Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/245873-1ca7-4b71-b220-edb0418cac4d/1/39D7xN6B7icnq6PpEK_NKlOmZAw.mft
File: 39D7xN6B7icnq6PpEK_NKlOmZAw.mft (raw, json)
Hash identifier: D4J6BMzGoed3L60rQwz7i7qYQaj/AAJe++xB/v8zyyI=
Subject key identifier: B5:71:77:14:B6:55:48:8E:E2:B6:19:D7:57:4D:9E:7A:F5:24:4E:D0
Authority key identifier: DF:D0:FB:C4:DE:81:EE:27:27:AB:A3:E9:10:AF:CD:2A:53:A6:64:0C
Certificate issuer: /CN=dfd0fbc4de81ee2727aba3e910afcd2a53a6640c
Certificate serial: 019F90C77B34EC26DFF693598A49310955CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39D7xN6B7icnq6PpEK_NKlOmZAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/245873-1ca7-4b71-b220-edb0418cac4d/1/39D7xN6B7icnq6PpEK_NKlOmZAw.mft
Manifest number: 02CA
Signing time: Thu 23 Jul 2026 21:00:19 +0000
Manifest this update: Thu 23 Jul 2026 21:00:19 +0000
Manifest next update: Fri 24 Jul 2026 21:00:19 +0000
Files and hashes: 1: 39D7xN6B7icnq6PpEK_NKlOmZAw.crl (hash: qz53X10K+uj7fuNlfhLxW1/Q3wLaaVxlbyQtVjwadgQ=)
2: SbQQ2AN295Q5ndar8yL54sGGq4E.roa (hash: T6gv6dIwlGoFALLgqsw4xKZ6JgXOgV/2sxGYkLgA1c0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/245873-1ca7-4b71-b220-edb0418cac4d/1/39D7xN6B7icnq6PpEK_NKlOmZAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/245873-1ca7-4b71-b220-edb0418cac4d/1/39D7xN6B7icnq6PpEK_NKlOmZAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/39D7xN6B7icnq6PpEK_NKlOmZAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:7b:34:ec:26:df:f6:93:59:8a:49:31:09:55:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd0fbc4de81ee2727aba3e910afcd2a53a6640c
Validity
Not Before: Jul 23 21:00:19 2026 GMT
Not After : Jul 24 21:00:19 2026 GMT
Subject: CN=b5717714b655488ee2b619d7574d9e7af5244ed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c1:f1:0f:cc:a3:4e:51:29:8b:c1:e6:8c:1a:
67:ab:d6:3d:37:c8:84:db:2a:4a:53:79:19:52:35:
3c:f2:c3:0d:81:73:32:4e:01:43:77:00:2b:40:52:
09:8d:22:f1:6b:ab:fd:8a:a9:ec:91:04:90:52:91:
1a:a9:37:f6:79:a8:67:d0:5e:96:27:b7:46:b7:26:
94:cb:da:40:d1:bf:18:df:53:53:fc:62:50:10:5a:
f6:ff:84:ad:cf:b4:fd:b8:92:ec:cd:44:23:14:76:
63:70:e4:19:19:7b:4e:d9:63:20:c1:a7:16:e7:41:
92:45:a4:68:b3:af:af:62:b4:ca:f6:3b:e3:b0:8d:
5d:36:2e:ff:27:f1:56:64:df:6c:4f:ce:d2:c8:4e:
ed:cf:ed:da:6b:80:89:5a:5f:0e:62:8f:1b:d0:e0:
ac:d0:6d:b9:6a:08:41:f8:ef:96:d7:11:73:48:1f:
88:16:b1:46:73:cb:e5:87:88:7a:70:cd:7d:9e:56:
c8:6c:1b:cd:c4:97:25:40:45:79:5e:8f:6b:69:1f:
d8:42:62:8c:2c:71:51:0a:02:69:8f:d2:dd:2a:85:
59:db:bd:c4:c2:4e:3d:23:69:01:fe:f2:38:28:42:
e8:e5:ff:8e:26:09:bb:dc:88:20:13:72:53:b7:4e:
20:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:71:77:14:B6:55:48:8E:E2:B6:19:D7:57:4D:9E:7A:F5:24:4E:D0
X509v3 Authority Key Identifier:
keyid:DF:D0:FB:C4:DE:81:EE:27:27:AB:A3:E9:10:AF:CD:2A:53:A6:64:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39D7xN6B7icnq6PpEK_NKlOmZAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/245873-1ca7-4b71-b220-edb0418cac4d/1/39D7xN6B7icnq6PpEK_NKlOmZAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/245873-1ca7-4b71-b220-edb0418cac4d/1/39D7xN6B7icnq6PpEK_NKlOmZAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:39:d0:bd:32:77:6e:de:af:1a:8d:6a:43:21:e4:35:42:0c:
96:0e:70:db:8d:5f:6b:4d:40:3f:fe:d6:5d:a8:c2:1d:53:af:
2a:5c:3f:63:6c:3e:10:b2:cc:65:56:ed:54:ef:9c:38:17:0d:
5f:e5:f9:ac:c1:b2:70:1e:8b:b2:2e:2f:75:e2:1c:6c:e2:31:
1d:46:3e:93:1a:e7:e5:d8:18:d6:f7:64:34:16:af:36:b7:df:
ae:07:85:eb:38:72:1b:2b:34:43:34:a6:96:bb:6f:d2:e6:df:
d8:8a:7a:b9:0e:03:9e:57:18:cb:41:c0:1e:32:0b:9e:31:e4:
a6:ab:3c:8c:b5:d8:62:f0:3d:a8:1e:74:97:fd:fc:66:85:4e:
04:ca:30:99:53:05:eb:0a:f6:50:b2:af:8d:7a:7e:9b:2c:ac:
f8:a4:a8:d5:ba:76:7c:96:22:d8:bf:32:80:54:6c:b5:0a:ef:
8e:04:6c:87:4b:89:98:2f:dc:cf:fa:3d:2c:0f:73:67:34:04:
cc:10:79:4b:e9:7b:78:9d:d1:a8:a9:db:34:c3:bb:7d:1f:f8:
c1:8b:8e:04:87:a3:ca:60:31:36:d2:90:c5:ce:f9:31:99:e1:
58:d3:bd:38:52:35:b9:8e:81:53:8e:1f:37:14:2a:1c:14:ce:
52:b4:d2:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:16:16 2026 by rpki-client