
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
File: 39UkoF1He4L7ypPnpQSqMaOtaGM.mft (raw, json)
Hash identifier: i9KDiRQP7O/1QKjiEVie6mcTv8LfMwR4jmYYp19rShw=
Subject key identifier: AE:1A:3B:38:26:76:1F:71:FD:7C:EA:6F:A4:38:B6:B8:4A:F5:52:8F
Authority key identifier: DF:D5:24:A0:5D:47:7B:82:FB:CA:93:E7:A5:04:AA:31:A3:AD:68:63
Certificate issuer: /CN=dfd524a05d477b82fbca93e7a504aa31a3ad6863
Certificate serial: 019F8ED91113C00C83427E6DBB73A6BC0541
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
Manifest number: 19D7
Signing time: Thu 23 Jul 2026 12:00:18 +0000
Manifest this update: Thu 23 Jul 2026 12:00:18 +0000
Manifest next update: Fri 24 Jul 2026 12:00:18 +0000
Files and hashes: 1: 39UkoF1He4L7ypPnpQSqMaOtaGM.crl (hash: qCOwg4Qdy/eLc7Dn9kS07Pai++vYkN+RePOOo87aHhY=)
2: 9L-IlJy1MALfVsDOjOGM0zg9wIs.roa (hash: 25Zaxi4I4wwSZ07o8zwt446xfOQvwC6RY9wELrAw/sQ=)
3: lJu2Ar4sGLPORXpgczklcY8qF_E.roa (hash: JhRPmgHPgILgAzd5XOTBcsJ31hAepEsimX60PARvpIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 12:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:d9:11:13:c0:0c:83:42:7e:6d:bb:73:a6:bc:05:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd524a05d477b82fbca93e7a504aa31a3ad6863
Validity
Not Before: Jul 23 12:00:18 2026 GMT
Not After : Jul 24 12:00:18 2026 GMT
Subject: CN=ae1a3b3826761f71fd7cea6fa438b6b84af5528f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:31:50:3f:fb:01:48:7d:d9:ae:d8:d5:7e:67:
87:97:70:72:27:d4:11:5a:10:44:2b:49:e4:7c:74:
57:b7:a6:b7:28:87:8a:e4:ff:a2:fc:65:81:f4:59:
0b:a9:09:82:f6:cd:a1:4e:45:56:7b:1f:8a:11:50:
ca:a5:f6:35:f5:64:eb:83:1b:34:7e:6c:c3:ad:77:
00:0a:5c:05:6d:fc:1f:4a:3b:5e:8a:b3:63:36:1a:
e1:38:9d:73:5b:cd:5a:56:f2:33:8f:f8:e1:a4:cf:
9e:b6:5b:8e:d0:ab:44:76:f7:70:b6:1c:de:81:9f:
1e:1e:78:4e:d0:d5:78:04:85:20:3f:5e:89:ab:db:
8c:cf:c7:1b:d8:f3:47:dc:3b:af:a2:45:34:8c:4a:
8c:53:d6:30:8e:db:bb:ea:a9:9c:7a:12:02:05:8f:
2f:f7:0f:26:c4:bf:da:70:91:60:da:d6:da:f0:c0:
2d:8a:4e:9f:3e:30:83:44:a6:b6:b6:ef:77:e6:2c:
00:af:99:23:cd:82:de:5c:a2:8d:79:1b:65:4c:0c:
ac:81:fa:aa:ea:3b:02:2b:0d:15:ec:37:f9:b4:89:
ed:b6:d1:27:c6:ae:8c:38:56:f6:a5:48:4b:c2:6b:
09:23:7b:18:bc:f1:ba:b0:27:ed:e3:5c:c9:26:df:
72:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:1A:3B:38:26:76:1F:71:FD:7C:EA:6F:A4:38:B6:B8:4A:F5:52:8F
X509v3 Authority Key Identifier:
keyid:DF:D5:24:A0:5D:47:7B:82:FB:CA:93:E7:A5:04:AA:31:A3:AD:68:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:1c:f8:61:55:80:50:e0:3d:0b:af:36:71:17:f8:50:d8:5e:
fa:26:f9:09:cd:4e:5b:30:64:69:18:98:11:36:73:34:94:7c:
aa:b9:e8:22:6d:a0:12:8f:a8:04:27:e6:ec:07:85:f8:e3:fa:
68:49:55:99:8b:a3:42:d8:34:34:61:e2:f5:da:ab:9b:7d:38:
2c:1b:df:c2:b8:68:d5:a6:27:d3:8d:15:47:20:cf:92:62:ae:
db:45:be:a3:d0:4a:e8:d8:2e:d8:69:9f:b3:92:65:7e:f5:f2:
a1:88:bc:a7:5f:f0:fc:db:5e:6b:44:62:33:43:77:13:85:01:
8c:ff:af:12:3a:fe:1f:51:b6:f7:b6:fa:76:90:96:b9:08:b5:
d9:bf:13:f9:18:fd:db:ea:21:a4:20:52:99:bb:a1:41:ca:31:
f4:7d:68:7f:44:cd:9c:ec:d0:a9:62:f2:15:f2:2e:b8:d7:79:
0b:be:4a:75:12:ca:34:71:3c:3d:a8:74:c7:98:4f:d1:a3:49:
30:af:4e:bd:1d:ad:f7:b9:98:1c:ff:cd:bc:33:56:f0:2e:e0:
d0:9b:0e:7e:93:62:d1:f8:ef:d6:39:c3:6f:b7:7d:07:c0:b5:
c9:38:47:07:f8:ba:3c:c0:01:fb:0a:24:8c:56:42:fe:3a:7b:
9c:42:a5:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:39:08 2026 by rpki-client