Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.mft
File: 39hkHjKKpdGclg1Ikc-Gd84Siec.mft (raw, json)
Hash identifier: 4tKciNsFWab9bCZdHfq2PKt+ArTpYELTXswATIl/2+8=
Subject key identifier: 08:92:6E:86:5F:B5:AE:10:89:09:98:EE:84:CC:3D:AF:0C:6A:8B:69
Authority key identifier: DF:D8:64:1E:32:8A:A5:D1:9C:96:0D:48:91:CF:86:77:CE:12:89:E7
Certificate issuer: /CN=dfd8641e328aa5d19c960d4891cf8677ce1289e7
Certificate serial: 019F9135B76578E7EB00DE69D580FC7854B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39hkHjKKpdGclg1Ikc-Gd84Siec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.mft
Manifest number: 02CC
Signing time: Thu 23 Jul 2026 23:00:44 +0000
Manifest this update: Thu 23 Jul 2026 23:00:44 +0000
Manifest next update: Fri 24 Jul 2026 23:00:44 +0000
Files and hashes: 1: 2qvSkbHTsb98tl7LYwqPesWPH0g.roa (hash: Y4264CBO/wnBYQA3v/iM8WdJyQ6sBIxNEIMB+ic9wcM=)
2: 39hkHjKKpdGclg1Ikc-Gd84Siec.crl (hash: 6MHbiksedaOHxPhyrnsqdW2FBjfpjH7vXat3fxvBBgA=)
3: LPFoAB4sPBskTSmjN__uUCavKxw.roa (hash: ESBBS9bOaL8PT/NnpNwZWIjfHqj4VbeRzrLEqzVAw6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.mft
rsync://rpki.ripe.net/repository/DEFAULT/39hkHjKKpdGclg1Ikc-Gd84Siec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:b7:65:78:e7:eb:00:de:69:d5:80:fc:78:54:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd8641e328aa5d19c960d4891cf8677ce1289e7
Validity
Not Before: Jul 23 23:00:44 2026 GMT
Not After : Jul 24 23:00:44 2026 GMT
Subject: CN=08926e865fb5ae10890998ee84cc3daf0c6a8b69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:96:49:9b:89:15:81:72:30:b2:dd:34:00:fd:
38:b6:63:cc:8f:c4:58:25:12:5c:89:5c:ca:dd:23:
3c:60:82:9d:45:df:95:a8:c3:d5:fe:03:b3:cd:01:
3c:cf:4f:7c:3c:7f:3a:2d:9d:15:4f:7d:e0:43:01:
f6:48:02:9f:2d:f2:05:b8:e0:1a:09:3e:ee:67:1b:
65:61:e9:0a:1d:a9:62:d2:92:64:27:c4:01:a2:08:
74:f9:c3:6c:bb:18:60:b8:41:8b:43:41:e1:cf:f4:
e0:a1:5f:bc:22:8b:ab:27:17:0c:5b:62:69:33:a3:
08:d9:e1:31:94:39:68:ec:a6:15:f6:8a:3e:0e:ac:
98:76:a0:07:74:35:c3:e3:81:eb:80:9d:8b:79:1f:
8a:96:c3:b1:76:e7:bf:39:42:2d:e9:9f:3d:4a:ac:
8c:59:84:da:1b:70:56:70:36:84:b1:bd:22:1b:05:
a2:4d:c0:37:12:ae:30:27:11:9a:f8:ad:a3:5f:98:
eb:35:fc:3a:89:46:38:ee:1e:c4:ba:bd:e7:ee:e8:
9b:2f:01:ed:c3:53:2f:3b:f8:07:17:06:63:60:09:
cf:11:59:5a:d1:3c:8e:a9:5b:5a:ef:f3:6b:73:fd:
19:b7:85:85:8d:dc:e8:23:a0:64:ad:0d:91:fa:a3:
ba:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:92:6E:86:5F:B5:AE:10:89:09:98:EE:84:CC:3D:AF:0C:6A:8B:69
X509v3 Authority Key Identifier:
keyid:DF:D8:64:1E:32:8A:A5:D1:9C:96:0D:48:91:CF:86:77:CE:12:89:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39hkHjKKpdGclg1Ikc-Gd84Siec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:84:1c:1d:f1:79:93:fd:18:a3:e6:70:c6:c6:66:9d:27:c7:
91:39:a6:4b:ab:71:d1:ba:13:48:66:7e:37:57:14:ee:89:d7:
7e:2c:a5:b6:bd:0a:ae:11:c7:06:d3:be:c4:27:e3:a7:59:b7:
92:73:2b:3b:06:5a:61:00:d2:73:46:3f:c1:c6:32:3d:d2:b7:
ae:1b:78:df:33:d0:68:a7:b4:72:14:98:b7:1c:17:7f:d2:dd:
93:80:5e:92:a5:8a:c1:c7:24:c8:b5:c3:5b:7e:d1:e0:14:ad:
48:6d:f0:ea:f6:1b:d0:e7:d5:38:6f:bb:77:e1:3c:97:5b:fc:
cc:1b:84:07:2f:18:c2:5f:4a:68:14:49:fa:e1:2a:a0:5e:54:
be:fd:28:b6:6f:24:6a:6f:77:88:46:a2:d4:7c:29:89:cc:c4:
cf:a5:2d:7c:f5:14:2e:57:32:ec:b5:db:e3:dc:57:ca:df:64:
7d:90:b4:c3:d9:2b:ae:05:2e:80:17:c2:9c:1f:02:31:09:f6:
a3:e7:d3:3b:e7:4a:ef:ff:27:34:2d:35:b2:e4:bf:d3:11:a8:
61:97:74:12:8e:0f:f3:64:f2:42:6a:18:fb:f8:01:01:4d:e8:
69:de:4a:8e:9e:f1:9a:bf:8d:2d:ca:eb:77:c6:06:06:fc:81:
d3:79:81:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RNbdleOfrAN5p1YD8eFSwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmZDg2NDFlMzI4YWE1ZDE5Yzk2MGQ0ODkxY2Y4Njc3Y2Ux
Mjg5ZTcwHhcNMjYwNzIzMjMwMDQ0WhcNMjYwNzI0MjMwMDQ0WjAzMTEwLwYDVQQD
EygwODkyNmU4NjVmYjVhZTEwODkwOTk4ZWU4NGNjM2RhZjBjNmE4YjY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppZJm4kVgXIwst00AP04tmPMj8RY
JRJciVzK3SM8YIKdRd+VqMPV/gOzzQE8z098PH86LZ0VT33gQwH2SAKfLfIFuOAa
CT7uZxtlYekKHali0pJkJ8QBogh0+cNsuxhguEGLQ0Hhz/TgoV+8IourJxcMW2Jp
M6MI2eExlDlo7KYV9oo+DqyYdqAHdDXD44HrgJ2LeR+KlsOxdue/OUIt6Z89SqyM
WYTaG3BWcDaEsb0iGwWiTcA3Eq4wJxGa+K2jX5jrNfw6iUY47h7Eur3n7uibLwHt
w1MvO/gHFwZjYAnPEVla0TyOqVta7/Nrc/0Zt4WFjdzoI6BkrQ2R+qO6zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAiSboZfta4QiQmY7oTMPa8MaotpMB8GA1UdIwQY
MBaAFN/YZB4yiqXRnJYNSJHPhnfOEonnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzloa0hqS0twZEdjbGcxSWtjLUdkODRTaWVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8xZTNlYjQtNWRjZi00N2Q5LWJjNDYt
ZTNmYzUzNzkxNDkwLzEvMzloa0hqS0twZEdjbGcxSWtjLUdkODRTaWVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi8xZTNlYjQtNWRjZi00N2Q5LWJjNDYtZTNmYzUzNzkxNDkw
LzEvMzloa0hqS0twZEdjbGcxSWtjLUdkODRTaWVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANYQcHfF5
k/0Yo+ZwxsZmnSfHkTmmS6tx0boTSGZ+N1cU7onXfiyltr0KrhHHBtO+xCfjp1m3
knMrOwZaYQDSc0Y/wcYyPdK3rht43zPQaKe0chSYtxwXf9Ldk4BekqWKwcckyLXD
W37R4BStSG3w6vYb0OfVOG+7d+E8l1v8zBuEBy8Ywl9KaBRJ+uEqoF5Uvv0otm8k
am93iEai1HwpiczEz6UtfPUULlcy7LXb49xXyt9kfZC0w9krrgUugBfCnB8CMQn2
o+fTO+dK7/8nNC01suS/0xGoYZd0Eo4P82TyQmoY+/gBAU3oad5Kjp7xmr+NLcrr
d8YGBvyB03mBJg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:18:48 2026 by rpki-client