Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.mft
File: IJ-vk1JLuAd0_86TQfSVqPsxjxA.mft (raw, json)
Hash identifier: vZjfdg/+KL9jB57qUrIM2aZSvkrkEvYdtgqGaqxGgX0=
Subject key identifier: 93:87:9D:08:5E:DF:56:A7:B8:FA:A5:28:1F:DD:C7:86:85:29:42:17
Authority key identifier: 20:9F:AF:93:52:4B:B8:07:74:FF:CE:93:41:F4:95:A8:FB:31:8F:10
Certificate issuer: /CN=209faf93524bb80774ffce9341f495a8fb318f10
Certificate serial: 019D288454E9E93BB8506346B8E036B345D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJ-vk1JLuAd0_86TQfSVqPsxjxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.mft
Manifest number: 0271
Signing time: Thu 26 Mar 2026 05:00:54 +0000
Manifest this update: Thu 26 Mar 2026 05:00:54 +0000
Manifest next update: Fri 27 Mar 2026 05:00:54 +0000
Files and hashes: 1: IJ-vk1JLuAd0_86TQfSVqPsxjxA.crl (hash: CZb4XHdNEDj3b5PnZ0E6Kd0LgzzemAum+SqRmbJiCZw=)
2: ZoxHWr59OftqgFBaS0g_ihcCxHI.roa (hash: WqLRsE9et1dy1xG/u+4z6Ef9e0vz4XBOuKvh8sShkIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IJ-vk1JLuAd0_86TQfSVqPsxjxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:54:e9:e9:3b:b8:50:63:46:b8:e0:36:b3:45:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=209faf93524bb80774ffce9341f495a8fb318f10
Validity
Not Before: Mar 26 05:00:54 2026 GMT
Not After : Mar 27 05:00:54 2026 GMT
Subject: CN=93879d085edf56a7b8faa5281fddc78685294217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:23:be:5b:4f:3a:27:10:3c:24:2c:90:a4:df:
e3:b1:76:4c:cf:e0:60:8a:b0:aa:59:ea:1d:e4:d1:
ba:57:d1:c1:88:33:78:ad:8d:4b:8b:a5:95:fc:c6:
29:75:73:7e:ae:91:1e:01:6d:1c:dc:8f:c5:3b:fd:
0f:d6:33:59:0b:3e:fd:5f:29:e1:e8:e6:78:2e:ff:
1f:23:fc:73:58:ce:36:08:56:20:47:8d:79:a9:6b:
b4:05:bc:8c:92:70:32:ec:ee:c3:5c:d6:f8:d7:26:
9f:e9:8c:4d:f2:5c:79:0f:d1:bf:38:b0:08:ca:46:
66:3b:a6:25:6a:bf:91:e7:92:b2:07:a6:50:bb:2b:
67:ed:d3:10:54:e2:40:6f:92:e0:22:07:56:7c:0a:
34:eb:5d:bf:97:f4:fe:c0:e5:0e:ba:93:d0:8d:72:
45:66:e1:1c:af:bb:98:ab:4f:8c:96:ef:db:d1:55:
68:d2:78:63:ad:51:44:91:81:68:4b:cc:20:59:9e:
e1:62:49:e9:54:a9:6b:d0:58:84:03:88:c9:9b:86:
9f:bf:90:a2:b8:71:8f:d2:b0:8e:c0:ce:a9:09:f5:
46:2e:2c:1f:0b:13:3d:7f:55:73:9d:f3:43:c6:e3:
38:f9:c4:39:49:e9:25:f7:8b:b3:0e:63:14:c7:79:
1e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:87:9D:08:5E:DF:56:A7:B8:FA:A5:28:1F:DD:C7:86:85:29:42:17
X509v3 Authority Key Identifier:
keyid:20:9F:AF:93:52:4B:B8:07:74:FF:CE:93:41:F4:95:A8:FB:31:8F:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJ-vk1JLuAd0_86TQfSVqPsxjxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:06:60:35:f9:df:e9:bf:45:cd:91:06:fe:6a:b7:6a:b8:10:
a6:61:4e:b2:c1:51:12:8a:d4:e0:85:d2:1a:16:94:04:13:92:
12:97:3d:6a:93:7c:9d:b6:54:9c:1e:6e:05:a9:de:12:e4:e5:
be:c9:c9:20:1a:d6:89:46:1a:67:99:96:17:1e:10:3b:d1:71:
3b:7a:9d:f1:97:f5:bb:e3:8f:ec:5d:85:72:d1:0c:99:38:eb:
22:18:a5:c4:4e:8a:96:d2:6b:6c:6f:6e:7e:02:a7:3f:e0:e0:
b3:9e:fd:0d:ab:73:bb:1e:f9:2c:49:74:af:e5:1e:4b:c9:1e:
88:e1:6b:e4:9d:7a:5d:a1:61:35:36:65:a1:53:c4:85:84:e3:
45:da:e3:de:5c:a9:11:58:e7:b1:01:42:66:a5:68:6b:2d:88:
ec:a2:60:85:64:08:9f:e7:ba:7f:d6:55:e7:b9:38:01:0b:66:
2d:46:23:ad:59:9a:ef:c4:4f:d8:2d:dd:59:84:9f:07:51:d4:
59:35:75:04:3e:4c:e0:dc:1e:d7:09:81:84:a3:9f:7b:e5:a8:
6e:81:79:f3:83:ca:d8:88:43:8e:fd:9a:d7:af:64:6e:86:5b:
82:49:54:67:92:00:ec:fc:78:b4:34:a2:1c:d1:42:88:5b:97:
5e:d8:4d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:57:32 2026 by rpki-client