Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft
File: R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft (raw, json)
Hash identifier: he5BixDy0L8p26BeXmrezk6T/ZAdCQb4Cfn2dQRXcVU=
Subject key identifier: B3:CB:E0:A5:65:28:C0:9A:F2:81:4F:D8:94:21:C3:70:28:04:4B:5D
Authority key identifier: 47:7F:4B:6E:C4:34:71:57:C4:D1:3E:F0:E7:AB:E1:29:0A:0B:F5:7C
Certificate issuer: /CN=477f4b6ec4347157c4d13ef0e7abe1290a0bf57c
Certificate serial: 01A1084B198740254A1B53A1FAF3E746C9E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R39LbsQ0cVfE0T7w56vhKQoL9Xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft
Manifest number: 0A90
Signing time: Sun 04 Oct 2026 19:01:41 +0000
Manifest this update: Sun 04 Oct 2026 19:01:41 +0000
Manifest next update: Mon 05 Oct 2026 19:01:41 +0000
Files and hashes: 1: R39LbsQ0cVfE0T7w56vhKQoL9Xw.crl (hash: npBstaX0rqZSSds323aCl7M3ElsNG0/8VY0riQusSvU=)
2: WTosev28vey7PdFKL1WZrUA91xA.roa (hash: ekI8w6gEsIIlqKjdpz2Fpya3mgwzySEILZV+ipAS2Wc=)
3: oRnNr1FlB4M-Ncw9fTwXwhAU40Q.roa (hash: y4K7So4r58lf5Yn7iRGJ9lrvo2ssl9GpvWxcRF0or7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/R39LbsQ0cVfE0T7w56vhKQoL9Xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 19:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:08:4b:19:87:40:25:4a:1b:53:a1:fa:f3:e7:46:c9:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=477f4b6ec4347157c4d13ef0e7abe1290a0bf57c
Validity
Not Before: Oct 4 19:01:41 2026 GMT
Not After : Oct 5 19:01:41 2026 GMT
Subject: CN=b3cbe0a56528c09af2814fd89421c37028044b5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:88:13:c4:72:7f:2f:2e:40:98:f5:46:b1:5f:
91:32:37:fe:05:f6:30:32:70:e6:14:37:73:30:8f:
92:d8:79:52:28:1f:5f:cc:69:1e:b3:34:fd:a8:b3:
f5:d5:21:8f:10:98:83:2f:31:97:c7:19:dc:4c:5a:
ae:db:44:7b:2f:88:3f:be:19:af:6a:c9:1a:d1:f9:
53:16:ff:7f:39:c3:56:6b:f7:88:90:05:3e:f3:96:
ce:36:fa:8d:a9:e4:26:a9:ca:da:39:08:30:d1:e6:
0f:f4:48:12:9c:2e:22:b2:f0:39:44:e4:b5:98:7a:
32:77:3e:85:51:9e:50:a2:ef:95:ab:ce:c8:a2:21:
f2:12:5a:9b:4b:f2:fc:e4:27:e0:06:21:2e:5d:6c:
38:35:21:9d:43:24:80:fa:39:91:ca:c9:12:98:a7:
e1:5f:77:f3:3f:63:8e:4a:e7:ee:1a:5f:e5:d3:87:
2c:d0:84:0c:76:57:f2:7b:43:68:69:86:e0:39:49:
2c:e0:25:68:de:84:da:ea:30:b3:c5:ca:79:ba:13:
88:12:04:c8:6a:88:55:49:6c:81:39:18:3c:32:04:
f3:e4:ef:c2:12:0f:69:f3:60:ba:b7:50:74:23:2a:
be:1b:3f:38:e9:37:c4:d9:77:65:f2:28:ec:9c:0c:
d4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:CB:E0:A5:65:28:C0:9A:F2:81:4F:D8:94:21:C3:70:28:04:4B:5D
X509v3 Authority Key Identifier:
keyid:47:7F:4B:6E:C4:34:71:57:C4:D1:3E:F0:E7:AB:E1:29:0A:0B:F5:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R39LbsQ0cVfE0T7w56vhKQoL9Xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:44:44:0f:dc:ec:95:b5:7b:29:73:06:32:57:f5:7b:03:9a:
18:49:b3:cb:41:61:c9:f2:88:79:a7:9a:d2:e6:87:d9:81:70:
9c:a4:a5:3a:cf:94:6e:97:b0:75:87:fe:d4:0c:0c:fe:0e:93:
4e:8f:72:30:92:ca:05:ad:49:55:a0:c3:72:72:cc:34:76:34:
38:0e:a5:20:7b:1d:b3:d2:8f:97:9f:f5:35:6a:10:35:08:a1:
8f:64:a4:63:df:4f:de:5c:d2:bc:aa:98:6c:68:09:59:1b:10:
71:0a:9f:3f:84:f9:4b:56:5e:2b:28:db:8d:36:7d:ea:77:38:
73:fa:dc:9c:ae:4a:10:77:b3:e4:3c:1f:a9:05:df:74:17:7b:
d3:86:01:5d:64:6a:c5:47:6a:dc:d7:3f:a2:ff:55:af:49:c0:
4a:25:b4:33:b7:d3:58:91:6e:8e:0b:7a:4d:2b:a2:39:fa:d8:
82:de:cd:d5:c1:ce:45:ea:bc:ba:b9:d7:da:ea:9b:d2:c6:ed:
f4:74:3d:1d:a9:29:08:de:00:d3:a0:2e:e0:de:94:2f:f6:28:
92:d8:25:08:d8:4b:f0:1d:22:41:9e:c6:70:4b:23:d3:f3:e9:
38:7f:ca:a3:62:e7:1b:ab:f6:a4:5f:43:fe:aa:35:e0:88:5f:
19:8f:17:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 06:41:01 2026 by rpki-client