
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/39-uqRN3Xxj1-NA1Z-XCDQ3PiLI.mft
File: 39-uqRN3Xxj1-NA1Z-XCDQ3PiLI.mft (raw, json)
Hash identifier: cxSsnbl4iVk0rt6PAK37d8Ny6HsjMSC80O8pVdIY0bw=
Subject key identifier: 3B:91:2D:67:14:30:07:E6:DB:19:05:21:CD:86:E6:8F:99:E3:E3:E1
Authority key identifier: DF:DF:AE:A9:13:77:5F:18:F5:F8:D0:35:67:E5:C2:0D:0D:CF:88:B2
Certificate issuer: /CN=dfdfaea913775f18f5f8d03567e5c20d0dcf88b2
Certificate serial: 01A0412AE8F5BABB94AC8A6F0B82C1A17633
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39-uqRN3Xxj1-NA1Z-XCDQ3PiLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/39-uqRN3Xxj1-NA1Z-XCDQ3PiLI.mft
Manifest number: 9B
Signing time: Thu 27 Aug 2026 03:02:06 +0000
Manifest this update: Thu 27 Aug 2026 03:02:06 +0000
Manifest next update: Fri 28 Aug 2026 03:02:06 +0000
Files and hashes: 1: 39-uqRN3Xxj1-NA1Z-XCDQ3PiLI.crl (hash: H+yzeabdp7ITg1U2qZf6we+L0wGz0TWoUiaez6MFNYE=)
2: AfYp2roOu6llmLK-QFL-cDx3Sps.roa (hash: nBRygBtw6o9MqspyhNIauwKrDbuTQcu6stknnCkOqCE=)
3: Fqd9CiVtXICF7fkUl7kmSEJrslg.roa (hash: P0MD0ty95bldNCHqdPgd7411Cky2iN6dvwj7mvcRfpI=)
4: KRIPrMfF_pwkDJ36tS1Z9ALClmI.roa (hash: imuv+blTMUmEZpqPOWhsJtoGrlHWzRuWpyfgDra+OYA=)
5: KpBUeLUehx37-G7wc65xLDd7D1o.roa (hash: 1bXTS2IeX5yHjmO70XE2P5YQwQgs6/gjAu5CE7AyyxM=)
6: L7lYmoMqETkdIoe8tAc3oaYn410.roa (hash: 77Fj0KhJGcXIvhuDeXT1Kb2sp0PYdxYf1B+kySghYWI=)
7: Yx_v2-WnUx4Pa-Xapg--_3nB4SM.roa (hash: sYzDtFoQ+Z0jAPr7/aEtcml7DlJ4+rH/UYYE8d0QfIQ=)
8: tH8iogWnSl4BdfzNPISKQQzt-Wk.roa (hash: CFoOyClZIttlxfo6s29kWFO4JUkk6mAvIhm58DzApsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/39-uqRN3Xxj1-NA1Z-XCDQ3PiLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/39-uqRN3Xxj1-NA1Z-XCDQ3PiLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/39-uqRN3Xxj1-NA1Z-XCDQ3PiLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:41:2a:e8:f5:ba:bb:94:ac:8a:6f:0b:82:c1:a1:76:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfdfaea913775f18f5f8d03567e5c20d0dcf88b2
Validity
Not Before: Aug 27 03:02:06 2026 GMT
Not After : Aug 28 03:02:06 2026 GMT
Subject: CN=3b912d67143007e6db190521cd86e68f99e3e3e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:de:3a:92:54:68:4e:24:e7:f0:38:8b:27:97:
ec:c0:d7:66:2f:fa:02:b7:19:62:d1:30:39:ce:ed:
1e:d0:f4:e5:ad:43:06:25:b6:2b:58:8e:52:89:0c:
b2:d9:f3:41:c0:dd:2a:3f:59:25:f3:38:53:16:d7:
35:ba:22:e6:d8:29:1b:0f:61:da:21:60:6d:ca:60:
4b:a1:44:9c:6e:e4:86:d7:08:34:a2:89:ba:a7:8c:
08:6f:ca:09:f3:f1:9f:75:cb:44:00:4b:6d:92:88:
9e:d3:2a:18:a0:61:84:b0:13:34:04:b7:a4:b3:fb:
51:28:f3:79:53:ec:fc:92:c4:54:8d:9c:7b:f2:dc:
0b:3d:89:72:67:47:00:36:b0:c2:0b:63:f5:d1:76:
9a:cc:0f:bb:1c:e6:1d:37:b9:9c:1c:62:5a:e6:b8:
1c:6a:22:72:26:87:96:5b:a5:86:50:9e:3c:42:31:
02:d8:0b:91:51:2b:e0:81:d4:65:29:5d:bf:18:85:
90:de:f6:4d:99:04:31:f3:b5:85:39:fd:57:10:a2:
4a:0e:85:6e:68:87:fb:08:33:a8:6d:4f:af:78:71:
5a:d9:c6:16:ea:89:40:1b:23:f7:bb:b7:85:a1:c6:
33:68:e3:0a:ad:00:e3:31:b1:50:82:e7:40:ff:39:
70:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:91:2D:67:14:30:07:E6:DB:19:05:21:CD:86:E6:8F:99:E3:E3:E1
X509v3 Authority Key Identifier:
keyid:DF:DF:AE:A9:13:77:5F:18:F5:F8:D0:35:67:E5:C2:0D:0D:CF:88:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39-uqRN3Xxj1-NA1Z-XCDQ3PiLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/39-uqRN3Xxj1-NA1Z-XCDQ3PiLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/39-uqRN3Xxj1-NA1Z-XCDQ3PiLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:0d:dd:bb:8a:66:16:dd:86:91:e4:6d:f0:28:c3:ce:eb:57:
ff:54:23:40:d3:6f:33:a2:72:90:00:c2:8a:46:f6:96:6a:69:
35:e9:7b:67:90:c5:1c:04:ce:ea:57:5b:de:4f:43:76:3c:d1:
90:d1:d1:bd:09:11:69:c5:57:8e:1e:8b:8f:fc:93:c2:34:10:
c5:2c:5b:26:92:3d:fa:cf:5b:be:05:2a:6b:96:0b:f6:0c:92:
bf:7e:b1:99:94:84:99:9a:16:c5:42:9b:90:8c:df:7e:60:13:
c3:a3:6a:b5:55:5a:a4:a8:84:d7:02:70:03:44:bb:5e:13:4d:
c0:fe:06:b1:28:78:e0:d1:aa:a8:28:0e:06:bc:7d:68:30:33:
fc:65:ac:2d:10:a7:52:d0:cc:ad:3c:10:46:dc:bf:30:77:60:
98:3a:e6:bb:59:d3:dd:b9:78:89:4f:e7:7a:ee:92:9e:da:31:
13:8c:83:7a:90:52:84:f6:a6:76:7c:d1:b4:5b:24:ca:f3:15:
78:43:dc:2b:14:93:8b:f6:f6:60:ae:04:98:e7:f0:f9:4a:6a:
82:c5:f7:59:aa:04:74:d4:42:90:01:85:df:d5:2c:99:b1:98:
cf:bb:67:cb:9e:ea:a2:86:c1:30:f9:ed:d9:5e:68:00:bb:da:
32:cb:d0:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:27:09 2026 by rpki-client