Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/39-uqRN3Xxj1-NA1Z-XCDQ3PiLI.mft
File: 39-uqRN3Xxj1-NA1Z-XCDQ3PiLI.mft (raw, json)
Hash identifier: YSBLQ+NWTfr2Kjo+pbNc4vqF/7XFI5ThAU6exCOLxMw=
Subject key identifier: 0C:E4:E8:0B:7C:B5:E5:39:AF:15:5F:70:87:14:8D:21:3D:F4:39:59
Authority key identifier: DF:DF:AE:A9:13:77:5F:18:F5:F8:D0:35:67:E5:C2:0D:0D:CF:88:B2
Certificate issuer: /CN=dfdfaea913775f18f5f8d03567e5c20d0dcf88b2
Certificate serial: 019F916DB0AD9AA75F240EF03E40D0E191D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39-uqRN3Xxj1-NA1Z-XCDQ3PiLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/39-uqRN3Xxj1-NA1Z-XCDQ3PiLI.mft
Manifest number: 40
Signing time: Fri 24 Jul 2026 00:01:52 +0000
Manifest this update: Fri 24 Jul 2026 00:01:52 +0000
Manifest next update: Sat 25 Jul 2026 00:01:52 +0000
Files and hashes: 1: 39-uqRN3Xxj1-NA1Z-XCDQ3PiLI.crl (hash: MNUerFxwu8u0Opz4BAFhUWeB5FSxq15U+0PTjUHbU1k=)
2: AfYp2roOu6llmLK-QFL-cDx3Sps.roa (hash: nBRygBtw6o9MqspyhNIauwKrDbuTQcu6stknnCkOqCE=)
3: Fqd9CiVtXICF7fkUl7kmSEJrslg.roa (hash: P0MD0ty95bldNCHqdPgd7411Cky2iN6dvwj7mvcRfpI=)
4: KRIPrMfF_pwkDJ36tS1Z9ALClmI.roa (hash: imuv+blTMUmEZpqPOWhsJtoGrlHWzRuWpyfgDra+OYA=)
5: KpBUeLUehx37-G7wc65xLDd7D1o.roa (hash: 1bXTS2IeX5yHjmO70XE2P5YQwQgs6/gjAu5CE7AyyxM=)
6: L7lYmoMqETkdIoe8tAc3oaYn410.roa (hash: 77Fj0KhJGcXIvhuDeXT1Kb2sp0PYdxYf1B+kySghYWI=)
7: Yx_v2-WnUx4Pa-Xapg--_3nB4SM.roa (hash: sYzDtFoQ+Z0jAPr7/aEtcml7DlJ4+rH/UYYE8d0QfIQ=)
8: tH8iogWnSl4BdfzNPISKQQzt-Wk.roa (hash: CFoOyClZIttlxfo6s29kWFO4JUkk6mAvIhm58DzApsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/39-uqRN3Xxj1-NA1Z-XCDQ3PiLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/39-uqRN3Xxj1-NA1Z-XCDQ3PiLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/39-uqRN3Xxj1-NA1Z-XCDQ3PiLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:b0:ad:9a:a7:5f:24:0e:f0:3e:40:d0:e1:91:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfdfaea913775f18f5f8d03567e5c20d0dcf88b2
Validity
Not Before: Jul 24 00:01:52 2026 GMT
Not After : Jul 25 00:01:52 2026 GMT
Subject: CN=0ce4e80b7cb5e539af155f7087148d213df43959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1d:a1:db:21:4a:cc:11:b0:f9:20:d0:ba:30:
cd:19:2f:a1:3d:b5:33:fb:f4:c0:77:77:ab:b8:7e:
49:81:0f:44:b2:3c:d2:1d:35:3a:ce:3a:9b:27:f0:
f5:6d:18:8d:a4:bf:1a:00:87:81:4d:92:93:89:96:
42:79:f6:9c:f9:19:77:2b:21:89:dc:9e:a6:f3:e6:
a3:3e:e9:c7:c7:63:1c:1e:f9:23:e4:7e:3f:c8:22:
96:ba:45:97:fd:94:de:c1:48:36:21:c0:35:7f:c2:
96:b6:c4:01:db:2c:d3:d5:1c:72:de:1c:73:ab:48:
48:27:49:21:bf:18:49:52:ba:0d:c4:3f:3f:56:48:
4c:bb:ef:ed:9c:6e:0b:5a:d1:5e:9a:59:bd:55:4b:
4f:75:35:a7:18:19:ed:aa:bb:49:db:db:37:a3:b4:
09:7c:cd:85:15:01:5a:79:95:99:cd:a6:2e:21:32:
2b:79:6c:49:ad:59:ce:55:fc:ac:25:7a:00:0e:a3:
8e:8a:a3:f0:f4:a7:3b:f6:ca:25:6e:4a:5b:8a:63:
c2:cc:55:cd:3e:6c:b2:4e:03:72:8b:44:4f:f8:01:
1b:a4:86:a8:b7:90:4d:49:5e:85:42:50:66:58:bc:
4d:26:a9:fe:69:e8:7b:28:f7:98:bf:9e:77:c0:b5:
8a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:E4:E8:0B:7C:B5:E5:39:AF:15:5F:70:87:14:8D:21:3D:F4:39:59
X509v3 Authority Key Identifier:
keyid:DF:DF:AE:A9:13:77:5F:18:F5:F8:D0:35:67:E5:C2:0D:0D:CF:88:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39-uqRN3Xxj1-NA1Z-XCDQ3PiLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/39-uqRN3Xxj1-NA1Z-XCDQ3PiLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/39-uqRN3Xxj1-NA1Z-XCDQ3PiLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:43:bf:db:f2:c3:41:9e:b4:44:8b:b6:67:7c:1c:e8:dd:33:
1a:7b:83:3e:c6:ff:bf:f1:9f:55:19:74:ee:9f:72:2e:05:23:
0e:71:bb:68:b0:be:e5:8c:7e:a1:13:e7:78:30:09:d2:4a:8b:
69:95:11:85:a6:e0:74:08:ee:d4:09:43:7f:16:26:f8:b5:65:
32:5b:51:34:35:06:65:45:19:9d:d8:12:d5:73:bd:39:89:bf:
5d:87:df:2f:b1:31:f4:c1:12:65:28:53:58:b0:5a:f1:51:26:
3b:cc:5d:86:31:bf:79:b9:81:ac:09:b9:1e:cb:2a:b5:9f:70:
16:b9:6a:9a:0f:aa:a9:97:bf:2f:f6:e2:20:a5:ab:85:ee:4e:
a1:3d:15:b2:2d:34:a0:f2:5f:0a:6f:90:1b:d5:45:69:e8:12:
c1:6e:c0:fe:67:dd:19:cc:e4:9e:37:d9:6e:2f:2f:89:fa:32:
03:46:15:75:d8:3e:31:42:2b:5a:28:2b:ea:ab:aa:df:80:fc:
4b:40:89:10:ba:32:7d:1d:50:86:ab:c2:18:f4:4c:44:51:52:
64:07:fb:bd:f9:00:df:39:fa:61:05:c9:60:79:7b:81:d2:7b:
03:b9:31:33:0c:43:f2:1d:e5:27:9d:31:9f:03:d4:f4:f4:49:
01:35:a8:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:16:26 2026 by rpki-client