Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft
File: R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft (raw, json)
Hash identifier: bqnwQ9rb0oCj9j7sxPvpkFroakUlbBTLkLtZM6BvZKA=
Subject key identifier: 64:60:CE:55:01:F6:AF:83:A9:DB:CF:29:30:B5:A6:AF:EB:D4:23:88
Authority key identifier: 47:7F:4B:6E:C4:34:71:57:C4:D1:3E:F0:E7:AB:E1:29:0A:0B:F5:7C
Certificate issuer: /CN=477f4b6ec4347157c4d13ef0e7abe1290a0bf57c
Certificate serial: 019E1ED9DF59E4C70E2306CDA22DC51B3895
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R39LbsQ0cVfE0T7w56vhKQoL9Xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft
Manifest number: 090E
Signing time: Wed 13 May 2026 01:00:55 +0000
Manifest this update: Wed 13 May 2026 01:00:55 +0000
Manifest next update: Thu 14 May 2026 01:00:55 +0000
Files and hashes: 1: R39LbsQ0cVfE0T7w56vhKQoL9Xw.crl (hash: 7gIZ5tF2kKWZAd8nxorHX0vV0CMB+mdECS67mXm3w4s=)
2: WTosev28vey7PdFKL1WZrUA91xA.roa (hash: ekI8w6gEsIIlqKjdpz2Fpya3mgwzySEILZV+ipAS2Wc=)
3: oRnNr1FlB4M-Ncw9fTwXwhAU40Q.roa (hash: y4K7So4r58lf5Yn7iRGJ9lrvo2ssl9GpvWxcRF0or7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/R39LbsQ0cVfE0T7w56vhKQoL9Xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:d9:df:59:e4:c7:0e:23:06:cd:a2:2d:c5:1b:38:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=477f4b6ec4347157c4d13ef0e7abe1290a0bf57c
Validity
Not Before: May 13 01:00:55 2026 GMT
Not After : May 14 01:00:55 2026 GMT
Subject: CN=6460ce5501f6af83a9dbcf2930b5a6afebd42388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:91:13:be:fc:44:51:df:71:db:09:1f:e5:64:
c8:e1:f7:f3:1d:3e:17:06:6e:38:d4:0d:63:42:fa:
a9:60:c8:a4:37:9e:6e:83:ce:77:79:4d:a2:0b:69:
e4:57:2e:a5:e4:2d:25:6d:6c:c4:42:4d:04:78:51:
cd:e8:e1:1a:bb:fb:68:f3:d4:c0:41:bb:9b:6a:6a:
76:7e:6a:cf:c8:85:e8:bd:69:68:27:40:c5:e1:79:
f4:4e:9a:45:c8:22:49:4d:63:c6:11:42:4e:58:f3:
9d:a0:9b:81:d4:51:33:96:30:20:b2:e6:d4:18:cd:
ea:b0:fb:5c:d3:f0:a2:04:3d:c3:cf:50:19:3e:1d:
52:25:c3:4c:15:97:0f:4e:c7:ed:2f:b1:1e:7c:39:
a9:4e:cc:04:b2:3c:6a:16:fd:83:07:ae:50:e7:73:
ac:98:be:b7:95:2e:e7:08:44:2c:9a:9f:92:bd:fd:
99:e1:c0:26:8f:f1:5c:c3:9e:84:22:cc:24:bb:9b:
3a:0e:ea:4a:a6:cf:71:06:12:1d:36:6c:82:60:e2:
d4:64:97:92:94:6e:c2:70:d2:e0:ce:0d:ec:31:b7:
29:bf:ca:46:e3:17:89:97:c0:dc:50:51:3e:5b:69:
93:36:93:91:5b:96:0d:23:0f:a3:a0:43:1d:84:53:
91:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:60:CE:55:01:F6:AF:83:A9:DB:CF:29:30:B5:A6:AF:EB:D4:23:88
X509v3 Authority Key Identifier:
keyid:47:7F:4B:6E:C4:34:71:57:C4:D1:3E:F0:E7:AB:E1:29:0A:0B:F5:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R39LbsQ0cVfE0T7w56vhKQoL9Xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:38:2e:b8:20:3f:65:00:6a:70:ad:c4:c6:f9:00:03:82:a2:
57:00:14:4a:1c:0c:72:b9:c0:09:30:cf:48:f2:5f:44:de:3f:
44:cd:74:fc:73:fe:be:2d:a1:2d:4a:88:7c:5a:d5:23:a4:6c:
bb:a8:00:83:23:3f:5c:df:8c:97:4a:44:5e:ce:4a:b0:81:19:
a3:4f:0a:7d:42:f4:5d:e8:81:8e:d0:05:8c:2b:a2:61:73:5e:
cf:10:fe:0a:21:45:d0:1f:d5:e3:41:59:5c:cc:40:33:2a:5b:
a8:61:52:13:a8:16:ff:af:24:e4:fd:f6:c7:09:e4:02:ff:5b:
f5:f4:04:4b:a0:f9:60:36:0b:3b:70:70:dd:af:b2:a7:91:43:
16:a1:79:ff:e2:44:0d:08:35:ac:0b:05:4c:54:4a:92:b1:a0:
c1:0f:93:df:24:52:b3:f7:ae:b4:a6:24:84:91:f8:78:b6:95:
59:41:4d:e8:0e:4b:a9:1e:c3:48:3f:cc:0e:94:1d:0f:05:11:
09:ab:43:9d:6f:b1:97:2b:99:94:29:a1:d1:f4:80:ed:4a:6b:
c4:1a:ff:c6:77:14:82:e6:85:32:04:51:58:75:02:69:65:78:
6c:6b:0c:8a:35:32:49:86:8b:fa:d0:80:e9:1a:75:c6:3f:30:
a6:47:32:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4e2d9Z5McOIwbNoi3FGziVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3N2Y0YjZlYzQzNDcxNTdjNGQxM2VmMGU3YWJlMTI5MGEw
YmY1N2MwHhcNMjYwNTEzMDEwMDU1WhcNMjYwNTE0MDEwMDU1WjAzMTEwLwYDVQQD
Eyg2NDYwY2U1NTAxZjZhZjgzYTlkYmNmMjkzMGI1YTZhZmViZDQyMzg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpETvvxEUd9x2wkf5WTI4ffzHT4X
Bm441A1jQvqpYMikN55ug853eU2iC2nkVy6l5C0lbWzEQk0EeFHN6OEau/to89TA
Qbubamp2fmrPyIXovWloJ0DF4Xn0TppFyCJJTWPGEUJOWPOdoJuB1FEzljAgsubU
GM3qsPtc0/CiBD3Dz1AZPh1SJcNMFZcPTsftL7EefDmpTswEsjxqFv2DB65Q53Os
mL63lS7nCEQsmp+Svf2Z4cAmj/Fcw56EIswku5s6DupKps9xBhIdNmyCYOLUZJeS
lG7CcNLgzg3sMbcpv8pG4xeJl8DcUFE+W2mTNpORW5YNIw+joEMdhFORGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGRgzlUB9q+DqdvPKTC1pq/r1COIMB8GA1UdIwQY
MBaAFEd/S27ENHFXxNE+8Oer4SkKC/V8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjM5TGJzUTBjVmZFMFQ3dzU2dmhLUW9MOVh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zOTNlMTYtODk4ZS00NWQ4LTlkNzIt
ZDhiZDI1MGI2NGY5LzEvUjM5TGJzUTBjVmZFMFQ3dzU2dmhLUW9MOVh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8zOTNlMTYtODk4ZS00NWQ4LTlkNzItZDhiZDI1MGI2NGY5
LzEvUjM5TGJzUTBjVmZFMFQ3dzU2dmhLUW9MOVh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAzguuCA/
ZQBqcK3ExvkAA4KiVwAUShwMcrnACTDPSPJfRN4/RM10/HP+vi2hLUqIfFrVI6Rs
u6gAgyM/XN+Ml0pEXs5KsIEZo08KfUL0XeiBjtAFjCuiYXNezxD+CiFF0B/V40FZ
XMxAMypbqGFSE6gW/68k5P32xwnkAv9b9fQES6D5YDYLO3Bw3a+yp5FDFqF5/+JE
DQg1rAsFTFRKkrGgwQ+T3yRSs/eutKYkhJH4eLaVWUFN6A5LqR7DSD/MDpQdDwUR
CatDnW+xlyuZlCmh0fSA7UprxBr/xncUguaFMgRRWHUCaWV4bGsMijUySYaL+tCA
6Rp1xj8wpkcy8Q==
-----END CERTIFICATE-----
Generated at Wed May 13 06:41:44 2026 by rpki-client