Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/6793ef-6228-4732-b872-5b9459327d43/1/39GW5f7o67goOs_2Ht3xQmMc9LM.mft
File: 39GW5f7o67goOs_2Ht3xQmMc9LM.mft (raw, json)
Hash identifier: G/fjQcfzlPMG47qVNwbTmA9rctwXYUowhcjeJyDrNLo=
Subject key identifier: 97:69:5D:6E:18:6D:77:75:63:04:1A:69:00:0C:07:5A:44:96:14:8F
Authority key identifier: DF:D1:96:E5:FE:E8:EB:B8:28:3A:CF:F6:1E:DD:F1:42:63:1C:F4:B3
Certificate issuer: /CN=dfd196e5fee8ebb8283acff61eddf142631cf4b3
Certificate serial: 019E1C4694289940A1D15303338023031AA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39GW5f7o67goOs_2Ht3xQmMc9LM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/6793ef-6228-4732-b872-5b9459327d43/1/39GW5f7o67goOs_2Ht3xQmMc9LM.mft
Manifest number: 68
Signing time: Tue 12 May 2026 13:00:47 +0000
Manifest this update: Tue 12 May 2026 13:00:47 +0000
Manifest next update: Wed 13 May 2026 13:00:47 +0000
Files and hashes: 1: 39GW5f7o67goOs_2Ht3xQmMc9LM.crl (hash: 7WAfIyv6IiguBIUSsnNaP5/CdmoVDuD2XwfQhcSjwJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/6793ef-6228-4732-b872-5b9459327d43/1/39GW5f7o67goOs_2Ht3xQmMc9LM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/6793ef-6228-4732-b872-5b9459327d43/1/39GW5f7o67goOs_2Ht3xQmMc9LM.mft
rsync://rpki.ripe.net/repository/DEFAULT/39GW5f7o67goOs_2Ht3xQmMc9LM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:46:94:28:99:40:a1:d1:53:03:33:80:23:03:1a:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd196e5fee8ebb8283acff61eddf142631cf4b3
Validity
Not Before: May 12 13:00:47 2026 GMT
Not After : May 13 13:00:47 2026 GMT
Subject: CN=97695d6e186d777563041a69000c075a4496148f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4c:5a:65:1f:7b:77:b8:db:ac:d0:4c:4a:02:
69:1b:27:29:c8:86:f0:cf:a1:3f:54:c4:82:78:74:
0c:20:b1:3d:c7:47:f5:99:2b:4e:8d:9b:70:b5:a4:
34:9b:0f:c4:eb:9d:51:1e:bb:83:95:0e:e9:75:21:
4a:6c:b3:33:7f:ea:8f:71:0a:b0:34:ed:7e:de:c9:
ff:60:22:a6:0f:07:3e:2a:42:c3:da:2b:ba:ca:23:
04:80:70:3d:ea:d1:12:70:ca:ed:62:6d:9d:93:a6:
71:a5:ab:29:a5:05:75:1a:83:d4:bf:ce:ef:24:4e:
47:d2:c3:22:7f:fc:29:c4:0e:72:20:ae:fc:24:ea:
ee:7e:41:ad:8e:ac:9c:9d:0c:00:95:e3:98:0f:09:
c3:31:8f:21:0d:78:ff:66:f1:5e:ee:ef:fe:45:3f:
42:68:83:65:58:9d:02:aa:6d:ce:af:ed:3d:b6:d9:
f6:ff:48:8c:9c:b3:5d:ad:b1:2e:9f:11:db:26:96:
38:b1:0a:2a:63:dc:8d:2b:4e:40:40:11:a2:68:b6:
b1:8d:c5:23:10:62:a1:41:86:df:36:d7:c1:72:77:
6b:59:9e:52:e1:4f:d0:19:44:2a:20:42:92:22:0b:
58:ac:79:9d:b3:dd:fe:a9:55:01:72:15:3b:c3:64:
ca:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:69:5D:6E:18:6D:77:75:63:04:1A:69:00:0C:07:5A:44:96:14:8F
X509v3 Authority Key Identifier:
keyid:DF:D1:96:E5:FE:E8:EB:B8:28:3A:CF:F6:1E:DD:F1:42:63:1C:F4:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39GW5f7o67goOs_2Ht3xQmMc9LM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/6793ef-6228-4732-b872-5b9459327d43/1/39GW5f7o67goOs_2Ht3xQmMc9LM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/6793ef-6228-4732-b872-5b9459327d43/1/39GW5f7o67goOs_2Ht3xQmMc9LM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:49:81:eb:42:b0:b8:ee:d5:ac:2c:b6:61:42:e2:2f:d9:d3:
42:87:80:1f:6e:6e:81:48:b4:b4:c2:1b:34:8d:37:1d:78:ea:
c9:ab:ad:75:b1:ab:b3:63:44:2e:54:19:c3:e2:64:0e:b9:62:
aa:7a:d8:4b:b2:43:c0:c8:fb:fa:68:37:fd:28:6a:a1:4a:20:
43:af:8a:d8:87:09:62:d0:30:09:a3:b4:f7:2a:b2:c0:a9:b8:
d9:b1:5e:8f:80:b1:5f:ff:1f:6f:5b:c8:57:26:c9:83:0e:18:
be:52:db:9f:bf:37:ea:1e:7d:dc:47:42:70:c9:57:e9:2a:6a:
a4:f7:ed:cb:ae:a7:cb:1b:4d:80:a8:f5:29:64:b2:b6:06:07:
81:40:bc:9e:17:04:ac:a0:00:90:96:fc:2f:7c:98:74:e9:e0:
c7:fc:ac:ab:0f:c5:6c:2c:1d:02:23:02:db:e6:e7:bf:c1:aa:
57:67:e1:9e:22:a0:8d:d3:bb:53:ff:c2:46:a4:be:45:21:8e:
d8:92:9b:81:99:39:b1:c0:43:a9:73:f3:fc:01:6b:2a:a8:80:
72:b1:51:db:0e:20:f5:7e:67:81:38:fa:e3:23:e5:98:86:dc:
64:31:d1:08:3f:24:dd:4f:77:1a:2d:d9:c2:a9:1e:c4:95:1c:
d9:00:ab:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4cRpQomUCh0VMDM4AjAxqiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmZDE5NmU1ZmVlOGViYjgyODNhY2ZmNjFlZGRmMTQyNjMx
Y2Y0YjMwHhcNMjYwNTEyMTMwMDQ3WhcNMjYwNTEzMTMwMDQ3WjAzMTEwLwYDVQQD
Eyg5NzY5NWQ2ZTE4NmQ3Nzc1NjMwNDFhNjkwMDBjMDc1YTQ0OTYxNDhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1UxaZR97d7jbrNBMSgJpGycpyIbw
z6E/VMSCeHQMILE9x0f1mStOjZtwtaQ0mw/E651RHruDlQ7pdSFKbLMzf+qPcQqw
NO1+3sn/YCKmDwc+KkLD2iu6yiMEgHA96tEScMrtYm2dk6ZxpasppQV1GoPUv87v
JE5H0sMif/wpxA5yIK78JOrufkGtjqycnQwAleOYDwnDMY8hDXj/ZvFe7u/+RT9C
aINlWJ0Cqm3Or+09ttn2/0iMnLNdrbEunxHbJpY4sQoqY9yNK05AQBGiaLaxjcUj
EGKhQYbfNtfBcndrWZ5S4U/QGUQqIEKSIgtYrHmds93+qVUBchU7w2TKPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJdpXW4YbXd1YwQaaQAMB1pElhSPMB8GA1UdIwQY
MBaAFN/RluX+6Ou4KDrP9h7d8UJjHPSzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzlHVzVmN282N2dvT3NfMkh0M3hRbU1jOUxNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi82NzkzZWYtNjIyOC00NzMyLWI4NzIt
NWI5NDU5MzI3ZDQzLzEvMzlHVzVmN282N2dvT3NfMkh0M3hRbU1jOUxNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi82NzkzZWYtNjIyOC00NzMyLWI4NzItNWI5NDU5MzI3ZDQz
LzEvMzlHVzVmN282N2dvT3NfMkh0M3hRbU1jOUxNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfUmB60Kw
uO7VrCy2YULiL9nTQoeAH25ugUi0tMIbNI03HXjqyautdbGrs2NELlQZw+JkDrli
qnrYS7JDwMj7+mg3/ShqoUogQ6+K2IcJYtAwCaO09yqywKm42bFej4CxX/8fb1vI
VybJgw4YvlLbn7836h593EdCcMlX6SpqpPfty66nyxtNgKj1KWSytgYHgUC8nhcE
rKAAkJb8L3yYdOngx/ysqw/FbCwdAiMC2+bnv8GqV2fhniKgjdO7U//CRqS+RSGO
2JKbgZk5scBDqXPz/AFrKqiAcrFR2w4g9X5ngTj64yPlmIbcZDHRCD8k3U93Gi3Z
wqkexJUc2QCr3g==
-----END CERTIFICATE-----
Generated at Tue May 12 21:21:08 2026 by rpki-client