Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.mft
File: 39hkHjKKpdGclg1Ikc-Gd84Siec.mft (raw, json)
Hash identifier: NA/iDaouh7wlj7xioFgdiRDWSCkvaxzCWJQ6+rwaNPA=
Subject key identifier: 6C:09:3D:72:2C:95:06:05:52:FE:0E:D5:15:44:87:67:AC:A0:F1:5B
Authority key identifier: DF:D8:64:1E:32:8A:A5:D1:9C:96:0D:48:91:CF:86:77:CE:12:89:E7
Certificate issuer: /CN=dfd8641e328aa5d19c960d4891cf8677ce1289e7
Certificate serial: 019D284E0A066238C2768A07FF78181FC4F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39hkHjKKpdGclg1Ikc-Gd84Siec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.mft
Manifest number: 018C
Signing time: Thu 26 Mar 2026 04:01:36 +0000
Manifest this update: Thu 26 Mar 2026 04:01:36 +0000
Manifest next update: Fri 27 Mar 2026 04:01:36 +0000
Files and hashes: 1: 2qvSkbHTsb98tl7LYwqPesWPH0g.roa (hash: Y4264CBO/wnBYQA3v/iM8WdJyQ6sBIxNEIMB+ic9wcM=)
2: 39hkHjKKpdGclg1Ikc-Gd84Siec.crl (hash: YBOsUBpwSMdSAKcgC98hUnUbCnhZSEvL2v12tE3b5Ds=)
3: eOukcSE4vv2_C-0yT3bFz9tAp8Q.roa (hash: ni8P4L+TMFDjolGG4Odq13TtGL18OXau4ZR/dJyb4Yk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.mft
rsync://rpki.ripe.net/repository/DEFAULT/39hkHjKKpdGclg1Ikc-Gd84Siec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:0a:06:62:38:c2:76:8a:07:ff:78:18:1f:c4:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd8641e328aa5d19c960d4891cf8677ce1289e7
Validity
Not Before: Mar 26 04:01:36 2026 GMT
Not After : Mar 27 04:01:36 2026 GMT
Subject: CN=6c093d722c95060552fe0ed515448767aca0f15b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:08:f0:25:8e:38:b8:12:61:93:85:5e:2e:87:
4f:79:2f:33:42:9c:3c:6e:f4:bc:ba:93:a5:e4:d0:
6d:df:51:e3:94:43:62:54:9c:17:9e:cf:df:b6:20:
a5:e6:4c:5d:fe:74:59:f5:04:6d:e1:a4:53:c8:2c:
85:51:f3:17:4d:a2:7e:cf:22:b8:22:68:49:67:55:
0d:48:30:9a:4c:4f:11:38:55:24:f8:3e:1d:9f:f4:
a6:06:e2:b8:db:26:b3:5a:ca:59:12:08:22:c0:50:
5f:ea:1d:ee:dd:a7:fc:28:2f:69:d0:4d:7f:31:7b:
23:9a:05:f6:7f:7d:c0:f5:df:ad:a0:21:d2:24:b5:
2c:af:81:c2:21:78:c2:a1:48:3b:ea:53:c0:67:97:
15:a5:84:e5:59:93:5f:7a:8c:f4:96:11:b3:ba:01:
d5:d2:a6:69:7b:a4:5c:bc:ea:0d:6a:c2:1d:b9:38:
35:15:7a:a7:c8:c2:bd:b5:6c:46:4c:1a:38:5d:e9:
e0:03:2d:19:29:c1:87:73:91:b2:66:19:57:7e:f2:
ea:f0:bb:1a:2b:45:1b:d0:51:a4:61:fa:1d:2a:b4:
9e:99:8c:b0:36:19:c9:0b:0a:5c:2c:07:0e:cf:ba:
4c:65:64:e9:a7:4d:3f:44:90:d5:2e:c1:54:06:97:
1a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:09:3D:72:2C:95:06:05:52:FE:0E:D5:15:44:87:67:AC:A0:F1:5B
X509v3 Authority Key Identifier:
keyid:DF:D8:64:1E:32:8A:A5:D1:9C:96:0D:48:91:CF:86:77:CE:12:89:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39hkHjKKpdGclg1Ikc-Gd84Siec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:48:69:7d:62:c4:e6:e5:c8:2b:18:24:7c:f3:c0:29:df:dc:
2e:70:e3:9b:e3:98:ce:26:8c:2d:3c:7a:bd:60:4d:6c:84:f6:
bc:46:bd:9e:9f:9c:10:2b:85:6e:3e:3b:82:48:64:9e:0a:f6:
2e:7f:e3:77:ef:b1:e0:b6:5e:3f:0c:d6:45:94:f8:54:67:3c:
81:ed:08:9b:62:12:af:72:41:e4:45:78:86:b2:6f:58:0e:57:
14:ad:e3:14:c2:eb:cd:d0:e8:a9:30:42:46:81:a0:b6:d4:c3:
f0:cb:08:68:24:e4:63:43:2f:c0:b6:d3:ab:3a:4b:5b:1f:b7:
04:f8:7a:ba:98:db:fe:19:18:30:10:5e:b6:d1:86:d4:96:79:
3e:1b:83:1c:26:ed:df:77:35:d4:06:cc:06:63:16:42:35:a3:
d4:26:4e:a7:3f:54:7e:74:bc:7a:ec:3f:9a:69:ad:e8:88:7a:
03:85:a9:18:2a:02:05:87:dc:65:07:69:be:68:a6:71:7e:d5:
f0:6f:f8:7f:95:08:c4:c9:e4:ea:ee:36:5f:df:bd:bb:ad:9f:
df:b9:30:a7:3f:c9:76:45:4e:72:9e:42:5b:01:71:e8:f8:c6:
53:b6:52:1b:1c:14:cf:46:7c:68:a7:19:c2:b1:0c:3c:af:1a:
7c:89:72:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:46 2026 by rpki-client