
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
File: 39UkoF1He4L7ypPnpQSqMaOtaGM.mft (raw, json)
Hash identifier: KjVgGVZOgIrlgNh7r1BnGewb/O7URFmCVWrE1ySrNiY=
Subject key identifier: C5:9F:E2:BF:08:BD:C2:91:02:44:BE:60:E9:52:EF:AB:A7:FC:CA:6D
Authority key identifier: DF:D5:24:A0:5D:47:7B:82:FB:CA:93:E7:A5:04:AA:31:A3:AD:68:63
Certificate issuer: /CN=dfd524a05d477b82fbca93e7a504aa31a3ad6863
Certificate serial: 019E1DFE7AFE5DEC7D06FA1EA3A6307AEF21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
Manifest number: 1918
Signing time: Tue 12 May 2026 21:01:17 +0000
Manifest this update: Tue 12 May 2026 21:01:17 +0000
Manifest next update: Wed 13 May 2026 21:01:17 +0000
Files and hashes: 1: 39UkoF1He4L7ypPnpQSqMaOtaGM.crl (hash: MjoHolnObfdJd9W4E3WayNlMGGsG0/iB/gxmPZ0XvY8=)
2: 9L-IlJy1MALfVsDOjOGM0zg9wIs.roa (hash: 25Zaxi4I4wwSZ07o8zwt446xfOQvwC6RY9wELrAw/sQ=)
3: lJu2Ar4sGLPORXpgczklcY8qF_E.roa (hash: JhRPmgHPgILgAzd5XOTBcsJ31hAepEsimX60PARvpIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:7a:fe:5d:ec:7d:06:fa:1e:a3:a6:30:7a:ef:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd524a05d477b82fbca93e7a504aa31a3ad6863
Validity
Not Before: May 12 21:01:17 2026 GMT
Not After : May 13 21:01:17 2026 GMT
Subject: CN=c59fe2bf08bdc2910244be60e952efaba7fcca6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:83:a6:48:42:ce:da:87:65:9a:50:03:f4:67:
ca:a4:c9:ff:33:9f:12:3d:3c:5a:6c:d6:2d:5b:21:
59:02:7d:51:85:95:55:a5:84:dd:97:c3:04:a2:d4:
55:cd:7f:83:47:0a:b0:ec:d7:bd:b4:54:83:2a:79:
e3:44:d9:e6:58:df:4a:a2:cc:da:c9:07:81:27:10:
80:24:f8:36:15:49:83:94:cd:3f:3d:c1:49:56:f8:
f2:42:c6:cc:a6:ec:96:6d:2f:e6:d1:14:4c:c4:06:
e6:83:0a:74:f6:ac:65:55:01:39:96:e5:46:98:bf:
00:7f:24:10:80:27:2d:7d:a2:0e:28:46:e6:76:21:
a8:9e:b4:ac:37:78:4e:df:2c:16:e9:c4:4e:8d:7e:
2a:6e:eb:9a:d9:3a:73:df:6d:0d:be:ac:b1:48:a0:
31:b9:6c:fe:0f:e7:d9:9e:bb:44:18:59:6a:f2:d5:
41:c3:82:5e:22:06:70:c1:db:e6:3e:b3:77:58:cf:
3f:53:1d:7a:9c:d2:6e:c4:1f:bf:a7:c5:90:4d:ca:
3a:26:f2:7f:18:cb:3e:61:84:88:65:83:20:f3:75:
6a:99:4b:5c:2c:ea:5e:a4:b1:e8:a7:54:d9:0e:1c:
8b:46:40:bb:e8:7b:c8:0e:31:46:8b:0d:3d:cd:ad:
3b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:9F:E2:BF:08:BD:C2:91:02:44:BE:60:E9:52:EF:AB:A7:FC:CA:6D
X509v3 Authority Key Identifier:
keyid:DF:D5:24:A0:5D:47:7B:82:FB:CA:93:E7:A5:04:AA:31:A3:AD:68:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:22:f6:c1:67:ca:3b:09:b5:d1:90:cf:a4:03:ad:e9:ff:19:
a3:13:22:f2:f6:50:e5:61:08:3d:bf:63:10:c3:b4:e4:93:55:
89:60:4c:31:bb:55:dc:86:40:8e:be:61:ea:9d:6c:fe:cb:dc:
94:38:1e:b4:f2:f7:3b:8b:27:e1:bf:1f:a9:f1:5f:c0:72:cd:
fb:63:c8:34:d9:4b:fc:da:ba:9f:00:c8:96:73:92:08:82:98:
24:6a:c8:17:bf:47:5a:df:90:7c:52:df:7c:e9:a6:10:9f:4a:
45:cd:b3:cf:be:ce:6b:1a:d0:b6:73:57:66:8b:7f:3a:0c:30:
a1:99:a4:7d:01:9c:c9:07:b4:86:c9:36:20:8c:99:53:f2:f2:
18:7f:f0:5e:8d:9c:fa:73:59:37:c2:88:d2:eb:68:82:d6:10:
57:48:46:9d:2d:c9:1f:4b:f8:f7:bd:a6:59:7f:ab:5a:5f:17:
49:2e:04:3c:62:02:91:64:bb:d8:27:6a:fb:36:6e:1e:ba:84:
b2:f9:71:8c:61:83:72:56:6c:1e:15:82:f0:9c:5f:36:4c:04:
68:c9:ec:15:8f:b0:87:4e:3c:82:59:cd:70:36:93:a4:1b:66:
90:75:22:fb:6d:7f:7c:09:15:b1:f1:8b:b5:ee:5e:e1:b3:d2:
b7:3d:e8:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:32:05 2026 by rpki-client