Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.mft
File: IJ-vk1JLuAd0_86TQfSVqPsxjxA.mft (raw, json)
Hash identifier: Nh+Jv1ZC+1kNvxpwLetFJxBKYSBjzrDwoU9eJiF19Rw=
Subject key identifier: 03:28:5D:53:20:6F:32:FA:73:41:83:7B:A1:EC:1F:FF:F8:BD:4A:99
Authority key identifier: 20:9F:AF:93:52:4B:B8:07:74:FF:CE:93:41:F4:95:A8:FB:31:8F:10
Certificate issuer: /CN=209faf93524bb80774ffce9341f495a8fb318f10
Certificate serial: 019D39E5D008E9149308A5E368B800BD0AC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJ-vk1JLuAd0_86TQfSVqPsxjxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.mft
Manifest number: 027A
Signing time: Sun 29 Mar 2026 14:00:55 +0000
Manifest this update: Sun 29 Mar 2026 14:00:55 +0000
Manifest next update: Mon 30 Mar 2026 14:00:55 +0000
Files and hashes: 1: IJ-vk1JLuAd0_86TQfSVqPsxjxA.crl (hash: SnRoEcuj2n5j7kf8ld0/+xHN+gMqHJwsxwNwM+ao0SY=)
2: ZoxHWr59OftqgFBaS0g_ihcCxHI.roa (hash: WqLRsE9et1dy1xG/u+4z6Ef9e0vz4XBOuKvh8sShkIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IJ-vk1JLuAd0_86TQfSVqPsxjxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:d0:08:e9:14:93:08:a5:e3:68:b8:00:bd:0a:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=209faf93524bb80774ffce9341f495a8fb318f10
Validity
Not Before: Mar 29 14:00:55 2026 GMT
Not After : Mar 30 14:00:55 2026 GMT
Subject: CN=03285d53206f32fa7341837ba1ec1ffff8bd4a99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d7:a7:d2:d6:fa:63:46:d4:52:43:8e:a3:e4:
41:6d:dd:34:c7:d4:92:ef:6e:1c:e0:67:da:68:81:
12:52:c6:73:e1:52:de:a9:60:7f:1e:f0:bb:70:25:
06:1e:6b:33:29:32:19:46:a4:03:6c:93:38:10:2c:
e4:2b:d2:f1:2b:aa:ba:eb:09:c3:8e:03:b9:54:80:
de:e8:d7:20:e0:6a:ec:f0:d2:94:9b:67:5e:84:eb:
59:c3:b0:f1:bc:bf:3a:08:11:d5:53:9d:0f:62:de:
4b:23:30:cf:96:9c:dc:cc:d4:a5:d7:7f:81:77:7b:
ec:c8:80:3d:0b:94:6c:3a:8c:0d:16:00:96:17:bb:
4f:2e:ae:f9:2d:eb:b5:cc:c3:44:56:7e:b3:fb:3a:
56:da:e0:e8:d4:7f:0a:a1:7a:f7:88:58:4c:5c:e1:
ff:ff:2e:a2:d4:a3:1c:8f:f1:3b:f6:ca:fa:eb:6c:
bf:43:c7:e0:08:77:8f:dc:16:c2:d9:fd:86:5d:ee:
3c:b4:d1:5a:a1:62:a5:61:cd:70:48:1f:7f:17:c2:
b3:00:95:41:cc:10:be:90:93:67:23:ad:ba:f7:84:
5b:9b:a3:bc:17:fe:d2:17:b0:cc:e9:98:2e:07:75:
14:58:62:6b:5f:4c:9e:d7:2c:b9:63:44:32:3a:22:
6b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:28:5D:53:20:6F:32:FA:73:41:83:7B:A1:EC:1F:FF:F8:BD:4A:99
X509v3 Authority Key Identifier:
keyid:20:9F:AF:93:52:4B:B8:07:74:FF:CE:93:41:F4:95:A8:FB:31:8F:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJ-vk1JLuAd0_86TQfSVqPsxjxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:a8:94:57:f6:dc:43:9d:97:c9:95:fe:04:3d:6e:6d:17:8b:
40:c4:de:31:5e:68:69:a4:26:d4:7a:a5:db:02:22:c4:33:6f:
97:1d:1c:fa:f7:67:a7:72:c7:84:11:0c:a5:22:65:d2:11:7d:
41:ef:f7:fd:0a:e6:fd:42:a0:af:78:d8:25:21:84:d7:95:48:
39:ae:5d:2f:f7:72:27:86:bd:90:67:81:2c:d7:85:38:74:6b:
52:c0:59:86:cd:48:f6:0f:3f:14:0f:5f:1b:e0:e1:c1:c8:8e:
67:23:7c:4c:a8:13:20:00:e7:96:88:f8:d0:38:bb:63:a3:59:
86:d0:c6:bd:2c:c6:a2:76:7c:79:48:d2:4b:92:1b:5b:30:61:
44:39:54:41:43:ce:97:ad:a6:f8:fc:42:22:21:eb:e1:56:79:
84:39:a8:13:73:e8:6a:c8:86:95:3f:ca:8e:a3:c8:2d:de:a1:
9a:7c:b3:52:4d:9a:fb:15:6a:e6:f8:f3:2e:52:5e:68:95:bb:
c5:1c:5d:23:a8:4e:7c:7d:d7:08:6f:50:29:e9:ed:c8:d2:61:
c4:f9:12:cf:ed:a5:fb:21:9a:dd:3c:5b:94:44:7b:ae:70:17:
71:6b:46:2f:50:2e:49:35:3f:c1:a9:19:8c:f8:fd:0e:a2:ea:
70:2c:71:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ055dAI6RSTCKXjaLgAvQrEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwOWZhZjkzNTI0YmI4MDc3NGZmY2U5MzQxZjQ5NWE4ZmIz
MThmMTAwHhcNMjYwMzI5MTQwMDU1WhcNMjYwMzMwMTQwMDU1WjAzMTEwLwYDVQQD
EygwMzI4NWQ1MzIwNmYzMmZhNzM0MTgzN2JhMWVjMWZmZmY4YmQ0YTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNen0tb6Y0bUUkOOo+RBbd00x9SS
724c4GfaaIESUsZz4VLeqWB/HvC7cCUGHmszKTIZRqQDbJM4ECzkK9LxK6q66wnD
jgO5VIDe6Ncg4Grs8NKUm2dehOtZw7DxvL86CBHVU50PYt5LIzDPlpzczNSl13+B
d3vsyIA9C5RsOowNFgCWF7tPLq75Leu1zMNEVn6z+zpW2uDo1H8KoXr3iFhMXOH/
/y6i1KMcj/E79sr662y/Q8fgCHeP3BbC2f2GXe48tNFaoWKlYc1wSB9/F8KzAJVB
zBC+kJNnI62694Rbm6O8F/7SF7DM6ZguB3UUWGJrX0ye1yy5Y0QyOiJrPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAMoXVMgbzL6c0GDe6HsH//4vUqZMB8GA1UdIwQY
MBaAFCCfr5NSS7gHdP/Ok0H0laj7MY8QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUotdmsxSkx1QWQwXzg2VFFmU1ZxUHN4anhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS81YTJjYmQtM2IyNi00NTg2LThhNmUt
ZDE2NGRkZTUzNTFmLzEvSUotdmsxSkx1QWQwXzg2VFFmU1ZxUHN4anhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS81YTJjYmQtM2IyNi00NTg2LThhNmUtZDE2NGRkZTUzNTFm
LzEvSUotdmsxSkx1QWQwXzg2VFFmU1ZxUHN4anhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZKiUV/bc
Q52XyZX+BD1ubReLQMTeMV5oaaQm1Hql2wIixDNvlx0c+vdnp3LHhBEMpSJl0hF9
Qe/3/Qrm/UKgr3jYJSGE15VIOa5dL/dyJ4a9kGeBLNeFOHRrUsBZhs1I9g8/FA9f
G+DhwciOZyN8TKgTIADnloj40Di7Y6NZhtDGvSzGonZ8eUjSS5IbWzBhRDlUQUPO
l62m+PxCIiHr4VZ5hDmoE3PoasiGlT/KjqPILd6hmnyzUk2a+xVq5vjzLlJeaJW7
xRxdI6hOfH3XCG9QKentyNJhxPkSz+2l+yGa3TxblER7rnAXcWtGL1AuSTU/wakZ
jPj9DqLqcCxxxQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:50:31 2026 by rpki-client