Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
File: 39UkoF1He4L7ypPnpQSqMaOtaGM.mft (raw, json)
Hash identifier: o77Q6hT+dfRyjISQECei+W+wI+9DjNy4DTpNmeMudig=
Subject key identifier: CE:21:2D:25:3C:9E:CD:37:5D:B2:DD:2A:4C:41:E3:5E:49:AE:D5:70
Authority key identifier: DF:D5:24:A0:5D:47:7B:82:FB:CA:93:E7:A5:04:AA:31:A3:AD:68:63
Certificate issuer: /CN=dfd524a05d477b82fbca93e7a504aa31a3ad6863
Certificate serial: 01A08DC466B501F72A9BBA25DF9852B4B3AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
Manifest number: 1A5B
Signing time: Fri 11 Sep 2026 00:00:53 +0000
Manifest this update: Fri 11 Sep 2026 00:00:53 +0000
Manifest next update: Sat 12 Sep 2026 00:00:53 +0000
Files and hashes: 1: 39UkoF1He4L7ypPnpQSqMaOtaGM.crl (hash: RwBOglIzIFIALnfREj/+Ekjj3IQS7nrS25HsaS5pYBA=)
2: 9L-IlJy1MALfVsDOjOGM0zg9wIs.roa (hash: 25Zaxi4I4wwSZ07o8zwt446xfOQvwC6RY9wELrAw/sQ=)
3: lJu2Ar4sGLPORXpgczklcY8qF_E.roa (hash: JhRPmgHPgILgAzd5XOTBcsJ31hAepEsimX60PARvpIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 21:45:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:c4:66:b5:01:f7:2a:9b:ba:25:df:98:52:b4:b3:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd524a05d477b82fbca93e7a504aa31a3ad6863
Validity
Not Before: Sep 11 00:00:53 2026 GMT
Not After : Sep 12 00:00:53 2026 GMT
Subject: CN=ce212d253c9ecd375db2dd2a4c41e35e49aed570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f2:b6:e4:f3:b6:ad:c4:59:98:6a:f5:e9:6a:
1c:8e:f4:82:d3:21:ca:28:ad:90:a0:57:05:47:06:
27:5a:bf:35:27:b5:ed:09:e4:e1:8e:5e:13:96:3d:
ef:3c:93:09:7f:cf:6d:d6:e8:e9:af:01:d6:5a:f0:
d1:2e:d6:bd:34:0d:3f:a4:39:81:61:0b:f1:56:75:
d5:3f:4a:7d:9e:42:95:69:71:1c:d6:d3:10:cb:77:
23:11:83:a2:70:18:5c:43:45:a3:ca:20:a1:04:a8:
66:06:25:a5:97:4a:b5:ac:ec:3a:b0:b3:67:95:ba:
e3:5e:2d:6a:b9:44:ff:d9:57:86:ea:d1:cc:74:88:
5e:30:41:65:7a:b7:0a:7b:a1:b3:0c:ca:94:81:ab:
fe:5f:20:a6:0e:89:52:5b:f4:af:0f:8f:88:74:19:
26:d2:10:f3:07:e2:3e:9a:98:ca:60:1b:7e:22:dc:
c0:db:33:7d:74:52:b1:fb:e0:84:88:41:02:91:82:
d7:2f:f1:5b:dd:1c:d7:07:39:0b:70:d6:e6:bd:d6:
63:cf:f2:15:c2:d9:83:45:37:0d:39:5c:eb:60:37:
e7:75:36:36:f4:67:02:33:a3:7c:2c:51:18:83:77:
01:af:4c:d2:0c:ed:74:85:9f:f5:d2:3d:9d:bc:78:
86:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:21:2D:25:3C:9E:CD:37:5D:B2:DD:2A:4C:41:E3:5E:49:AE:D5:70
X509v3 Authority Key Identifier:
keyid:DF:D5:24:A0:5D:47:7B:82:FB:CA:93:E7:A5:04:AA:31:A3:AD:68:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:fb:c3:71:31:a7:c5:99:e1:f8:86:5d:fe:09:d5:f8:6a:e6:
83:03:47:10:90:44:fe:65:4b:47:5c:81:e2:cf:70:9d:5f:02:
97:02:72:c8:8d:28:d6:12:c6:79:48:88:9e:d7:88:2d:e6:7d:
be:ba:42:e3:80:4e:99:2a:99:01:49:df:0f:2f:72:34:5f:d4:
a1:bb:80:01:c8:b5:2f:ee:0d:d4:d6:42:de:b9:1d:23:db:c5:
2a:9f:28:ef:fc:ac:fc:ab:b7:af:17:59:9a:b8:21:9f:e9:c6:
ce:04:f6:c7:f5:89:6c:da:22:6e:ee:20:b5:f5:9a:55:da:84:
7f:de:63:3d:76:54:ef:7d:92:d5:a1:40:a7:0e:cd:74:9f:fa:
63:80:2c:20:2a:53:c6:f7:09:61:2c:eb:3e:2b:32:90:19:32:
8a:da:58:da:34:16:bc:f9:18:e8:93:b7:2c:6c:0b:15:47:3a:
08:5e:2d:ae:b1:31:5c:82:c3:d8:61:d6:2f:ca:81:56:33:78:
59:06:a3:35:45:f1:ed:f1:1c:c5:dd:46:ea:1b:0c:12:93:9b:
ef:76:5f:39:4d:a4:ef:69:64:31:e2:26:2f:3f:41:d4:4a:ac:
04:29:ab:cf:f1:52:15:73:41:e4:96:0c:cb:3f:e9:3d:18:2a:
54:b4:dd:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:06:26 2026 by rpki-client