Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.mft
File: 39BGr17cEZZAltwg9q8d5V2ckDA.mft (raw, json)
Hash identifier: RBxpmV25v1EmeTAV28GjWDn/LPtqf2F7jxay/bEeD84=
Subject key identifier: CA:BC:53:A9:6C:C9:30:6C:29:D4:8F:A6:1A:E9:DB:29:97:8A:40:28
Authority key identifier: DF:D0:46:AF:5E:DC:11:96:40:96:DC:20:F6:AF:1D:E5:5D:9C:90:30
Certificate issuer: /CN=dfd046af5edc11964096dc20f6af1de55d9c9030
Certificate serial: 019D2628297E8ED861565E5B3A0764217C2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39BGr17cEZZAltwg9q8d5V2ckDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.mft
Manifest number: 0767
Signing time: Wed 25 Mar 2026 18:00:59 +0000
Manifest this update: Wed 25 Mar 2026 18:00:59 +0000
Manifest next update: Thu 26 Mar 2026 18:00:59 +0000
Files and hashes: 1: 1R8Nv6bwHGDwo2mOtPOF_3tZNSM.asa (hash: tt15uIuTQgd6Syibc3srDH+USXZ4ejIXqOAjH/FfWt0=)
2: 39BGr17cEZZAltwg9q8d5V2ckDA.crl (hash: i4nNxyco7snri9CrEiNy1syiLIcm96cpRvs52s1/j3A=)
3: QTUs2t29sOiO1bQndfZmKxNAYdQ.roa (hash: myzQSNEVPstuOfu5qsB9AEg4A9vQ4YhsK6/lq/QzmjU=)
4: V0dM0OGiOIRr_LANVdvcw5kopNw.roa (hash: LNRzC3fIfmhFsLHaDaO4AM9qxVQUMv8ErtHtGjlMGJw=)
5: sbN8EnhWE2l__QvXJmkc9vK_YUw.roa (hash: Uceuxsw6EIStQVLEZXyq2I0QPItxAW4XKZWxVvN6eTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/39BGr17cEZZAltwg9q8d5V2ckDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:29:7e:8e:d8:61:56:5e:5b:3a:07:64:21:7c:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd046af5edc11964096dc20f6af1de55d9c9030
Validity
Not Before: Mar 25 18:00:59 2026 GMT
Not After : Mar 26 18:00:59 2026 GMT
Subject: CN=cabc53a96cc9306c29d48fa61ae9db29978a4028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:ef:03:f9:de:e1:6e:23:f9:1f:f7:0e:1b:c5:
87:e0:d0:96:17:6c:8b:e5:a0:c5:50:9e:e3:69:86:
fe:31:43:11:64:cd:09:64:fc:9f:96:64:4f:d1:07:
25:3a:87:33:3b:16:af:f4:21:45:21:8c:c3:01:74:
b0:9a:d5:51:17:a0:9b:0e:ba:99:d2:f7:47:5e:8b:
37:f9:bf:5b:da:04:d3:2d:9d:8a:72:80:3c:fb:51:
5f:2c:d3:6b:c1:80:c7:46:39:00:76:f2:18:13:c9:
5a:54:43:fa:85:3f:93:bd:cd:8f:dd:73:d4:bb:d6:
fe:52:70:f5:8e:3e:1f:2b:52:af:9e:ff:3f:4d:f7:
6d:b9:d0:a7:cc:ae:f6:f4:5a:94:eb:8f:d4:66:78:
54:c3:f1:d8:d1:2e:fa:61:9a:fb:b1:00:44:c1:39:
ad:f9:49:cc:c4:58:28:4a:9a:40:e5:1a:ae:d8:04:
f2:a9:d8:bc:da:e1:82:be:1c:8e:64:ed:17:4e:c2:
d6:24:b9:09:3b:38:d5:4d:a2:71:8f:79:74:62:8c:
4b:09:44:02:06:41:6f:46:71:d0:65:92:9c:db:3e:
1b:b9:6f:ed:7b:a0:01:f4:b5:71:c7:6b:86:6e:ad:
99:95:63:41:4f:bd:9f:83:5b:89:5a:e6:35:36:23:
8d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:BC:53:A9:6C:C9:30:6C:29:D4:8F:A6:1A:E9:DB:29:97:8A:40:28
X509v3 Authority Key Identifier:
keyid:DF:D0:46:AF:5E:DC:11:96:40:96:DC:20:F6:AF:1D:E5:5D:9C:90:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39BGr17cEZZAltwg9q8d5V2ckDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:1c:05:fc:89:96:c7:b7:8e:5b:27:7b:66:64:fa:13:c4:38:
42:77:dc:83:5e:eb:a5:b7:01:02:97:29:22:6f:05:02:f3:1a:
90:68:f3:a4:92:62:91:be:8f:35:42:c7:65:35:c5:89:c9:b6:
ea:1b:fa:90:02:9f:bc:40:f0:25:a9:27:fe:ca:bf:4b:6e:8a:
53:cf:f9:6d:c1:2e:33:46:80:fc:8f:a0:d7:f9:22:a5:ab:3a:
37:63:c1:83:46:34:9d:17:dc:db:ae:39:a4:44:10:6b:3e:69:
11:d1:1a:5c:c1:64:7a:21:c3:df:36:ae:b1:28:9e:49:68:19:
fb:22:4c:96:bc:8e:6f:8c:a6:d6:14:36:a4:56:8d:96:b8:00:
14:70:27:ea:87:43:a5:cf:1e:b0:ad:31:53:04:d5:17:2b:a0:
b7:1d:c0:03:f9:5b:c6:94:a4:88:d2:50:c9:b8:a9:c3:4d:56:
00:eb:ca:f7:54:39:14:f6:99:19:0a:b7:e4:3e:1d:e3:7a:58:
69:92:7c:ee:22:ac:0c:12:26:c7:2d:ed:7d:0d:b0:2d:ce:5c:
41:16:a8:dd:fc:b5:16:b6:14:4e:86:e7:ff:78:25:a5:31:7c:
6d:ae:29:23:5a:8f:4f:93:03:af:23:6a:b7:d8:8e:2d:2e:50:
7b:27:a9:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:21:59 2026 by rpki-client