Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
File: 39UkoF1He4L7ypPnpQSqMaOtaGM.mft (raw, json)
Hash identifier: h08E1QSAWZpnIab0kavMG/8E0qgZlXJX6ub//YZ6yNQ=
Subject key identifier: EE:3D:2B:FD:79:7F:9F:A0:7D:E7:8D:EE:BB:A3:E1:B2:71:A7:B1:94
Authority key identifier: DF:D5:24:A0:5D:47:7B:82:FB:CA:93:E7:A5:04:AA:31:A3:AD:68:63
Certificate issuer: /CN=dfd524a05d477b82fbca93e7a504aa31a3ad6863
Certificate serial: 019D2AA95EA4EDD62DCD3AAF912F9D16F1DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
Manifest number: 189A
Signing time: Thu 26 Mar 2026 15:00:35 +0000
Manifest this update: Thu 26 Mar 2026 15:00:35 +0000
Manifest next update: Fri 27 Mar 2026 15:00:35 +0000
Files and hashes: 1: 39UkoF1He4L7ypPnpQSqMaOtaGM.crl (hash: BXiwD80GOO0dZNT6LUFP1tSYW/SW3Q6MbSAo+3q1kh8=)
2: 9L-IlJy1MALfVsDOjOGM0zg9wIs.roa (hash: 25Zaxi4I4wwSZ07o8zwt446xfOQvwC6RY9wELrAw/sQ=)
3: lJu2Ar4sGLPORXpgczklcY8qF_E.roa (hash: JhRPmgHPgILgAzd5XOTBcsJ31hAepEsimX60PARvpIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:5e:a4:ed:d6:2d:cd:3a:af:91:2f:9d:16:f1:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd524a05d477b82fbca93e7a504aa31a3ad6863
Validity
Not Before: Mar 26 15:00:35 2026 GMT
Not After : Mar 27 15:00:35 2026 GMT
Subject: CN=ee3d2bfd797f9fa07de78deebba3e1b271a7b194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:03:31:59:6e:50:0b:be:6b:44:96:fd:29:38:
f3:fd:6c:3f:62:63:72:28:fb:12:30:dd:5a:d4:3e:
eb:d2:42:03:ce:05:21:df:07:90:c4:8b:56:8f:17:
b3:96:55:05:ab:1c:a4:d5:89:1c:38:cb:e7:61:b9:
0e:01:09:b1:b4:f8:f6:ac:47:de:3b:75:2f:a0:3a:
76:73:95:bf:f9:d9:a0:99:ea:48:74:88:db:78:3b:
d3:c2:fd:05:88:f0:66:fc:af:b4:96:2e:e0:50:69:
b9:a8:74:90:d3:7d:34:71:0d:7c:08:57:6b:49:28:
f2:df:be:e3:32:77:2a:a3:3e:20:cf:85:46:68:ba:
e9:44:ad:a8:a4:c8:32:a4:8a:c8:d7:54:ff:3e:cc:
42:37:46:2f:ed:d8:13:75:19:5d:d3:32:e7:8b:42:
a7:bd:aa:59:14:9f:01:0f:a1:1e:f3:ef:2d:4d:d3:
ba:2c:07:d9:8d:28:82:b9:8a:8e:ef:d9:73:6b:06:
5a:c5:4d:13:db:04:28:17:35:ce:f5:ab:22:b3:44:
16:c2:4f:f2:99:07:c4:a5:cc:84:f7:80:02:ba:4d:
16:61:fc:98:8b:03:8c:1b:aa:99:f5:b2:1c:59:c6:
b5:80:36:b2:e5:15:18:6d:90:4b:4f:4b:3b:f8:5a:
26:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:3D:2B:FD:79:7F:9F:A0:7D:E7:8D:EE:BB:A3:E1:B2:71:A7:B1:94
X509v3 Authority Key Identifier:
keyid:DF:D5:24:A0:5D:47:7B:82:FB:CA:93:E7:A5:04:AA:31:A3:AD:68:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:6c:16:fb:0b:67:67:d3:b1:63:76:c9:b9:98:f3:de:4e:d9:
0f:48:d1:89:a5:0a:4e:a7:c2:6e:80:87:f8:0c:af:22:8f:90:
f3:7b:c8:4b:b9:5e:35:28:d9:70:32:51:7d:c5:65:db:2e:44:
1a:59:5b:b2:23:99:9c:dc:35:58:fe:b2:f1:1f:d9:79:ae:99:
6d:fb:2f:9a:c2:3e:58:19:19:de:7a:aa:cb:94:24:06:fe:e6:
e5:c1:e7:91:6c:9a:80:db:5b:6c:cf:ad:51:ad:9c:b0:96:3a:
3d:cd:b8:97:99:10:fb:30:fa:45:85:52:56:61:e5:34:73:6d:
9a:0d:b9:1e:7b:4e:16:8d:2c:b2:54:7b:16:e2:05:35:cc:9d:
3a:f9:94:fa:80:8e:2e:8f:c7:c5:0f:c0:4a:ba:93:81:34:97:
8c:b6:f1:d2:49:90:78:bd:9f:d6:4d:93:84:74:63:e5:80:05:
55:c6:4b:14:ac:82:8a:bd:8b:a5:8d:07:c8:cf:99:be:de:46:
59:81:c1:d4:ad:fb:5c:6c:26:df:7a:1f:a8:0d:56:b7:32:51:
e4:3d:25:cd:b9:57:60:c9:94:50:cf:67:c0:e4:1c:65:71:3f:
20:42:46:90:f4:8c:65:34:37:54:5d:aa:69:c2:01:2b:22:88:
e8:2c:a9:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:48:28 2026 by rpki-client