Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
File: 39UkoF1He4L7ypPnpQSqMaOtaGM.mft (raw, json)
Hash identifier: OJaD1oLVfakzH94FzLIER/HWxl4EgNK7XljP8LMbhDQ=
Subject key identifier: B8:84:53:77:0F:A3:F5:02:C4:AE:77:9A:09:40:3B:F8:C1:AD:FE:0F
Authority key identifier: DF:D5:24:A0:5D:47:7B:82:FB:CA:93:E7:A5:04:AA:31:A3:AD:68:63
Certificate issuer: /CN=dfd524a05d477b82fbca93e7a504aa31a3ad6863
Certificate serial: 01A1D9EEC9D7350C56486986F2673EACDC6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
Manifest number: 1B07
Signing time: Sat 14 Nov 2026 12:01:07 +0000
Manifest this update: Sat 14 Nov 2026 12:01:07 +0000
Manifest next update: Sun 15 Nov 2026 12:01:07 +0000
Files and hashes: 1: 39UkoF1He4L7ypPnpQSqMaOtaGM.crl (hash: rQ48Mn20MT6IIZRfrXN5+TtcskoK1zD49BpyZ5R/zg4=)
2: 9L-IlJy1MALfVsDOjOGM0zg9wIs.roa (hash: 25Zaxi4I4wwSZ07o8zwt446xfOQvwC6RY9wELrAw/sQ=)
3: lJu2Ar4sGLPORXpgczklcY8qF_E.roa (hash: JhRPmgHPgILgAzd5XOTBcsJ31hAepEsimX60PARvpIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d9:ee:c9:d7:35:0c:56:48:69:86:f2:67:3e:ac:dc:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd524a05d477b82fbca93e7a504aa31a3ad6863
Validity
Not Before: Nov 14 12:01:07 2026 GMT
Not After : Nov 15 12:01:07 2026 GMT
Subject: CN=b88453770fa3f502c4ae779a09403bf8c1adfe0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b6:6f:38:22:ec:8d:fd:8e:a9:9a:39:1c:ab:
93:8d:bb:a2:41:cf:8c:3b:98:85:7e:9d:1d:44:d7:
08:fe:4e:3b:32:7f:5f:0e:0f:a0:8c:19:14:41:e6:
30:dd:28:92:0b:7d:67:20:2d:f0:c8:0c:31:84:a6:
05:9f:9a:e9:2d:f9:da:2d:40:09:34:23:f1:5b:ba:
f9:24:e4:0d:a5:4e:da:15:f5:d1:23:1e:00:d6:77:
af:a5:cf:ce:8e:ef:0a:59:63:85:12:43:26:66:d3:
40:3b:26:2c:6c:52:51:6a:92:7c:ab:36:a8:ec:63:
56:6e:fe:f9:cb:34:8b:8f:49:aa:f3:a2:8a:dd:41:
28:c9:58:2f:73:be:7e:46:87:39:02:64:cc:8c:ae:
40:24:3b:5e:93:3a:a4:dc:b4:a5:5e:11:5f:c7:be:
09:e8:b2:97:46:c3:13:1b:b3:31:af:44:0c:3f:f7:
26:0c:f8:76:d6:bd:0a:cc:0b:ea:67:88:2b:a3:aa:
f4:15:d9:d8:37:40:81:93:d4:e2:f7:1c:fe:8a:87:
d6:c9:8b:60:25:68:fe:1b:bc:04:e3:65:21:ec:1a:
17:5f:26:f8:6e:98:37:ad:4f:01:19:04:39:00:57:
b0:01:0b:1a:70:9c:bb:4d:54:fd:2c:a3:cf:05:e1:
b0:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:84:53:77:0F:A3:F5:02:C4:AE:77:9A:09:40:3B:F8:C1:AD:FE:0F
X509v3 Authority Key Identifier:
keyid:DF:D5:24:A0:5D:47:7B:82:FB:CA:93:E7:A5:04:AA:31:A3:AD:68:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:0f:68:5d:2e:61:e3:0c:8c:c6:72:07:b8:89:d8:2e:28:ef:
4d:1b:c2:ad:9e:77:57:aa:ae:20:33:3e:c4:57:f1:8d:88:49:
93:18:75:d6:02:00:eb:8f:12:13:12:0d:33:dd:7c:b8:44:d6:
51:c8:42:8a:71:62:35:ea:24:ab:e5:85:8c:fe:19:81:03:a5:
1a:a2:00:ef:80:49:c9:16:ae:d5:19:be:d6:b2:52:39:8e:78:
60:dd:bc:aa:ae:f0:00:2e:2a:21:e2:4a:a6:07:eb:55:ec:47:
0a:bb:60:6b:71:28:28:5a:b2:1d:c9:5f:e3:27:cd:2c:bc:d5:
d8:48:eb:d0:2e:e5:79:19:d7:5c:3f:e1:b7:e9:84:ee:9f:f0:
50:c5:39:ec:42:8d:57:28:dd:9b:3c:75:7a:a8:5b:52:bb:e4:
47:d7:c7:28:55:f5:b2:d7:6e:09:86:73:98:1d:49:b6:21:b5:
ca:aa:7a:05:aa:5b:90:eb:34:f4:00:6d:87:55:fe:46:d5:b1:
6d:52:c6:43:af:6f:4f:cf:dd:02:c3:27:06:27:88:6a:5d:c9:
91:ce:ac:2d:1f:23:57:55:fa:59:55:e0:e7:1f:69:7b:ff:e9:
c0:28:d5:6f:ad:25:a3:f1:29:25:2b:1a:4c:5b:e1:38:ea:56:
1b:e8:81:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHZ7snXNQxWSGmG8mc+rNxuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmZDUyNGEwNWQ0NzdiODJmYmNhOTNlN2E1MDRhYTMxYTNh
ZDY4NjMwHhcNMjYxMTE0MTIwMTA3WhcNMjYxMTE1MTIwMTA3WjAzMTEwLwYDVQQD
EyhiODg0NTM3NzBmYTNmNTAyYzRhZTc3OWEwOTQwM2JmOGMxYWRmZTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbZvOCLsjf2OqZo5HKuTjbuiQc+M
O5iFfp0dRNcI/k47Mn9fDg+gjBkUQeYw3SiSC31nIC3wyAwxhKYFn5rpLfnaLUAJ
NCPxW7r5JOQNpU7aFfXRIx4A1nevpc/Oju8KWWOFEkMmZtNAOyYsbFJRapJ8qzao
7GNWbv75yzSLj0mq86KK3UEoyVgvc75+Roc5AmTMjK5AJDtekzqk3LSlXhFfx74J
6LKXRsMTG7Mxr0QMP/cmDPh21r0KzAvqZ4gro6r0FdnYN0CBk9Ti9xz+iofWyYtg
JWj+G7wE42Uh7BoXXyb4bpg3rU8BGQQ5AFewAQsacJy7TVT9LKPPBeGw2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLiEU3cPo/UCxK53mglAO/jBrf4PMB8GA1UdIwQY
MBaAFN/VJKBdR3uC+8qT56UEqjGjrWhjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzlVa29GMUhlNEw3eXBQbnBRU3FNYU90YUdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8yMGMxODctMDBmZC00NTllLWFhZTQt
NDY3ZjRmN2Y1ZGVkLzEvMzlVa29GMUhlNEw3eXBQbnBRU3FNYU90YUdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi8yMGMxODctMDBmZC00NTllLWFhZTQtNDY3ZjRmN2Y1ZGVk
LzEvMzlVa29GMUhlNEw3eXBQbnBRU3FNYU90YUdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmA9oXS5h
4wyMxnIHuInYLijvTRvCrZ53V6quIDM+xFfxjYhJkxh11gIA648SExINM918uETW
UchCinFiNeokq+WFjP4ZgQOlGqIA74BJyRau1Rm+1rJSOY54YN28qq7wAC4qIeJK
pgfrVexHCrtga3EoKFqyHclf4yfNLLzV2Ejr0C7leRnXXD/ht+mE7p/wUMU57EKN
Vyjdmzx1eqhbUrvkR9fHKFX1stduCYZzmB1JtiG1yqp6BapbkOs09ABth1X+RtWx
bVLGQ69vT8/dAsMnBieIal3Jkc6sLR8jV1X6WVXg5x9pe//pwCjVb60lo/EpJSsa
TFvhOOpWG+iBuA==
-----END CERTIFICATE-----
Generated at Sat Nov 14 20:47:53 2026 by rpki-client