Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.mft
File: IJ-vk1JLuAd0_86TQfSVqPsxjxA.mft (raw, json)
Hash identifier: 1LO2A0CcunyuhovbY3+183j/GgdaRRV1J9XioE9wPGc=
Subject key identifier: C5:29:7E:0D:17:60:21:B8:46:55:CD:0A:FC:B3:B5:63:3A:E3:C7:E3
Authority key identifier: 20:9F:AF:93:52:4B:B8:07:74:FF:CE:93:41:F4:95:A8:FB:31:8F:10
Certificate issuer: /CN=209faf93524bb80774ffce9341f495a8fb318f10
Certificate serial: 019EBFFF48D10804B41EAAE288556FF0D4AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJ-vk1JLuAd0_86TQfSVqPsxjxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.mft
Manifest number: 0344
Signing time: Sat 13 Jun 2026 08:00:38 +0000
Manifest this update: Sat 13 Jun 2026 08:00:38 +0000
Manifest next update: Sun 14 Jun 2026 08:00:38 +0000
Files and hashes: 1: IJ-vk1JLuAd0_86TQfSVqPsxjxA.crl (hash: S7XoGtVYtTs+8RN+gh5PvtMqg4/u1cCRDtDsoQjOAAs=)
2: ZoxHWr59OftqgFBaS0g_ihcCxHI.roa (hash: WqLRsE9et1dy1xG/u+4z6Ef9e0vz4XBOuKvh8sShkIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IJ-vk1JLuAd0_86TQfSVqPsxjxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:ff:48:d1:08:04:b4:1e:aa:e2:88:55:6f:f0:d4:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=209faf93524bb80774ffce9341f495a8fb318f10
Validity
Not Before: Jun 13 08:00:38 2026 GMT
Not After : Jun 14 08:00:38 2026 GMT
Subject: CN=c5297e0d176021b84655cd0afcb3b5633ae3c7e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d4:3b:f5:36:b2:3a:98:cd:31:05:0e:57:bd:
77:f2:76:58:e8:fe:8d:a2:df:36:d5:14:ae:4c:80:
56:d8:ce:2f:04:9c:c5:44:c9:c4:3a:90:2d:80:ab:
94:e7:48:84:d2:a2:ea:f9:fb:8f:11:71:61:dc:55:
f4:96:b8:e6:29:69:d2:bf:1a:81:95:7b:2b:30:d2:
15:a2:6e:d4:54:1b:25:6d:40:80:f5:b6:65:c2:98:
b4:b7:8a:81:a9:9f:c7:c2:b9:23:08:66:d5:98:d7:
d4:f4:81:f9:6a:3e:79:98:ff:9a:08:70:95:04:04:
a1:e7:1d:e9:23:fb:ab:6d:bc:5a:e7:17:cd:e9:68:
17:87:67:3b:80:73:41:a5:3a:a8:f1:26:90:be:96:
25:f2:36:c7:1e:77:0d:c2:a6:5c:33:b0:d1:47:63:
27:f9:70:1c:22:2e:0d:f5:b6:ba:d9:eb:c7:d7:f7:
05:16:20:93:3d:0f:d4:7e:92:db:01:33:c8:d1:04:
c8:7e:9c:e9:b8:a0:69:0f:24:12:16:6f:f8:45:ad:
9a:05:5c:50:19:08:47:31:1e:7b:d9:ea:a9:22:c8:
61:bb:08:aa:5b:90:07:97:7b:2b:1e:71:4d:c3:ad:
b4:75:cb:92:1b:c4:c0:51:98:61:20:b5:e0:3b:75:
17:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:29:7E:0D:17:60:21:B8:46:55:CD:0A:FC:B3:B5:63:3A:E3:C7:E3
X509v3 Authority Key Identifier:
keyid:20:9F:AF:93:52:4B:B8:07:74:FF:CE:93:41:F4:95:A8:FB:31:8F:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJ-vk1JLuAd0_86TQfSVqPsxjxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:08:b3:02:de:f7:ba:21:4c:38:b7:b9:7b:ab:70:67:9b:ea:
b1:ee:4d:3a:e1:09:4b:ed:c8:8a:28:c9:a7:a1:93:aa:69:1b:
b9:f2:91:d6:9b:cc:11:80:bf:f0:df:ef:ce:6c:1f:74:4f:56:
84:65:7b:ce:00:33:d3:cf:b1:c4:f6:b9:c9:a5:43:d1:fe:e1:
f3:b8:a4:f7:1d:33:15:e3:68:4b:3c:18:fb:d4:d0:9c:ad:9a:
64:ca:07:cd:85:fc:4a:ee:49:10:2a:50:de:9f:0c:89:c2:05:
78:0c:43:5f:00:96:c6:65:8f:ed:42:44:23:e6:e0:20:79:ab:
dd:6a:00:7e:cb:84:f4:b5:ce:d6:89:82:2e:6e:93:91:04:5f:
cc:04:e7:5c:e4:bb:e3:cf:7e:3d:20:66:22:8b:db:9b:45:53:
cd:ee:65:df:01:74:cb:c2:48:1c:b7:c1:ea:24:01:ef:4c:09:
bc:7c:34:c6:26:8c:19:4a:53:63:bd:df:96:2c:0b:38:c6:55:
66:21:85:0a:cb:a4:a8:84:d1:9d:fd:78:dc:6e:a5:d6:62:e9:
af:c3:4f:b2:c0:49:c9:aa:72:00:1d:55:f6:62:9a:40:0f:0f:
4a:01:6f:e5:27:15:6e:5a:da:81:46:7f:c7:43:9a:41:35:e3:
8f:42:b9:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:07:58 2026 by rpki-client