Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft
File: CaT39OTp5yw6M5P7XW6nQrwbTCg.mft (raw, json)
Hash identifier: rwy/gr/pGF06mk2w+89hS2uHBHcNri/WhQNUJL7T4Co=
Subject key identifier: 39:BB:7E:83:C5:D8:F1:8C:CD:5E:FD:B2:DA:59:97:A6:98:F1:3B:52
Authority key identifier: 09:A4:F7:F4:E4:E9:E7:2C:3A:33:93:FB:5D:6E:A7:42:BC:1B:4C:28
Certificate issuer: /CN=09a4f7f4e4e9e72c3a3393fb5d6ea742bc1b4c28
Certificate serial: 019F91A3A5D385930F4931EFE1FA009222D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CaT39OTp5yw6M5P7XW6nQrwbTCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft
Manifest number: 138A
Signing time: Fri 24 Jul 2026 01:00:48 +0000
Manifest this update: Fri 24 Jul 2026 01:00:48 +0000
Manifest next update: Sat 25 Jul 2026 01:00:48 +0000
Files and hashes: 1: 0tgdN2qxcJplebNaaWT9iaqWv6s.roa (hash: SVEBZu78M2nPUUItloPsYESxd6cYYGpVpIZuduXUUjU=)
2: CaT39OTp5yw6M5P7XW6nQrwbTCg.crl (hash: 7zt4ejqBUi4XGS6e2j/3tkRfEa/EMvDdMRGa4KR2oxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CaT39OTp5yw6M5P7XW6nQrwbTCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:a5:d3:85:93:0f:49:31:ef:e1:fa:00:92:22:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a4f7f4e4e9e72c3a3393fb5d6ea742bc1b4c28
Validity
Not Before: Jul 24 01:00:48 2026 GMT
Not After : Jul 25 01:00:48 2026 GMT
Subject: CN=39bb7e83c5d8f18ccd5efdb2da5997a698f13b52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:be:aa:1e:57:4c:27:af:8c:da:aa:df:74:7e:
5b:4f:c5:dc:b1:e0:f6:04:47:95:85:98:81:6a:26:
47:8b:1b:6c:36:24:ce:04:34:61:69:34:b9:8c:0e:
82:7c:27:a8:63:ed:d2:32:af:dd:51:d6:df:9e:dd:
c4:9a:ac:01:c7:f1:0c:4d:20:14:d1:fe:31:4e:2c:
50:f9:13:74:45:41:33:a4:89:df:8c:d6:e4:44:83:
d5:03:09:8a:97:03:a0:5e:62:30:65:f6:e7:73:97:
87:cd:b1:9d:8f:57:ec:98:56:cf:4e:0b:7b:54:42:
dd:b6:55:df:1e:30:5e:15:4a:6b:7e:d0:b4:ce:ea:
ae:15:5f:97:ba:c0:7a:9a:13:14:86:74:24:f7:74:
97:4e:7c:64:99:7e:6b:46:94:bc:5e:10:58:dc:92:
83:bc:d0:dc:d9:e3:0f:6e:16:db:70:e1:c8:61:b0:
dd:e9:69:35:28:f1:cb:03:fe:75:a9:4a:35:6d:64:
4c:85:d7:1f:5c:25:e7:1b:cf:17:65:b3:f9:42:8a:
f8:6c:9f:02:ed:f9:67:83:62:8f:43:e0:06:83:b9:
03:b1:2a:1d:53:b3:95:aa:b5:fe:d5:38:63:98:c4:
70:2e:38:7e:df:d5:73:73:8d:0b:7b:94:b6:64:f8:
93:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:BB:7E:83:C5:D8:F1:8C:CD:5E:FD:B2:DA:59:97:A6:98:F1:3B:52
X509v3 Authority Key Identifier:
keyid:09:A4:F7:F4:E4:E9:E7:2C:3A:33:93:FB:5D:6E:A7:42:BC:1B:4C:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CaT39OTp5yw6M5P7XW6nQrwbTCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:71:c6:e2:8b:af:d4:4b:bd:0a:de:ad:8e:94:a9:e5:fc:6d:
bf:83:74:fa:28:fd:8f:58:92:bc:fb:ec:f2:b1:a8:eb:cb:53:
e4:6b:65:5f:1c:59:fb:58:95:fb:ba:7a:98:d6:37:0c:59:d3:
91:07:4f:90:5a:15:01:7e:5e:f4:39:a2:5f:3f:c7:da:c0:05:
83:51:cc:b1:0a:a2:79:d0:34:29:e2:1c:b5:c1:9a:80:75:ec:
51:36:dc:89:10:5c:62:1e:f7:92:1d:a1:9c:60:3d:8f:50:ef:
c4:eb:c0:5f:84:c1:87:15:61:2e:65:d6:5a:db:30:2b:e8:88:
bd:48:a4:01:db:0b:e0:76:10:c1:1d:8e:50:91:7d:60:6e:4d:
6e:61:cb:38:d2:5f:1b:70:8f:44:a2:12:c2:03:de:99:05:21:
27:51:52:b0:6d:a2:36:b6:c2:7e:a9:94:ba:a2:e0:0c:97:86:
96:dd:41:e5:10:ac:bf:6f:88:c7:61:18:a6:66:11:fc:ea:ed:
2d:06:54:95:8d:5b:00:d7:a0:ba:7a:db:ae:78:d7:b0:1e:a9:
f5:55:31:94:53:28:54:6c:db:2f:e1:d7:03:98:bb:c6:f5:9f:
fd:a1:b0:24:60:b0:33:f7:42:52:62:18:bb:f3:05:69:d5:5e:
14:e5:5c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:06:03 2026 by rpki-client