Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.mft
File: IJ-vk1JLuAd0_86TQfSVqPsxjxA.mft (raw, json)
Hash identifier: XrPbHn1d52fWijTrbZh3E+dN/9vw+3CbKsPDSpk4B/s=
Subject key identifier: 35:2C:91:DF:35:77:81:56:C4:12:60:51:5F:A4:B6:9C:C1:88:8E:BC
Authority key identifier: 20:9F:AF:93:52:4B:B8:07:74:FF:CE:93:41:F4:95:A8:FB:31:8F:10
Certificate issuer: /CN=209faf93524bb80774ffce9341f495a8fb318f10
Certificate serial: 019FA1F24E3B343EFE1E83ACD2771ABCA83D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJ-vk1JLuAd0_86TQfSVqPsxjxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.mft
Manifest number: 03B9
Signing time: Mon 27 Jul 2026 05:00:39 +0000
Manifest this update: Mon 27 Jul 2026 05:00:39 +0000
Manifest next update: Tue 28 Jul 2026 05:00:39 +0000
Files and hashes: 1: IJ-vk1JLuAd0_86TQfSVqPsxjxA.crl (hash: vReFn/2991DXIk2N3sOpBrpeLis9VhO36r9BE5PDylg=)
2: ZoxHWr59OftqgFBaS0g_ihcCxHI.roa (hash: WqLRsE9et1dy1xG/u+4z6Ef9e0vz4XBOuKvh8sShkIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IJ-vk1JLuAd0_86TQfSVqPsxjxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 05:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:f2:4e:3b:34:3e:fe:1e:83:ac:d2:77:1a:bc:a8:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=209faf93524bb80774ffce9341f495a8fb318f10
Validity
Not Before: Jul 27 05:00:39 2026 GMT
Not After : Jul 28 05:00:39 2026 GMT
Subject: CN=352c91df35778156c41260515fa4b69cc1888ebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:95:e4:3d:3a:9f:bb:c0:7a:32:3e:dd:37:39:
26:47:3d:70:aa:e4:66:04:77:9f:2b:f9:da:8d:22:
62:71:a5:ac:61:11:26:ed:25:3f:8a:c9:97:79:83:
7a:2e:17:02:71:01:28:e7:22:7b:a8:ca:52:54:97:
fc:c8:15:fc:2e:47:d2:be:b3:be:f5:cc:6e:19:a9:
12:6a:02:c5:b0:24:3e:b5:2b:82:f5:b0:a8:f0:3a:
1a:93:ba:4d:55:e5:6d:4a:fc:ed:ca:cf:cf:24:bf:
3f:3c:73:96:6b:41:3b:7d:8a:f3:b3:e8:2b:ef:d9:
24:f6:8d:94:e3:60:0f:8f:1b:e9:20:52:9c:88:77:
12:b6:0b:af:cb:e0:49:37:df:21:8a:32:21:a3:4e:
4b:16:be:77:6f:79:57:87:ac:5c:ba:0d:1a:e6:c8:
14:d0:70:a5:69:df:6d:5b:7b:83:29:66:c2:e9:a0:
d8:a0:2f:2d:22:da:b8:2b:4b:52:40:8e:ba:94:fa:
a2:50:0f:1d:0f:56:10:42:f5:cf:4b:b2:7b:c7:dc:
b9:27:2b:4e:f0:5f:ef:3a:10:54:90:7d:77:1b:d7:
e8:fa:ac:32:03:2d:a1:7d:9f:ae:c8:ec:cb:b3:eb:
5e:3c:30:07:24:f3:2c:c1:ae:c9:4d:df:6c:39:16:
ca:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:2C:91:DF:35:77:81:56:C4:12:60:51:5F:A4:B6:9C:C1:88:8E:BC
X509v3 Authority Key Identifier:
keyid:20:9F:AF:93:52:4B:B8:07:74:FF:CE:93:41:F4:95:A8:FB:31:8F:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJ-vk1JLuAd0_86TQfSVqPsxjxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:13:59:b5:20:70:03:b1:1c:04:3d:b3:6b:4a:00:70:dd:30:
c4:64:9f:9c:38:18:5c:f8:37:73:c9:e3:d2:0e:30:96:4e:94:
40:e5:aa:52:3f:54:19:17:e9:b8:7c:09:a2:56:2e:02:6f:fa:
37:fb:99:7a:0f:8b:ce:e6:b2:13:47:32:80:58:9b:f4:1c:ea:
63:dc:82:55:14:d6:36:16:a4:79:a0:6e:a8:59:3a:2d:04:a0:
0c:14:42:11:16:aa:35:09:1f:5f:ff:db:a2:a8:f6:0b:7c:61:
9a:a7:67:c6:18:eb:75:27:ea:ce:73:c2:2a:93:ac:38:55:d0:
9a:7a:2f:82:c7:a1:80:71:55:6e:02:28:8e:3e:1d:03:9d:82:
b1:b0:47:b2:e4:5f:a2:03:d1:6d:e3:51:d8:42:b5:74:d3:bd:
8d:09:2b:90:af:28:bf:8c:07:00:88:f5:44:a3:64:76:9a:f0:
52:c5:fe:96:f6:5a:44:14:35:da:c8:be:19:8a:8e:4f:db:ce:
6c:64:bb:0d:7e:f8:5e:63:97:94:25:9b:15:51:12:b0:23:03:
ba:02:9b:67:6c:88:14:c1:05:b4:c5:a9:e2:5f:3d:e9:4b:11:
40:d3:08:7d:ab:b7:7a:2c:8c:bf:cb:5e:80:6f:9e:d4:76:18:
a5:26:0a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:48:03 2026 by rpki-client