Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.mft
File: IJ-vk1JLuAd0_86TQfSVqPsxjxA.mft (raw, json)
Hash identifier: 8gc2aluShytpJDKaKD9g94gmhLCmV0nFPbJRSUBSBV0=
Subject key identifier: 0A:36:D1:29:EF:5D:33:9B:B1:E7:0A:E0:7E:D3:29:3C:4A:54:B2:2A
Authority key identifier: 20:9F:AF:93:52:4B:B8:07:74:FF:CE:93:41:F4:95:A8:FB:31:8F:10
Certificate issuer: /CN=209faf93524bb80774ffce9341f495a8fb318f10
Certificate serial: 019E3117D86D692AE8E4CB1D8805E9477048
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJ-vk1JLuAd0_86TQfSVqPsxjxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.mft
Manifest number: 02FA
Signing time: Sat 16 May 2026 14:01:46 +0000
Manifest this update: Sat 16 May 2026 14:01:46 +0000
Manifest next update: Sun 17 May 2026 14:01:46 +0000
Files and hashes: 1: IJ-vk1JLuAd0_86TQfSVqPsxjxA.crl (hash: e+O4u+gT7CsBc+uRGmcPi67IfVCKNFKC8RxvNRhxeVM=)
2: ZoxHWr59OftqgFBaS0g_ihcCxHI.roa (hash: WqLRsE9et1dy1xG/u+4z6Ef9e0vz4XBOuKvh8sShkIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IJ-vk1JLuAd0_86TQfSVqPsxjxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:17:d8:6d:69:2a:e8:e4:cb:1d:88:05:e9:47:70:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=209faf93524bb80774ffce9341f495a8fb318f10
Validity
Not Before: May 16 14:01:46 2026 GMT
Not After : May 17 14:01:46 2026 GMT
Subject: CN=0a36d129ef5d339bb1e70ae07ed3293c4a54b22a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d6:fe:fb:8f:2f:6d:64:3a:9f:1a:50:e1:58:
01:84:88:26:00:fe:1e:ab:33:61:cd:1b:31:94:ae:
8e:ec:bb:bd:93:14:d3:27:43:1b:fc:5f:f6:d5:82:
2b:7e:29:a8:62:0d:3e:7b:6a:9d:fc:ca:d6:d0:c9:
76:29:f3:1d:1f:74:3b:ef:3a:66:65:65:30:68:aa:
27:f9:d3:c2:1d:b9:2e:a5:be:af:7b:b4:3e:52:f9:
ae:e8:8a:28:7e:5d:5d:c1:d0:d1:c7:cb:1e:71:04:
42:bf:c6:aa:e6:94:8f:df:fb:6d:e3:01:fc:94:6d:
37:58:36:31:74:fe:53:fb:88:eb:f7:5f:5a:4f:41:
10:bf:2a:95:07:9e:61:f5:01:c7:07:d7:22:43:08:
c0:d6:48:79:79:27:a9:e9:ce:58:60:72:f9:9d:a5:
58:7b:6f:42:98:95:64:a9:73:a5:bb:f8:4f:67:c6:
7d:b8:6e:07:cd:e5:74:e3:97:57:89:a1:8f:c8:b7:
09:37:55:fd:9c:35:fe:2c:0d:2c:fd:38:5d:ca:ca:
30:ad:08:0d:74:81:41:fb:7f:e5:3f:bf:b5:4a:58:
80:2e:cd:1c:9b:4f:a8:f8:2e:35:ae:6b:5f:84:6d:
d9:75:ea:6f:f4:d6:fb:8f:75:5b:80:83:b5:98:4f:
fa:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:36:D1:29:EF:5D:33:9B:B1:E7:0A:E0:7E:D3:29:3C:4A:54:B2:2A
X509v3 Authority Key Identifier:
keyid:20:9F:AF:93:52:4B:B8:07:74:FF:CE:93:41:F4:95:A8:FB:31:8F:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJ-vk1JLuAd0_86TQfSVqPsxjxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:82:19:6b:74:a2:05:2f:17:b5:7a:d2:2c:f5:f8:81:4c:e3:
71:9f:a9:10:ca:db:c0:15:cb:ba:52:60:65:b1:41:25:10:26:
63:7e:7f:3b:5d:0f:d3:8b:af:ff:3c:55:99:62:e9:39:2a:84:
ef:f1:c6:6c:45:5a:81:19:66:cc:e4:84:63:4b:a4:e6:43:bb:
4e:4b:c1:b6:28:a0:99:38:72:62:48:fe:fd:53:43:ad:8a:1f:
bf:f5:25:f6:47:5a:af:47:f6:ed:58:ff:db:48:50:91:00:00:
0c:8b:bf:55:80:f8:33:63:a2:c4:bd:ca:eb:a1:c9:83:c5:ee:
16:82:bb:66:47:e1:b4:0e:65:01:1a:bd:8d:54:3d:ff:2c:6a:
23:93:1c:f4:c4:69:17:88:2f:57:3d:a1:71:1b:d4:d2:14:d9:
4e:1e:f3:3d:ed:a8:80:e7:3f:ce:01:e3:ad:bd:c6:18:58:03:
44:7e:4f:2c:7e:f5:68:18:87:e6:95:0e:bd:52:61:e4:ca:5e:
fe:33:f4:91:4f:bb:66:25:ae:23:e1:2d:74:4d:6f:f1:0a:34:
e3:f3:45:5f:59:8d:5e:17:b5:fa:77:e0:d0:b8:5d:f2:62:c4:
86:4f:e1:bf:36:52:cf:0d:eb:0b:fd:7a:77:3e:14:2b:aa:06:
fa:ee:e8:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:40:48 2026 by rpki-client