Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.mft
File: 39hkHjKKpdGclg1Ikc-Gd84Siec.mft (raw, json)
Hash identifier: jVZH4M5Npfvu7l7+cef6bgfqeiywr409YHNYd7YXyjs=
Subject key identifier: BB:49:90:04:F0:D6:BA:25:C6:4B:19:03:6C:4F:74:BF:BC:C3:5D:7D
Authority key identifier: DF:D8:64:1E:32:8A:A5:D1:9C:96:0D:48:91:CF:86:77:CE:12:89:E7
Certificate issuer: /CN=dfd8641e328aa5d19c960d4891cf8677ce1289e7
Certificate serial: 019E1D9006EC27C8880DBDA67A54DED8FAE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39hkHjKKpdGclg1Ikc-Gd84Siec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.mft
Manifest number: 020B
Signing time: Tue 12 May 2026 19:00:38 +0000
Manifest this update: Tue 12 May 2026 19:00:38 +0000
Manifest next update: Wed 13 May 2026 19:00:38 +0000
Files and hashes: 1: 2qvSkbHTsb98tl7LYwqPesWPH0g.roa (hash: Y4264CBO/wnBYQA3v/iM8WdJyQ6sBIxNEIMB+ic9wcM=)
2: 39hkHjKKpdGclg1Ikc-Gd84Siec.crl (hash: g18EzhDSLOHJKhiFE+/I91ipmbuwLr3sjNUUrhMI0OQ=)
3: eOukcSE4vv2_C-0yT3bFz9tAp8Q.roa (hash: ni8P4L+TMFDjolGG4Odq13TtGL18OXau4ZR/dJyb4Yk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.mft
rsync://rpki.ripe.net/repository/DEFAULT/39hkHjKKpdGclg1Ikc-Gd84Siec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:06:ec:27:c8:88:0d:bd:a6:7a:54:de:d8:fa:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd8641e328aa5d19c960d4891cf8677ce1289e7
Validity
Not Before: May 12 19:00:38 2026 GMT
Not After : May 13 19:00:38 2026 GMT
Subject: CN=bb499004f0d6ba25c64b19036c4f74bfbcc35d7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:50:98:96:40:53:26:75:31:7d:84:54:78:65:
e3:52:76:57:d3:68:46:d7:45:2f:d5:bb:a7:c5:3c:
53:e0:c7:43:4c:32:15:a7:22:4d:e8:3a:6a:e2:cd:
eb:c6:dd:8f:cd:eb:a3:60:48:2e:6d:55:c1:c3:52:
31:e6:ba:6d:99:3e:9a:6e:1e:57:3e:ae:ac:3d:8c:
52:2f:dd:2a:62:8d:dc:b3:b3:c2:9d:a6:d4:ac:35:
59:b6:e7:a1:31:55:ac:6a:18:cd:8f:74:d5:ef:d6:
30:de:64:e6:c3:5e:72:7f:97:9d:ac:61:77:4c:fd:
2f:2d:d8:7b:1f:f3:76:2a:de:5c:bd:5d:82:1a:78:
e5:38:1a:36:59:58:70:04:16:43:a1:e5:12:54:5f:
4c:ad:1d:11:8e:ce:e4:bf:64:7a:d0:fe:1d:03:bd:
cb:a7:62:11:38:a9:40:38:67:8e:82:35:1a:15:05:
c2:f6:1d:7f:fc:76:54:3a:71:4a:10:d9:48:78:96:
7f:07:41:23:e5:93:b9:48:3b:66:33:fc:d5:1b:3a:
36:1a:c3:7f:c1:e8:82:6e:f5:1d:f4:b9:e5:3e:7f:
b6:59:46:3c:18:e4:aa:57:f7:6c:11:56:8f:82:1a:
d1:2f:e8:38:b2:54:f4:48:31:70:4c:30:db:74:5f:
c8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:49:90:04:F0:D6:BA:25:C6:4B:19:03:6C:4F:74:BF:BC:C3:5D:7D
X509v3 Authority Key Identifier:
keyid:DF:D8:64:1E:32:8A:A5:D1:9C:96:0D:48:91:CF:86:77:CE:12:89:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39hkHjKKpdGclg1Ikc-Gd84Siec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:76:6b:85:c3:35:5c:4a:9f:2d:e2:4a:51:be:4e:1e:6b:1e:
26:ac:b3:19:d6:24:1e:95:20:08:b9:07:4a:27:af:67:67:39:
a5:c8:ee:44:8e:0c:7d:83:09:64:9f:90:98:a7:b4:c8:ed:9d:
a3:d2:83:7b:c9:7c:6d:83:97:e0:38:58:e7:64:19:05:be:a7:
3f:c3:8b:a4:97:a4:8e:e2:84:b4:c8:20:06:59:c5:91:ef:01:
d9:66:d0:21:9b:49:c4:a3:d8:eb:87:c1:1b:3c:f9:b4:86:64:
18:9a:e0:dc:ab:64:a9:9d:ed:dc:74:16:f7:0c:92:6f:bc:82:
e4:99:85:72:f2:95:fd:b2:39:07:3b:44:b7:b3:f4:f1:15:ab:
30:5e:2e:58:55:84:fd:a1:07:65:02:d5:8a:ed:57:b9:bf:4d:
0e:b0:3f:03:8b:da:47:70:13:80:95:ce:c1:d4:fe:0a:c6:fd:
b8:d3:ca:d1:84:1e:11:9e:a9:8f:30:73:70:6e:60:81:3a:e9:
22:f2:43:f5:5a:10:5d:5a:c9:f9:a2:96:40:6e:49:e7:00:8a:
8f:07:82:64:31:d2:41:2a:7d:d7:f9:6f:d7:79:c2:9f:ea:36:
30:c8:fb:84:2d:ce:56:6d:3e:25:17:b1:bf:9e:d6:9d:d8:bf:
4f:bd:e3:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dkAbsJ8iIDb2melTe2PrlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmZDg2NDFlMzI4YWE1ZDE5Yzk2MGQ0ODkxY2Y4Njc3Y2Ux
Mjg5ZTcwHhcNMjYwNTEyMTkwMDM4WhcNMjYwNTEzMTkwMDM4WjAzMTEwLwYDVQQD
EyhiYjQ5OTAwNGYwZDZiYTI1YzY0YjE5MDM2YzRmNzRiZmJjYzM1ZDdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFCYlkBTJnUxfYRUeGXjUnZX02hG
10Uv1bunxTxT4MdDTDIVpyJN6Dpq4s3rxt2PzeujYEgubVXBw1Ix5rptmT6abh5X
Pq6sPYxSL90qYo3cs7PCnabUrDVZtuehMVWsahjNj3TV79Yw3mTmw15yf5edrGF3
TP0vLdh7H/N2Kt5cvV2CGnjlOBo2WVhwBBZDoeUSVF9MrR0Rjs7kv2R60P4dA73L
p2IROKlAOGeOgjUaFQXC9h1//HZUOnFKENlIeJZ/B0Ej5ZO5SDtmM/zVGzo2GsN/
weiCbvUd9LnlPn+2WUY8GOSqV/dsEVaPghrRL+g4slT0SDFwTDDbdF/IbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLtJkATw1rolxksZA2xPdL+8w119MB8GA1UdIwQY
MBaAFN/YZB4yiqXRnJYNSJHPhnfOEonnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzloa0hqS0twZEdjbGcxSWtjLUdkODRTaWVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8xZTNlYjQtNWRjZi00N2Q5LWJjNDYt
ZTNmYzUzNzkxNDkwLzEvMzloa0hqS0twZEdjbGcxSWtjLUdkODRTaWVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi8xZTNlYjQtNWRjZi00N2Q5LWJjNDYtZTNmYzUzNzkxNDkw
LzEvMzloa0hqS0twZEdjbGcxSWtjLUdkODRTaWVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGnZrhcM1
XEqfLeJKUb5OHmseJqyzGdYkHpUgCLkHSievZ2c5pcjuRI4MfYMJZJ+QmKe0yO2d
o9KDe8l8bYOX4DhY52QZBb6nP8OLpJekjuKEtMggBlnFke8B2WbQIZtJxKPY64fB
Gzz5tIZkGJrg3KtkqZ3t3HQW9wySb7yC5JmFcvKV/bI5BztEt7P08RWrMF4uWFWE
/aEHZQLViu1Xub9NDrA/A4vaR3ATgJXOwdT+Csb9uNPK0YQeEZ6pjzBzcG5ggTrp
IvJD9VoQXVrJ+aKWQG5J5wCKjweCZDHSQSp91/lv13nCn+o2MMj7hC3OVm0+JRex
v57Wndi/T73jzg==
-----END CERTIFICATE-----
Generated at Wed May 13 03:08:51 2026 by rpki-client