Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft
File: R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft (raw, json)
Hash identifier: VMqEUyt4xrYqs868j0jHLo4FMRvFccRfb3YgHj8eDmw=
Subject key identifier: D8:0A:04:B1:6B:41:B0:74:AB:C5:78:48:E2:BA:F4:62:5C:56:08:91
Authority key identifier: 47:7F:4B:6E:C4:34:71:57:C4:D1:3E:F0:E7:AB:E1:29:0A:0B:F5:7C
Certificate issuer: /CN=477f4b6ec4347157c4d13ef0e7abe1290a0bf57c
Certificate serial: 019F9391B2BF9C9F5F490A5D8B6DFC7FE95F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R39LbsQ0cVfE0T7w56vhKQoL9Xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft
Manifest number: 09CF
Signing time: Fri 24 Jul 2026 10:00:26 +0000
Manifest this update: Fri 24 Jul 2026 10:00:26 +0000
Manifest next update: Sat 25 Jul 2026 10:00:26 +0000
Files and hashes: 1: R39LbsQ0cVfE0T7w56vhKQoL9Xw.crl (hash: 5i6iklQ2XHxIoIK7iGaINoU9Qjh4MiL4TVvA36DT5wA=)
2: WTosev28vey7PdFKL1WZrUA91xA.roa (hash: ekI8w6gEsIIlqKjdpz2Fpya3mgwzySEILZV+ipAS2Wc=)
3: oRnNr1FlB4M-Ncw9fTwXwhAU40Q.roa (hash: y4K7So4r58lf5Yn7iRGJ9lrvo2ssl9GpvWxcRF0or7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/R39LbsQ0cVfE0T7w56vhKQoL9Xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:91:b2:bf:9c:9f:5f:49:0a:5d:8b:6d:fc:7f:e9:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=477f4b6ec4347157c4d13ef0e7abe1290a0bf57c
Validity
Not Before: Jul 24 10:00:26 2026 GMT
Not After : Jul 25 10:00:26 2026 GMT
Subject: CN=d80a04b16b41b074abc57848e2baf4625c560891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:33:06:57:97:a2:c4:88:d0:b2:3b:a3:5c:ef:
9a:d8:54:c9:6c:d5:ae:e4:dc:ad:c9:20:35:f3:1b:
e7:13:69:87:d2:72:64:8f:1f:90:7e:19:31:79:74:
73:57:da:eb:ba:a3:92:01:e9:db:f3:33:63:b4:28:
65:5d:8d:0f:c6:24:70:40:80:4d:3f:e8:94:fd:45:
27:01:38:fa:55:c2:f5:5d:76:74:7c:4d:fa:32:e9:
1e:e5:ff:93:af:94:0f:a8:52:cd:86:a5:08:13:28:
f8:82:38:9f:55:3b:92:98:0a:2d:01:be:fe:74:c6:
ae:1d:5a:53:70:c4:df:d5:72:a4:fb:f2:b1:72:0c:
1d:53:43:ba:f8:f2:17:e5:b3:3e:2b:fa:c2:99:eb:
32:74:e2:f1:4d:20:30:0f:b5:f6:b6:a0:46:89:7b:
ae:df:58:a0:4e:4b:49:48:48:95:8d:78:4a:00:6a:
59:1d:e9:b0:38:c8:35:29:b2:7b:53:b6:d0:3f:b8:
bc:b4:04:63:2c:74:cd:a4:0b:c5:3e:3b:22:8b:3a:
3c:b1:cf:76:21:60:b5:a4:5f:fd:19:6e:d3:ac:b2:
db:41:a0:81:24:97:75:aa:eb:db:4c:73:4e:a9:0d:
ed:2f:c2:31:26:2c:f1:81:ba:0f:d1:f1:ed:32:ae:
37:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:0A:04:B1:6B:41:B0:74:AB:C5:78:48:E2:BA:F4:62:5C:56:08:91
X509v3 Authority Key Identifier:
keyid:47:7F:4B:6E:C4:34:71:57:C4:D1:3E:F0:E7:AB:E1:29:0A:0B:F5:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R39LbsQ0cVfE0T7w56vhKQoL9Xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:4e:e5:ce:2c:c6:1c:ef:93:c4:22:b5:39:f5:c6:64:b6:04:
f8:b1:ac:a5:10:2c:ed:78:fa:ba:10:1c:01:8f:3f:03:39:ae:
77:e7:df:c9:9c:e3:c2:2d:7f:e2:8d:d0:8f:58:37:fb:16:bf:
d6:2d:71:1a:28:9a:ad:85:7a:1a:c5:1a:96:9e:76:97:17:00:
27:63:f9:fa:c0:2b:5b:18:eb:30:25:ea:47:37:7d:98:26:a4:
38:68:03:4d:4e:83:44:ab:cd:9b:28:65:30:e3:98:02:45:aa:
cb:a2:19:21:1d:51:65:1c:82:2a:6e:05:5b:af:f1:bf:ee:bd:
d2:cc:32:be:01:7d:b0:93:21:55:9a:bd:3e:9b:a4:ab:fe:b3:
eb:37:1b:8d:5b:e7:33:3d:d5:ad:40:0d:98:17:f8:9b:e0:3b:
b9:f8:2c:0b:00:e2:87:82:2f:5f:e0:40:b1:61:c1:cf:0c:9b:
c1:28:14:c3:da:99:57:50:25:94:1d:80:d2:d8:67:e5:20:bc:
f3:56:95:06:3d:b5:a1:17:77:9d:3c:d7:04:ba:3e:bb:6d:b6:
b2:a0:d0:88:64:22:bf:2d:19:d9:3c:fb:6d:1c:5f:70:db:d2:
0e:1b:6d:99:03:99:7a:87:15:e0:9a:56:29:39:9c:90:23:79:
a4:df:49:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:03:44 2026 by rpki-client