Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.mft
File: IJ-vk1JLuAd0_86TQfSVqPsxjxA.mft (raw, json)
Hash identifier: BagqeknmKEtss04OXzflANKXvLThlV8socpqyvvBves=
Subject key identifier: 3C:BA:E9:70:3E:40:25:7C:2B:CF:80:D8:8D:70:FE:FB:6D:D8:99:52
Authority key identifier: 20:9F:AF:93:52:4B:B8:07:74:FF:CE:93:41:F4:95:A8:FB:31:8F:10
Certificate issuer: /CN=209faf93524bb80774ffce9341f495a8fb318f10
Certificate serial: 01A182D134EC26DDD5FC299F38DC0D0E4E61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJ-vk1JLuAd0_86TQfSVqPsxjxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.mft
Manifest number: 04B2
Signing time: Wed 28 Oct 2026 14:01:50 +0000
Manifest this update: Wed 28 Oct 2026 14:01:50 +0000
Manifest next update: Thu 29 Oct 2026 14:01:50 +0000
Files and hashes: 1: IJ-vk1JLuAd0_86TQfSVqPsxjxA.crl (hash: UJF090o6l4R6YlqInOQfL9F/KCqCynlEbtr4TpQNBeY=)
2: ZoxHWr59OftqgFBaS0g_ihcCxHI.roa (hash: WqLRsE9et1dy1xG/u+4z6Ef9e0vz4XBOuKvh8sShkIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IJ-vk1JLuAd0_86TQfSVqPsxjxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:d1:34:ec:26:dd:d5:fc:29:9f:38:dc:0d:0e:4e:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=209faf93524bb80774ffce9341f495a8fb318f10
Validity
Not Before: Oct 28 14:01:50 2026 GMT
Not After : Oct 29 14:01:50 2026 GMT
Subject: CN=3cbae9703e40257c2bcf80d88d70fefb6dd89952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7b:3c:01:1f:61:b4:c5:c4:c1:09:b3:d0:1f:
6a:6c:4d:8f:49:6f:12:f0:0a:27:1a:57:a5:99:3b:
09:91:a8:2f:34:8b:66:22:bf:bf:9c:e9:e2:e0:cf:
8b:a0:8e:06:78:10:c7:0e:bd:9c:c4:00:5a:13:f5:
83:96:54:4e:3b:71:6e:46:a1:61:8b:eb:98:30:6f:
51:44:a9:17:5b:6a:d3:a0:18:bb:ea:5c:8b:c7:c9:
97:7b:47:0a:df:2d:69:a5:3d:41:2c:53:ff:d1:d7:
01:76:29:03:92:82:a8:f0:7e:c2:e4:41:2b:15:52:
a4:49:43:0c:a1:ee:7c:8d:c8:44:fb:cc:61:bb:9e:
ee:da:b9:6f:04:dc:5f:37:0e:12:38:36:bd:92:9f:
7c:1b:ad:a5:e7:a5:db:11:e5:60:16:db:89:fa:20:
37:0d:eb:be:e0:e4:17:3d:52:65:7d:ca:6c:f0:90:
36:bb:80:10:72:b5:d2:e3:55:06:79:93:b1:31:15:
c0:84:22:63:39:ba:c9:c7:a3:74:c2:e8:37:13:32:
89:f0:c1:f5:1e:95:1a:03:05:1e:bc:36:f7:92:1a:
d3:e4:28:eb:34:f2:87:6a:b8:72:67:65:48:eb:a7:
87:62:92:5d:ce:5a:7b:44:b8:8a:d2:a3:f7:17:44:
06:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:BA:E9:70:3E:40:25:7C:2B:CF:80:D8:8D:70:FE:FB:6D:D8:99:52
X509v3 Authority Key Identifier:
keyid:20:9F:AF:93:52:4B:B8:07:74:FF:CE:93:41:F4:95:A8:FB:31:8F:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJ-vk1JLuAd0_86TQfSVqPsxjxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:0b:7f:89:6b:25:bb:5c:90:5f:8d:11:85:8a:af:1a:0f:e4:
ea:b0:2b:ea:89:4c:fe:66:ad:4d:fe:a0:b0:ca:6a:10:9d:6d:
61:3a:85:18:df:a9:5e:e6:72:05:aa:2e:fe:71:e9:54:70:8b:
5c:4e:94:b3:4c:05:d5:13:96:df:7f:04:75:d2:f9:6b:f1:68:
25:a8:b3:2c:58:fb:e0:e7:7b:fd:22:b2:b3:05:30:1c:91:92:
67:87:cb:e6:9e:ce:1e:13:ef:19:80:40:22:66:9e:34:e6:7e:
db:83:79:0d:d5:92:2c:ab:9d:1a:3d:64:dc:02:91:24:b0:db:
c5:de:e7:dd:ee:b2:3c:fb:b3:70:3d:fc:3d:e0:fb:a2:60:35:
1d:f0:cb:a2:7c:c5:2f:4e:59:f1:16:57:34:2a:74:ec:f5:02:
77:7a:40:1f:f0:f9:a4:ed:b7:dd:48:c1:0d:ad:73:62:bd:6c:
6d:38:fb:ab:5c:1f:79:6e:e4:63:e4:4d:4b:3d:4c:0b:28:35:
56:c0:67:1f:45:b0:d6:3e:e7:c1:61:ad:c1:f3:0a:e7:e5:e3:
d6:9a:2d:9f:7b:fd:51:b2:69:6f:75:9d:2a:4f:bd:65:40:f7:
de:a9:ec:2f:bb:1d:7b:04:3e:2d:1b:37:88:09:a8:6d:a5:25:
5e:03:5f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 00:43:34 2026 by rpki-client