Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
File: 39UkoF1He4L7ypPnpQSqMaOtaGM.mft (raw, json)
Hash identifier: GbZoIrzV1oalkMpLLx66MUdsu8KR5inNj7inmmg2jQ8=
Subject key identifier: B0:1A:A4:A1:30:92:A1:93:D4:9E:76:F5:3B:DF:9C:9E:F0:53:89:1D
Authority key identifier: DF:D5:24:A0:5D:47:7B:82:FB:CA:93:E7:A5:04:AA:31:A3:AD:68:63
Certificate issuer: /CN=dfd524a05d477b82fbca93e7a504aa31a3ad6863
Certificate serial: 01A0C9A1B1FF53FB1FDCE7D684AF963E5B86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
Manifest number: 1A7A
Signing time: Tue 22 Sep 2026 15:00:12 +0000
Manifest this update: Tue 22 Sep 2026 15:00:12 +0000
Manifest next update: Wed 23 Sep 2026 15:00:12 +0000
Files and hashes: 1: 39UkoF1He4L7ypPnpQSqMaOtaGM.crl (hash: EtAIYXIwSYkjQDm09vPTUIu0Bx23Tuioq70llZXPPII=)
2: 9L-IlJy1MALfVsDOjOGM0zg9wIs.roa (hash: 25Zaxi4I4wwSZ07o8zwt446xfOQvwC6RY9wELrAw/sQ=)
3: lJu2Ar4sGLPORXpgczklcY8qF_E.roa (hash: JhRPmgHPgILgAzd5XOTBcsJ31hAepEsimX60PARvpIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 15:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:a1:b1:ff:53:fb:1f:dc:e7:d6:84:af:96:3e:5b:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd524a05d477b82fbca93e7a504aa31a3ad6863
Validity
Not Before: Sep 22 15:00:12 2026 GMT
Not After : Sep 23 15:00:12 2026 GMT
Subject: CN=b01aa4a13092a193d49e76f53bdf9c9ef053891d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:58:a2:f2:b4:50:2f:51:49:11:2e:e5:d3:d7:
13:76:65:bb:3b:ba:a0:07:1b:87:96:d0:40:09:ba:
c3:b7:58:eb:5b:ed:f1:51:01:af:3a:64:3f:a0:53:
18:1b:7c:37:af:bf:bd:01:b8:20:65:c2:d0:6b:8d:
26:79:86:ae:a7:81:7e:ff:5b:c1:7a:68:d4:a4:f1:
67:9f:59:81:ea:fd:cd:2e:32:eb:2e:2d:bd:d5:e3:
12:20:c5:f1:ff:f2:b0:64:d9:ff:3a:94:e3:fc:77:
f8:f6:53:ab:b4:9d:06:af:05:24:28:8b:93:1b:b9:
28:ee:e3:09:67:02:02:f3:bc:a5:db:56:79:1a:72:
aa:27:ef:a0:f5:c0:94:41:b0:d6:a1:99:34:7a:53:
e9:93:4f:a9:d4:ca:75:57:75:85:b5:9a:d7:39:f0:
66:9f:8f:6a:ef:5c:41:eb:46:07:51:1e:a6:16:2c:
41:9d:84:f3:25:88:32:3e:68:fb:6f:f0:eb:e9:1a:
15:5b:4c:7e:66:5f:96:65:45:18:e7:f9:f4:85:8d:
34:d3:18:98:95:1d:d3:62:e1:5c:be:66:76:c1:02:
4d:e4:1c:76:8e:ad:27:c7:51:97:77:fb:a3:4d:c1:
29:18:3d:75:5f:95:a7:c2:2b:7a:f3:0c:ee:71:97:
d4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:1A:A4:A1:30:92:A1:93:D4:9E:76:F5:3B:DF:9C:9E:F0:53:89:1D
X509v3 Authority Key Identifier:
keyid:DF:D5:24:A0:5D:47:7B:82:FB:CA:93:E7:A5:04:AA:31:A3:AD:68:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:19:b8:c0:9f:60:3c:28:3f:f6:a7:ab:0f:6a:a0:30:68:eb:
34:a1:ad:bb:ed:49:0b:cc:23:9f:ce:f9:12:2a:4a:51:2c:4f:
57:2d:1f:57:43:e2:12:3f:bb:84:16:69:60:ca:a2:fc:f3:08:
8d:36:8a:fc:71:3a:37:83:07:b8:6c:5b:96:8e:bd:5d:b3:d6:
d3:e2:a3:89:ee:6e:d3:26:1a:99:be:20:a3:de:da:8c:74:66:
12:23:6d:02:e0:28:51:48:60:53:21:95:19:58:64:47:37:d8:
74:b8:df:8e:d6:16:c0:69:80:f3:95:00:d1:b5:d4:88:21:84:
6c:53:d9:40:8d:14:32:3b:d7:26:74:fc:fb:96:8f:98:97:85:
46:36:6b:7d:2b:07:ea:d3:e6:81:3d:7d:9b:db:1a:26:33:b0:
8f:64:cf:f5:20:91:86:ba:59:58:be:9b:ab:75:77:be:f5:6e:
3c:63:0b:31:29:b4:59:14:0a:c0:24:7c:ac:73:d1:5b:61:53:
5f:a8:76:ed:5c:d7:6c:4a:98:75:0d:95:ac:ab:70:5a:94:0d:
1f:b7:eb:3a:98:64:24:1a:90:dd:a7:3a:e1:24:f0:ac:eb:f9:
89:4a:37:2c:e4:3f:e8:c4:ea:5d:e3:f2:93:53:0b:2e:b5:2c:
37:8c:44:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:06:15 2026 by rpki-client