Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
File: 39UkoF1He4L7ypPnpQSqMaOtaGM.mft (raw, json)
Hash identifier: suTmg/QODSNl2Q5xIVjhks9kEqWV2k+/zb4ioRN8Yas=
Subject key identifier: 54:1A:D8:E2:93:E9:5D:5E:BC:12:E8:7A:71:FB:3E:BB:79:1B:AC:1C
Authority key identifier: DF:D5:24:A0:5D:47:7B:82:FB:CA:93:E7:A5:04:AA:31:A3:AD:68:63
Certificate issuer: /CN=dfd524a05d477b82fbca93e7a504aa31a3ad6863
Certificate serial: 01A0CB904DD39A9FE905F1E4EB3C94B35587
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
Manifest number: 1A7B
Signing time: Wed 23 Sep 2026 00:00:27 +0000
Manifest this update: Wed 23 Sep 2026 00:00:27 +0000
Manifest next update: Thu 24 Sep 2026 00:00:27 +0000
Files and hashes: 1: 39UkoF1He4L7ypPnpQSqMaOtaGM.crl (hash: +FELXz7wgjBUkhb/wIq1B/9Qdg9RuvPN4UggdDKLUPY=)
2: 9L-IlJy1MALfVsDOjOGM0zg9wIs.roa (hash: 25Zaxi4I4wwSZ07o8zwt446xfOQvwC6RY9wELrAw/sQ=)
3: lJu2Ar4sGLPORXpgczklcY8qF_E.roa (hash: JhRPmgHPgILgAzd5XOTBcsJ31hAepEsimX60PARvpIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:90:4d:d3:9a:9f:e9:05:f1:e4:eb:3c:94:b3:55:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd524a05d477b82fbca93e7a504aa31a3ad6863
Validity
Not Before: Sep 23 00:00:27 2026 GMT
Not After : Sep 24 00:00:27 2026 GMT
Subject: CN=541ad8e293e95d5ebc12e87a71fb3ebb791bac1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1c:be:75:7b:02:7a:1d:aa:ca:ec:33:63:7e:
a1:90:5b:ee:f5:58:ff:39:dd:08:da:e5:dd:88:ab:
9a:70:63:6d:c3:df:45:98:fd:81:c7:e8:73:7d:21:
14:69:f8:96:9e:b2:8e:3e:8c:f5:27:7b:3a:1a:3e:
7f:75:52:2b:fd:e4:e2:fa:bf:cc:4c:88:df:27:dd:
dd:48:34:f1:f6:39:c2:fa:7c:74:35:e2:c9:ad:b2:
60:1a:b8:cc:cf:98:b0:83:50:d3:6f:04:a8:4e:1e:
01:c6:b6:2b:b9:37:1e:8f:e6:b6:73:f2:8f:de:7b:
c4:d6:35:c6:d0:9e:14:8d:73:12:16:7b:13:41:bd:
72:90:b9:bb:ec:c8:cb:5d:2f:00:03:26:c3:36:46:
db:ff:41:77:89:31:28:3d:af:46:47:f9:31:d4:d7:
11:4c:bd:db:7c:a0:a0:10:ea:fc:3b:0b:27:89:b9:
cc:e5:69:4d:df:63:88:93:cc:c5:8c:82:26:0a:0b:
62:ae:24:ba:92:9b:99:a8:81:ac:b2:4f:93:c5:34:
11:e3:d1:ca:26:2e:28:7c:45:60:a7:d6:c1:b6:a4:
26:d0:a2:d5:f7:b1:f6:b7:b4:df:4b:5e:3d:6a:33:
f2:f1:e6:00:74:f6:af:24:3a:b8:e2:4c:06:33:ec:
44:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:1A:D8:E2:93:E9:5D:5E:BC:12:E8:7A:71:FB:3E:BB:79:1B:AC:1C
X509v3 Authority Key Identifier:
keyid:DF:D5:24:A0:5D:47:7B:82:FB:CA:93:E7:A5:04:AA:31:A3:AD:68:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:cf:ab:8e:fe:b6:fb:86:c8:29:af:0a:88:a3:8d:34:e3:8f:
72:0d:4b:36:e1:75:de:66:b8:91:15:0c:ef:e6:0d:77:e5:b0:
07:e3:9d:1a:f5:f8:ba:2d:b5:16:d3:56:4e:d5:ad:94:f6:b4:
3b:5a:78:d3:5a:1e:5a:fc:8a:3e:84:a1:c5:05:be:5a:03:2c:
e5:0e:e9:b3:fd:e8:70:f8:04:c8:7d:a5:54:99:31:cf:7b:ae:
7b:a3:77:3e:e1:e3:ac:20:07:0e:ae:58:8f:91:b4:11:c6:d4:
e8:b9:70:e4:4e:47:bb:e5:a7:95:0d:3b:a1:f1:ac:0e:45:12:
b0:8d:dd:c2:b6:d5:5c:6a:ee:6a:6a:d5:bb:67:84:68:c7:61:
1e:5d:20:10:b5:34:1c:d9:60:b2:50:72:d5:5d:27:70:a9:af:
24:73:30:30:21:01:3b:55:ba:3a:6d:46:92:aa:4d:5f:69:8d:
5a:58:a9:e7:59:d7:8b:cd:db:8d:69:76:97:36:7c:fe:08:9d:
28:f1:f7:ca:d8:63:3f:27:bd:e0:2a:96:9a:59:c8:d5:70:61:
be:33:ae:59:ad:0e:d7:83:cc:b8:5a:7f:0a:21:a7:af:4d:e8:
ac:57:5d:2b:e3:ae:d7:f1:58:97:be:84:2e:91:f2:ad:67:6f:
38:5a:35:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDLkE3Tmp/pBfHk6zyUs1WHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmZDUyNGEwNWQ0NzdiODJmYmNhOTNlN2E1MDRhYTMxYTNh
ZDY4NjMwHhcNMjYwOTIzMDAwMDI3WhcNMjYwOTI0MDAwMDI3WjAzMTEwLwYDVQQD
Eyg1NDFhZDhlMjkzZTk1ZDVlYmMxMmU4N2E3MWZiM2ViYjc5MWJhYzFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxy+dXsCeh2qyuwzY36hkFvu9Vj/
Od0I2uXdiKuacGNtw99FmP2Bx+hzfSEUafiWnrKOPoz1J3s6Gj5/dVIr/eTi+r/M
TIjfJ93dSDTx9jnC+nx0NeLJrbJgGrjMz5iwg1DTbwSoTh4BxrYruTcej+a2c/KP
3nvE1jXG0J4UjXMSFnsTQb1ykLm77MjLXS8AAybDNkbb/0F3iTEoPa9GR/kx1NcR
TL3bfKCgEOr8OwsnibnM5WlN32OIk8zFjIImCgtiriS6kpuZqIGssk+TxTQR49HK
Ji4ofEVgp9bBtqQm0KLV97H2t7TfS149ajPy8eYAdPavJDq44kwGM+xEKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFQa2OKT6V1evBLoenH7Prt5G6wcMB8GA1UdIwQY
MBaAFN/VJKBdR3uC+8qT56UEqjGjrWhjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzlVa29GMUhlNEw3eXBQbnBRU3FNYU90YUdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8yMGMxODctMDBmZC00NTllLWFhZTQt
NDY3ZjRmN2Y1ZGVkLzEvMzlVa29GMUhlNEw3eXBQbnBRU3FNYU90YUdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi8yMGMxODctMDBmZC00NTllLWFhZTQtNDY3ZjRmN2Y1ZGVk
LzEvMzlVa29GMUhlNEw3eXBQbnBRU3FNYU90YUdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp8+rjv62
+4bIKa8KiKONNOOPcg1LNuF13ma4kRUM7+YNd+WwB+OdGvX4ui21FtNWTtWtlPa0
O1p401oeWvyKPoShxQW+WgMs5Q7ps/3ocPgEyH2lVJkxz3uue6N3PuHjrCAHDq5Y
j5G0EcbU6Llw5E5Hu+WnlQ07ofGsDkUSsI3dwrbVXGruamrVu2eEaMdhHl0gELU0
HNlgslBy1V0ncKmvJHMwMCEBO1W6Om1GkqpNX2mNWlip51nXi83bjWl2lzZ8/gid
KPH3ythjPye94CqWmlnI1XBhvjOuWa0O14PMuFp/CiGnr03orFddK+Ou1/FYl76E
LpHyrWdvOFo1SQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 05:01:57 2026 by rpki-client