Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.mft
File: 39hkHjKKpdGclg1Ikc-Gd84Siec.mft (raw, json)
Hash identifier: qji5dJ8z/S+OPZMAPC6qISvsuqQWEJG1fZXHiv9b0Yc=
Subject key identifier: 3C:61:CF:31:66:44:B6:4A:0D:D7:6C:33:BF:16:45:E4:3C:F7:1E:54
Authority key identifier: DF:D8:64:1E:32:8A:A5:D1:9C:96:0D:48:91:CF:86:77:CE:12:89:E7
Certificate issuer: /CN=dfd8641e328aa5d19c960d4891cf8677ce1289e7
Certificate serial: 01A0CFDAAB373EDF1142B88AE551548C2B19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39hkHjKKpdGclg1Ikc-Gd84Siec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.mft
Manifest number: 0371
Signing time: Wed 23 Sep 2026 20:00:09 +0000
Manifest this update: Wed 23 Sep 2026 20:00:09 +0000
Manifest next update: Thu 24 Sep 2026 20:00:09 +0000
Files and hashes: 1: 2qvSkbHTsb98tl7LYwqPesWPH0g.roa (hash: Y4264CBO/wnBYQA3v/iM8WdJyQ6sBIxNEIMB+ic9wcM=)
2: 39hkHjKKpdGclg1Ikc-Gd84Siec.crl (hash: sTfvhlnlgJ3RnVtn1THLCYa9ZhBGhnzjNQiKNA4LboM=)
3: LPFoAB4sPBskTSmjN__uUCavKxw.roa (hash: ESBBS9bOaL8PT/NnpNwZWIjfHqj4VbeRzrLEqzVAw6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.mft
rsync://rpki.ripe.net/repository/DEFAULT/39hkHjKKpdGclg1Ikc-Gd84Siec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:da:ab:37:3e:df:11:42:b8:8a:e5:51:54:8c:2b:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd8641e328aa5d19c960d4891cf8677ce1289e7
Validity
Not Before: Sep 23 20:00:09 2026 GMT
Not After : Sep 24 20:00:09 2026 GMT
Subject: CN=3c61cf316644b64a0dd76c33bf1645e43cf71e54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d7:34:4b:bb:ae:c0:fc:05:5b:f6:1b:6b:f7:
51:c7:14:8f:02:e8:74:81:cd:a6:41:cb:2a:5f:1c:
b7:ab:ff:6f:67:25:4f:bd:61:fe:38:a9:6b:9c:e4:
dc:2d:36:ec:3f:54:23:00:01:1f:d6:06:25:83:52:
55:05:d4:41:e6:fe:f6:ac:f4:84:e5:4d:e7:06:1a:
76:f2:4c:1e:7f:af:f8:5d:63:32:bb:1d:a8:cd:5c:
b0:26:66:65:74:8c:4e:18:5e:48:4f:70:5f:4a:42:
4b:25:9d:56:f7:5f:a1:8f:ab:4c:74:91:8c:15:54:
cd:c4:17:04:5f:f0:92:46:b2:02:aa:b7:9a:cd:bf:
38:49:5c:f3:95:7a:45:9e:f0:69:48:16:41:c3:34:
f3:17:93:5d:67:75:36:16:bd:7f:50:63:1d:e4:af:
35:5b:d6:d0:2a:0f:c2:e5:e8:28:48:21:48:58:f6:
30:af:09:f8:b5:23:c1:31:18:61:f5:11:56:d3:4f:
bc:25:b5:9b:80:27:bf:b2:ea:7d:9c:43:52:c4:28:
bc:ec:8d:32:4b:d0:42:9d:9e:90:77:25:31:b6:d1:
02:96:18:99:aa:4f:34:bc:36:5d:5e:3a:d7:66:ff:
4a:4c:f8:c6:92:f9:c1:66:53:f8:6c:1d:25:b0:6a:
52:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:61:CF:31:66:44:B6:4A:0D:D7:6C:33:BF:16:45:E4:3C:F7:1E:54
X509v3 Authority Key Identifier:
keyid:DF:D8:64:1E:32:8A:A5:D1:9C:96:0D:48:91:CF:86:77:CE:12:89:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39hkHjKKpdGclg1Ikc-Gd84Siec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:72:47:0b:26:a4:7f:ef:bf:5a:a3:b9:f4:6a:b4:e1:09:74:
0f:6f:70:ea:29:cf:89:c3:29:0f:aa:77:47:83:86:06:76:7f:
87:bb:27:d9:c6:67:99:b3:69:1e:b5:4f:e8:ba:30:3c:b4:d7:
75:a3:d8:34:49:a4:78:6d:f0:c6:44:ff:e5:43:dd:af:76:6b:
e6:78:15:a3:a4:20:f1:37:cb:78:28:b8:80:01:f6:b2:03:2a:
a7:da:14:cf:a6:ba:ed:32:bf:44:41:f1:9e:42:7a:4d:7c:01:
3f:a3:af:ee:7f:99:a7:e9:a1:4b:08:b0:ab:c3:b6:52:e4:4c:
b1:9c:08:9b:0f:31:f3:c5:53:b4:9b:a1:db:8d:83:c9:ca:f9:
13:7e:db:0e:92:b4:cf:6f:26:f7:33:df:06:12:5b:4c:03:64:
ee:a7:a6:38:19:11:46:eb:f3:48:c7:67:01:c2:a3:b6:4f:e3:
6e:f8:34:00:04:ae:57:27:af:d4:33:e2:1c:e8:63:a9:fc:06:
36:d5:c2:76:c8:23:da:c3:d7:eb:53:2c:c1:b7:a1:69:9c:2f:
1d:9d:1c:96:3d:5d:7d:0a:16:42:38:76:b5:58:d5:cf:b4:b9:
d1:66:6b:33:f2:6c:db:42:8c:e0:f4:bd:7c:e0:93:66:8f:26:
8b:b1:74:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDP2qs3Pt8RQriK5VFUjCsZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmZDg2NDFlMzI4YWE1ZDE5Yzk2MGQ0ODkxY2Y4Njc3Y2Ux
Mjg5ZTcwHhcNMjYwOTIzMjAwMDA5WhcNMjYwOTI0MjAwMDA5WjAzMTEwLwYDVQQD
EygzYzYxY2YzMTY2NDRiNjRhMGRkNzZjMzNiZjE2NDVlNDNjZjcxZTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9c0S7uuwPwFW/Yba/dRxxSPAuh0
gc2mQcsqXxy3q/9vZyVPvWH+OKlrnOTcLTbsP1QjAAEf1gYlg1JVBdRB5v72rPSE
5U3nBhp28kwef6/4XWMyux2ozVywJmZldIxOGF5IT3BfSkJLJZ1W91+hj6tMdJGM
FVTNxBcEX/CSRrICqreazb84SVzzlXpFnvBpSBZBwzTzF5NdZ3U2Fr1/UGMd5K81
W9bQKg/C5egoSCFIWPYwrwn4tSPBMRhh9RFW00+8JbWbgCe/sup9nENSxCi87I0y
S9BCnZ6QdyUxttEClhiZqk80vDZdXjrXZv9KTPjGkvnBZlP4bB0lsGpShwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDxhzzFmRLZKDddsM78WReQ89x5UMB8GA1UdIwQY
MBaAFN/YZB4yiqXRnJYNSJHPhnfOEonnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzloa0hqS0twZEdjbGcxSWtjLUdkODRTaWVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8xZTNlYjQtNWRjZi00N2Q5LWJjNDYt
ZTNmYzUzNzkxNDkwLzEvMzloa0hqS0twZEdjbGcxSWtjLUdkODRTaWVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi8xZTNlYjQtNWRjZi00N2Q5LWJjNDYtZTNmYzUzNzkxNDkw
LzEvMzloa0hqS0twZEdjbGcxSWtjLUdkODRTaWVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACnJHCyak
f++/WqO59Gq04Ql0D29w6inPicMpD6p3R4OGBnZ/h7sn2cZnmbNpHrVP6LowPLTX
daPYNEmkeG3wxkT/5UPdr3Zr5ngVo6Qg8TfLeCi4gAH2sgMqp9oUz6a67TK/REHx
nkJ6TXwBP6Ov7n+Zp+mhSwiwq8O2UuRMsZwImw8x88VTtJuh242Dycr5E37bDpK0
z28m9zPfBhJbTANk7qemOBkRRuvzSMdnAcKjtk/jbvg0AASuVyev1DPiHOhjqfwG
NtXCdsgj2sPX61MswbehaZwvHZ0clj1dfQoWQjh2tVjVz7S50WZrM/Js20KM4PS9
fOCTZo8mi7F0yg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 00:07:16 2026 by rpki-client