Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
File: 39UkoF1He4L7ypPnpQSqMaOtaGM.mft (raw, json)
Hash identifier: hU3sJ0n1++0dTvVLjuLBwctNDDSbt7uFtDwAkSqqZgw=
Subject key identifier: 07:CD:EB:D1:F6:C9:F5:4E:0B:FB:9A:E6:79:DF:1E:01:45:9C:B4:09
Authority key identifier: DF:D5:24:A0:5D:47:7B:82:FB:CA:93:E7:A5:04:AA:31:A3:AD:68:63
Certificate issuer: /CN=dfd524a05d477b82fbca93e7a504aa31a3ad6863
Certificate serial: 019D28BB857300BAE52DE6AC9D4A3D66E8BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
Manifest number: 1899
Signing time: Thu 26 Mar 2026 06:01:11 +0000
Manifest this update: Thu 26 Mar 2026 06:01:11 +0000
Manifest next update: Fri 27 Mar 2026 06:01:11 +0000
Files and hashes: 1: 39UkoF1He4L7ypPnpQSqMaOtaGM.crl (hash: UC7GFQELyJlMXL4ObQIixu5Jpzs5pw0+btyyXr1inFY=)
2: 9L-IlJy1MALfVsDOjOGM0zg9wIs.roa (hash: 25Zaxi4I4wwSZ07o8zwt446xfOQvwC6RY9wELrAw/sQ=)
3: lJu2Ar4sGLPORXpgczklcY8qF_E.roa (hash: JhRPmgHPgILgAzd5XOTBcsJ31hAepEsimX60PARvpIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:85:73:00:ba:e5:2d:e6:ac:9d:4a:3d:66:e8:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd524a05d477b82fbca93e7a504aa31a3ad6863
Validity
Not Before: Mar 26 06:01:11 2026 GMT
Not After : Mar 27 06:01:11 2026 GMT
Subject: CN=07cdebd1f6c9f54e0bfb9ae679df1e01459cb409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2b:df:68:f0:08:4b:cd:37:7a:85:a8:6e:bc:
49:a5:e0:31:3c:aa:e0:4c:86:24:97:28:eb:05:c5:
bd:03:8b:7a:34:f0:65:97:85:07:85:22:9d:58:59:
1a:d8:7d:d1:2d:a3:50:db:75:bd:39:60:79:d9:87:
5d:55:9d:06:29:59:9f:76:f4:a3:d7:4d:68:62:44:
35:01:fe:87:af:4a:87:ee:4e:99:47:6f:7c:ee:aa:
be:58:3b:f3:b4:9d:97:4c:07:6d:a0:5f:ab:11:03:
31:a3:dc:d2:00:48:78:2f:1d:ad:ca:3b:fb:5a:83:
4f:9b:14:fb:88:c1:c2:ba:36:ca:19:b9:87:50:91:
8a:95:e5:5e:c7:0f:8e:f4:21:ea:ce:35:e4:7e:9b:
dd:2d:d3:05:db:53:65:13:69:36:1b:9c:ed:30:2c:
97:68:0b:5c:13:3b:70:e3:1c:86:7e:c9:75:3a:65:
df:eb:dd:08:72:4a:59:41:9d:b2:cc:6d:eb:15:bf:
15:27:2f:3a:e5:bd:e7:90:81:1b:9a:cf:36:d9:73:
b1:3f:7b:d6:9f:0b:fa:b7:16:2d:19:17:5a:96:1a:
5b:e4:cc:49:08:f0:5d:3e:3c:c8:af:b0:3d:07:f7:
0d:06:d4:e2:60:10:aa:2e:90:6a:91:2e:14:20:9c:
d2:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:CD:EB:D1:F6:C9:F5:4E:0B:FB:9A:E6:79:DF:1E:01:45:9C:B4:09
X509v3 Authority Key Identifier:
keyid:DF:D5:24:A0:5D:47:7B:82:FB:CA:93:E7:A5:04:AA:31:A3:AD:68:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:dc:a3:87:6e:a1:39:98:a1:19:0c:cf:48:ef:b2:1b:f8:c1:
0e:46:11:e0:b2:59:74:0d:f2:41:b4:eb:3e:1e:c3:67:0f:d1:
12:10:93:f8:93:c9:e8:72:40:9f:d4:2d:30:63:d5:b1:72:e6:
c0:08:f8:6c:e4:9e:20:bc:d5:0d:0b:39:74:f8:67:e8:93:5a:
c0:cf:c0:fa:ce:4e:4c:8d:6b:2e:43:d0:42:50:16:c3:f4:1c:
bf:ab:a9:47:b9:0a:21:e1:50:66:38:ee:16:32:0f:b5:2a:21:
57:0e:fd:c3:06:ed:e8:83:6d:f8:a3:0e:71:bb:bc:d0:ac:7f:
75:36:14:e2:3f:0f:7d:24:2f:f3:b5:27:63:37:d7:bd:48:b4:
00:12:84:38:a2:6c:75:c6:5f:a7:ef:e3:9a:f4:a9:db:15:72:
9a:49:d3:96:d0:b7:55:0c:36:21:ca:a8:82:47:34:33:4f:c0:
65:9b:29:57:e0:bc:0f:0b:cc:85:09:e4:e3:15:07:7a:9e:83:
b3:47:34:87:c0:c1:34:e6:f0:bd:15:0c:ea:79:94:6c:21:76:
38:49:a1:b8:ad:1a:61:9e:b3:cb:fc:38:a8:af:dd:26:d3:af:
01:fd:7d:37:5b:48:77:ff:cb:b1:86:a1:93:04:0e:cf:5e:83:
39:f0:d3:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ou4VzALrlLeasnUo9Zui+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmZDUyNGEwNWQ0NzdiODJmYmNhOTNlN2E1MDRhYTMxYTNh
ZDY4NjMwHhcNMjYwMzI2MDYwMTExWhcNMjYwMzI3MDYwMTExWjAzMTEwLwYDVQQD
EygwN2NkZWJkMWY2YzlmNTRlMGJmYjlhZTY3OWRmMWUwMTQ1OWNiNDA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyvfaPAIS803eoWobrxJpeAxPKrg
TIYklyjrBcW9A4t6NPBll4UHhSKdWFka2H3RLaNQ23W9OWB52YddVZ0GKVmfdvSj
101oYkQ1Af6Hr0qH7k6ZR2987qq+WDvztJ2XTAdtoF+rEQMxo9zSAEh4Lx2tyjv7
WoNPmxT7iMHCujbKGbmHUJGKleVexw+O9CHqzjXkfpvdLdMF21NlE2k2G5ztMCyX
aAtcEztw4xyGfsl1OmXf690IckpZQZ2yzG3rFb8VJy865b3nkIEbms822XOxP3vW
nwv6txYtGRdalhpb5MxJCPBdPjzIr7A9B/cNBtTiYBCqLpBqkS4UIJzStwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAfN69H2yfVOC/ua5nnfHgFFnLQJMB8GA1UdIwQY
MBaAFN/VJKBdR3uC+8qT56UEqjGjrWhjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzlVa29GMUhlNEw3eXBQbnBRU3FNYU90YUdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8yMGMxODctMDBmZC00NTllLWFhZTQt
NDY3ZjRmN2Y1ZGVkLzEvMzlVa29GMUhlNEw3eXBQbnBRU3FNYU90YUdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi8yMGMxODctMDBmZC00NTllLWFhZTQtNDY3ZjRmN2Y1ZGVk
LzEvMzlVa29GMUhlNEw3eXBQbnBRU3FNYU90YUdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJNyjh26h
OZihGQzPSO+yG/jBDkYR4LJZdA3yQbTrPh7DZw/REhCT+JPJ6HJAn9QtMGPVsXLm
wAj4bOSeILzVDQs5dPhn6JNawM/A+s5OTI1rLkPQQlAWw/Qcv6upR7kKIeFQZjju
FjIPtSohVw79wwbt6INt+KMOcbu80Kx/dTYU4j8PfSQv87UnYzfXvUi0ABKEOKJs
dcZfp+/jmvSp2xVymknTltC3VQw2Icqogkc0M0/AZZspV+C8DwvMhQnk4xUHep6D
s0c0h8DBNObwvRUM6nmUbCF2OEmhuK0aYZ6zy/w4qK/dJtOvAf19N1tId//LsYah
kwQOz16DOfDTyA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:14:05 2026 by rpki-client