Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
File: 39UkoF1He4L7ypPnpQSqMaOtaGM.mft (raw, json)
Hash identifier: qW0sZZxNxu+1J0KmqJ3tWpdmVQON9p/N43HhOasRH70=
Subject key identifier: FF:91:5F:8D:FF:C9:CD:58:0A:B4:15:EF:FC:72:25:93:F0:63:DD:F8
Authority key identifier: DF:D5:24:A0:5D:47:7B:82:FB:CA:93:E7:A5:04:AA:31:A3:AD:68:63
Certificate issuer: /CN=dfd524a05d477b82fbca93e7a504aa31a3ad6863
Certificate serial: 019CE52345F94C9C55DE60CBE3C745535C39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
Manifest number: 1876
Signing time: Fri 13 Mar 2026 03:00:19 +0000
Manifest this update: Fri 13 Mar 2026 03:00:19 +0000
Manifest next update: Sat 14 Mar 2026 03:00:19 +0000
Files and hashes: 1: 39UkoF1He4L7ypPnpQSqMaOtaGM.crl (hash: GhjqMi7MSvWXjVHZMK9XU+3tkQMVD2ro9/pY3DOW9OQ=)
2: 9L-IlJy1MALfVsDOjOGM0zg9wIs.roa (hash: 25Zaxi4I4wwSZ07o8zwt446xfOQvwC6RY9wELrAw/sQ=)
3: lJu2Ar4sGLPORXpgczklcY8qF_E.roa (hash: JhRPmgHPgILgAzd5XOTBcsJ31hAepEsimX60PARvpIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:23:45:f9:4c:9c:55:de:60:cb:e3:c7:45:53:5c:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd524a05d477b82fbca93e7a504aa31a3ad6863
Validity
Not Before: Mar 13 03:00:19 2026 GMT
Not After : Mar 14 03:00:19 2026 GMT
Subject: CN=ff915f8dffc9cd580ab415effc722593f063ddf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f5:1a:e9:db:c5:7e:03:d3:df:c1:df:66:b6:
29:b4:38:52:1a:fc:9a:9b:3c:fb:2d:03:dd:72:aa:
41:72:90:0d:df:9b:eb:25:71:d6:f1:05:46:5b:9b:
9a:e5:9d:64:8d:a9:d3:e2:88:2b:f4:ec:df:41:5e:
1d:4d:3f:d5:bb:1f:78:c6:05:4f:9c:ba:74:9d:8c:
9f:ed:e9:f1:bf:da:68:75:b6:cb:6e:42:e0:d8:fc:
6a:ec:ad:8d:f0:b9:fa:25:ea:68:e1:92:e7:c2:cc:
34:94:21:48:a6:18:56:71:26:60:76:b6:87:4f:b4:
23:b8:41:6a:15:12:bb:22:f5:33:08:dc:2c:81:9f:
55:27:e5:28:5a:58:a7:f7:b1:ae:ae:1c:86:11:29:
09:0b:69:d2:c5:b4:c9:8a:32:a6:2f:ff:8b:0c:68:
a1:99:87:51:f8:70:28:b3:a3:fb:ae:d4:48:84:95:
5e:f3:ff:8c:0d:c6:58:91:27:a4:94:ca:45:b9:de:
8f:23:20:9a:b9:b2:71:29:86:af:e7:4b:0d:48:55:
a5:80:47:26:76:63:93:8e:d3:49:73:e2:76:d6:b4:
ef:2a:cd:d8:7a:e6:76:75:fa:71:33:ce:7f:27:82:
59:d6:30:0c:82:cb:12:25:ac:a8:ed:3d:a3:57:17:
2b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:91:5F:8D:FF:C9:CD:58:0A:B4:15:EF:FC:72:25:93:F0:63:DD:F8
X509v3 Authority Key Identifier:
keyid:DF:D5:24:A0:5D:47:7B:82:FB:CA:93:E7:A5:04:AA:31:A3:AD:68:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:49:f7:6d:30:b6:b9:3d:e1:50:a3:a4:ec:15:88:41:d5:2e:
a4:c7:b8:22:a3:6f:7a:fa:54:2b:52:74:0a:d0:a8:24:e7:6b:
ce:5c:fd:8b:d5:27:64:9e:01:fc:62:d1:54:13:97:a8:19:41:
48:96:da:4a:1d:b1:b0:aa:2c:51:49:c0:36:d5:ad:d4:d6:98:
02:66:bd:d4:76:ff:60:32:b1:f1:42:d6:d4:f5:6b:58:70:a2:
d2:21:99:02:39:86:34:04:e9:4c:88:07:9b:1a:33:5c:0b:47:
50:8a:5f:5b:0f:76:09:c8:bd:fc:1f:a3:ec:82:b9:2a:49:be:
88:53:73:3d:b3:f2:5c:9d:d1:b7:b0:06:88:e8:cd:92:22:bb:
d6:5b:60:e0:b1:4e:f6:1a:be:15:a4:c6:60:3d:10:33:74:78:
78:89:c1:fa:3e:4c:68:68:da:25:5e:7d:3a:87:b9:0a:af:83:
f8:2f:85:67:88:da:0b:4e:c0:58:6c:9b:1d:16:23:91:5d:92:
0f:b2:54:09:04:d3:10:09:6f:a1:c0:b9:be:b3:3f:d4:45:a7:
01:a6:5f:37:11:fe:8d:e6:48:99:e8:3e:dd:a3:17:8c:36:fc:
54:88:8b:13:60:fb:d6:16:e6:6b:62:ad:06:67:eb:ad:64:38:
41:05:df:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 10:19:22 2026 by rpki-client