7b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:95:5D:63:2D:B9:36:42:DA:05:9B:3C:C2:74:66:BC:7A:F9:BF:D7
X509v3 Authority Key Identifier:
keyid:DF:D5:24:A0:5D:47:7B:82:FB:CA:93:E7:A5:04:AA:31:A3:AD:68:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:64:b1:be:a3:b7:3a:76:9e:91:59:30:3a:e8:4d:6a:f9:95:
39:e6:9f:0f:4b:b8:a4:d3:a3:94:ca:b5:ba:a8:05:32:20:c0:
e9:6b:b5:93:f5:71:a1:d9:24:f4:9b:b7:7f:2f:ef:00:16:96:
41:00:e6:ae:bd:43:56:ba:65:7e:ca:2a:ef:4e:6e:5d:09:3e:
56:4a:c3:d7:22:9f:20:3d:fa:51:da:26:1f:65:24:63:4b:3b:
4d:e6:dc:db:37:55:16:fb:c4:68:6b:79:7d:d2:ce:e6:bb:5f:
73:ba:e4:56:63:97:ee:ba:8e:d5:e2:81:c5:b0:33:a3:d9:5d:
f0:54:55:45:d8:85:ad:6b:f9:86:c1:52:9f:7a:f1:30:e5:c1:
e2:81:60:7d:ea:08:ff:8e:8a:94:3d:0e:ce:05:69:96:48:3b:
6a:4c:6a:f2:9d:72:ba:7d:69:c0:f6:2a:af:4c:c6:99:69:db:
d7:76:95:85:38:88:42:c5:b9:96:b4:16:0a:57:a4:02:c3:16:
b5:cc:77:62:2e:02:0c:e9:1f:fd:91:87:8d:b2:d6:c4:89:f7:
b1:1b:3d:cf:ef:84:c8:d7:c0:f3:70:5e:48:f4:0f:14:b1:e1:
f6:e8:65:0f:51:69:94:68:fe:bb:49:eb:0c:29:16:28:c5:2b:
b9:61:43:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 16:11:13 2026 by rpki-client