Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft
File: R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft (raw, json)
Hash identifier: NWPMBAtEMBo/+/KTKcdHv8WdflL2n0KblJtYjbFFfck=
Subject key identifier: 0B:07:3B:0D:EE:9E:F7:8E:73:52:DA:C6:DA:84:5E:99:83:35:90:3F
Authority key identifier: 47:7F:4B:6E:C4:34:71:57:C4:D1:3E:F0:E7:AB:E1:29:0A:0B:F5:7C
Certificate issuer: /CN=477f4b6ec4347157c4d13ef0e7abe1290a0bf57c
Certificate serial: 019D27A8BF1BB34F5A6DFB957AAF1C791F91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R39LbsQ0cVfE0T7w56vhKQoL9Xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft
Manifest number: 088E
Signing time: Thu 26 Mar 2026 01:01:03 +0000
Manifest this update: Thu 26 Mar 2026 01:01:03 +0000
Manifest next update: Fri 27 Mar 2026 01:01:03 +0000
Files and hashes: 1: R39LbsQ0cVfE0T7w56vhKQoL9Xw.crl (hash: cpfTk0mGUlzW0PbNDDR2Z2L/MnTIIGWipeM0IW7ey48=)
2: WTosev28vey7PdFKL1WZrUA91xA.roa (hash: ekI8w6gEsIIlqKjdpz2Fpya3mgwzySEILZV+ipAS2Wc=)
3: oRnNr1FlB4M-Ncw9fTwXwhAU40Q.roa (hash: y4K7So4r58lf5Yn7iRGJ9lrvo2ssl9GpvWxcRF0or7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/R39LbsQ0cVfE0T7w56vhKQoL9Xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:bf:1b:b3:4f:5a:6d:fb:95:7a:af:1c:79:1f:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=477f4b6ec4347157c4d13ef0e7abe1290a0bf57c
Validity
Not Before: Mar 26 01:01:03 2026 GMT
Not After : Mar 27 01:01:03 2026 GMT
Subject: CN=0b073b0dee9ef78e7352dac6da845e998335903f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:51:91:09:38:54:0c:fa:6e:ad:02:9f:fe:63:
53:a7:57:2a:e7:55:93:e8:30:d0:fb:a1:9e:1d:12:
cf:29:93:24:bd:8d:ce:20:b6:bc:96:b0:50:41:43:
76:b9:3f:04:11:3f:e6:fe:0a:68:9b:49:d2:40:8d:
f7:bf:bd:a3:e1:e7:4e:27:15:2e:5e:3e:06:7e:6a:
1a:70:61:1b:96:4e:6f:bc:3c:2f:fc:82:c9:d0:d5:
1b:40:66:92:f2:0f:2f:4b:91:57:9a:14:a3:ac:4b:
5d:5b:12:a8:b3:72:4b:ff:bf:b8:e6:6a:c1:d4:bc:
a4:e6:38:2f:9f:86:ca:ec:a7:9d:02:7e:34:c6:d9:
07:bb:f2:04:6d:44:6f:ea:43:98:1c:62:64:b1:c2:
03:b2:7d:0c:08:7e:1b:a4:01:ed:93:a6:ce:40:f3:
3c:29:35:a5:bb:47:bb:d9:35:4f:4d:00:b8:5a:3e:
b3:ef:e5:93:87:72:15:61:8a:73:e9:05:10:13:f1:
af:b3:99:00:b2:a3:57:6e:00:48:d7:82:77:88:06:
ff:92:8a:b4:d7:1b:d9:4e:ce:e2:ef:1e:84:8d:42:
6f:05:48:e6:73:90:c4:db:37:35:02:82:18:f7:aa:
64:38:b5:58:f4:6f:ae:71:fa:56:31:f8:72:a8:74:
80:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:07:3B:0D:EE:9E:F7:8E:73:52:DA:C6:DA:84:5E:99:83:35:90:3F
X509v3 Authority Key Identifier:
keyid:47:7F:4B:6E:C4:34:71:57:C4:D1:3E:F0:E7:AB:E1:29:0A:0B:F5:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R39LbsQ0cVfE0T7w56vhKQoL9Xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:3c:d9:66:29:3a:3e:ea:16:24:ea:b4:ec:14:67:08:af:63:
13:47:d5:9a:f1:7c:e8:e2:25:c2:f9:f5:75:7c:74:a6:7b:f7:
4b:f2:42:4c:9e:3e:93:28:f4:fa:e9:69:23:f9:06:68:ce:2d:
05:b0:93:8f:26:54:f5:14:2f:15:29:c7:3e:91:6c:e9:5c:89:
3b:db:3f:7d:e0:08:e9:d8:71:a1:56:25:93:f1:b6:77:48:4c:
cb:1e:4a:d5:fe:59:2f:f7:ff:04:36:ae:99:86:eb:f4:c2:8a:
6b:56:a8:99:6e:f7:6d:bf:9e:d5:a7:a1:e0:da:63:8c:8d:37:
5d:12:4f:6e:6d:c2:79:58:ed:ef:ed:27:c6:19:4a:2a:65:90:
3a:ec:be:d1:4a:d6:e2:4b:2d:0d:d8:e1:e2:3e:96:02:38:d5:
46:26:dd:d6:bb:bd:28:c3:4d:ac:2a:b9:0b:4f:d1:7e:ab:0a:
82:b1:5a:bd:6d:c6:19:1a:35:df:82:54:c6:7e:cc:c8:70:ce:
ae:5f:14:8c:81:59:1d:6d:ad:1b:01:31:3c:fc:7e:f1:90:45:
0b:17:e9:b6:00:5b:93:18:a2:5c:f7:b8:c9:4c:c9:4a:d6:39:
d1:b3:cb:35:0f:58:f6:0e:08:6c:3e:2f:17:54:46:d7:d2:4e:
fb:a4:bf:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:46:09 2026 by rpki-client