Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.mft
File: IJ-vk1JLuAd0_86TQfSVqPsxjxA.mft (raw, json)
Hash identifier: OZ9iv94oslLWFjLEl6jrBoAxNhvP9ELR2OomtcBcLzM=
Subject key identifier: 56:53:84:D7:48:E1:36:69:4E:C1:98:1F:39:45:CB:AD:6A:CB:6A:E4
Authority key identifier: 20:9F:AF:93:52:4B:B8:07:74:FF:CE:93:41:F4:95:A8:FB:31:8F:10
Certificate issuer: /CN=209faf93524bb80774ffce9341f495a8fb318f10
Certificate serial: 019FAB9A455B6BCB9138CBD974F33EE8B95C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJ-vk1JLuAd0_86TQfSVqPsxjxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.mft
Manifest number: 03BE
Signing time: Wed 29 Jul 2026 02:00:41 +0000
Manifest this update: Wed 29 Jul 2026 02:00:41 +0000
Manifest next update: Thu 30 Jul 2026 02:00:41 +0000
Files and hashes: 1: IJ-vk1JLuAd0_86TQfSVqPsxjxA.crl (hash: A23+XinRIPZUEykY3nvUvMCPDOWe3AZdFMweA0lu6Uw=)
2: ZoxHWr59OftqgFBaS0g_ihcCxHI.roa (hash: WqLRsE9et1dy1xG/u+4z6Ef9e0vz4XBOuKvh8sShkIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IJ-vk1JLuAd0_86TQfSVqPsxjxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 02:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:9a:45:5b:6b:cb:91:38:cb:d9:74:f3:3e:e8:b9:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=209faf93524bb80774ffce9341f495a8fb318f10
Validity
Not Before: Jul 29 02:00:41 2026 GMT
Not After : Jul 30 02:00:41 2026 GMT
Subject: CN=565384d748e136694ec1981f3945cbad6acb6ae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1f:92:0b:b2:63:35:dd:68:98:a7:99:e7:67:
e5:54:01:c5:bc:fd:95:bc:85:14:37:f0:e1:98:29:
d0:7d:54:eb:de:fb:be:22:1e:f5:b9:67:ef:29:1b:
16:07:de:ab:b5:e3:f7:5b:fe:b0:e7:f5:ec:96:6a:
f0:8a:fc:c7:e6:4d:77:a1:68:6a:4c:f8:33:6f:30:
c7:20:0f:02:ac:ea:f2:30:3b:bb:3a:ac:ab:c3:98:
8a:41:82:b4:bf:3c:53:b7:db:c5:f8:47:c5:e7:32:
ac:d5:11:c7:ab:36:88:c5:6f:ef:6d:df:2c:d7:4d:
e9:8b:05:bc:0c:7c:ce:67:e3:69:29:94:d4:65:4b:
79:e2:00:91:25:00:c7:82:b0:c9:48:56:1a:c9:16:
c1:08:6c:77:a1:c1:b8:3e:44:1c:fb:a9:ba:a6:97:
ad:54:5b:36:27:18:55:b7:1e:ae:65:9b:c3:3e:c2:
8c:c9:43:e6:cc:a3:e7:b7:01:f3:ab:65:e2:35:0f:
27:50:c6:f1:be:ea:02:31:d0:65:41:88:5d:26:dc:
b1:1c:13:b3:c7:0c:b4:ea:55:5c:05:2f:7c:be:28:
ac:4b:48:f7:d9:08:1b:38:90:bc:48:97:f3:59:56:
7a:d9:4e:b3:fb:51:06:c2:51:b7:1c:b4:88:bd:3e:
d3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:53:84:D7:48:E1:36:69:4E:C1:98:1F:39:45:CB:AD:6A:CB:6A:E4
X509v3 Authority Key Identifier:
keyid:20:9F:AF:93:52:4B:B8:07:74:FF:CE:93:41:F4:95:A8:FB:31:8F:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJ-vk1JLuAd0_86TQfSVqPsxjxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:f3:a3:50:31:1a:fa:e5:59:57:87:b1:c6:71:0d:1c:de:36:
8b:ba:47:81:6a:f6:3d:df:b7:4e:ce:db:5a:5e:71:95:2d:8d:
7d:28:df:d8:cb:ab:1a:ce:aa:30:66:15:c8:8e:98:26:dc:d8:
4a:e4:64:e7:e0:8d:9e:d2:14:5d:53:14:58:0d:0f:74:c2:cb:
9f:19:fc:5f:e1:59:b9:5f:6f:da:93:ba:3d:18:0f:8e:69:b8:
95:92:ee:50:e7:c1:33:15:02:15:f5:2f:56:7d:68:80:0c:8f:
43:ae:bb:0d:c2:af:0f:b4:d4:2b:2b:bb:52:db:fb:64:5d:63:
84:ae:0c:c2:63:a5:01:f9:78:cf:50:dd:85:08:07:3e:c3:ec:
93:c9:0f:90:1d:b1:5c:80:d2:69:83:cb:f7:dd:9d:81:2c:d0:
37:12:8a:e9:85:9a:80:df:3e:ca:aa:17:9a:65:33:05:6e:8d:
d1:86:9b:8c:f9:2f:ed:ac:8f:4e:23:bc:07:c0:39:e3:11:88:
89:8b:06:79:3c:79:d4:fb:7d:e9:69:dd:f7:dc:15:14:e6:94:
e0:c1:1a:34:3c:a9:9a:de:f0:e7:25:ec:28:d6:b1:c6:60:58:
38:ef:ad:57:53:66:40:24:5f:c8:38:05:ea:a9:65:68:0c:da:
93:e7:7d:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+rmkVba8uROMvZdPM+6LlcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwOWZhZjkzNTI0YmI4MDc3NGZmY2U5MzQxZjQ5NWE4ZmIz
MThmMTAwHhcNMjYwNzI5MDIwMDQxWhcNMjYwNzMwMDIwMDQxWjAzMTEwLwYDVQQD
Eyg1NjUzODRkNzQ4ZTEzNjY5NGVjMTk4MWYzOTQ1Y2JhZDZhY2I2YWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzx+SC7JjNd1omKeZ52flVAHFvP2V
vIUUN/DhmCnQfVTr3vu+Ih71uWfvKRsWB96rteP3W/6w5/XslmrwivzH5k13oWhq
TPgzbzDHIA8CrOryMDu7Oqyrw5iKQYK0vzxTt9vF+EfF5zKs1RHHqzaIxW/vbd8s
103piwW8DHzOZ+NpKZTUZUt54gCRJQDHgrDJSFYayRbBCGx3ocG4PkQc+6m6ppet
VFs2JxhVtx6uZZvDPsKMyUPmzKPntwHzq2XiNQ8nUMbxvuoCMdBlQYhdJtyxHBOz
xwy06lVcBS98viisS0j32QgbOJC8SJfzWVZ62U6z+1EGwlG3HLSIvT7T2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFZThNdI4TZpTsGYHzlFy61qy2rkMB8GA1UdIwQY
MBaAFCCfr5NSS7gHdP/Ok0H0laj7MY8QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUotdmsxSkx1QWQwXzg2VFFmU1ZxUHN4anhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS81YTJjYmQtM2IyNi00NTg2LThhNmUt
ZDE2NGRkZTUzNTFmLzEvSUotdmsxSkx1QWQwXzg2VFFmU1ZxUHN4anhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS81YTJjYmQtM2IyNi00NTg2LThhNmUtZDE2NGRkZTUzNTFm
LzEvSUotdmsxSkx1QWQwXzg2VFFmU1ZxUHN4anhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT/OjUDEa
+uVZV4exxnENHN42i7pHgWr2Pd+3Ts7bWl5xlS2NfSjf2MurGs6qMGYVyI6YJtzY
SuRk5+CNntIUXVMUWA0PdMLLnxn8X+FZuV9v2pO6PRgPjmm4lZLuUOfBMxUCFfUv
Vn1ogAyPQ667DcKvD7TUKyu7Utv7ZF1jhK4MwmOlAfl4z1DdhQgHPsPsk8kPkB2x
XIDSaYPL992dgSzQNxKK6YWagN8+yqoXmmUzBW6N0YabjPkv7ayPTiO8B8A54xGI
iYsGeTx51Pt96Wnd99wVFOaU4MEaNDypmt7w5yXsKNaxxmBYOO+tV1NmQCRfyDgF
6qllaAzak+d9wQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 12:26:49 2026 by rpki-client