Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.mft
File: IJ-vk1JLuAd0_86TQfSVqPsxjxA.mft (raw, json)
Hash identifier: Gy2fE4iC/FOccEWITP9uqE3CumBF98lMszAb0YZorTI=
Subject key identifier: 7F:C3:B2:97:2A:A8:17:43:2D:BC:45:0B:7B:D7:F8:8B:7B:EA:3D:E1
Authority key identifier: 20:9F:AF:93:52:4B:B8:07:74:FF:CE:93:41:F4:95:A8:FB:31:8F:10
Certificate issuer: /CN=209faf93524bb80774ffce9341f495a8fb318f10
Certificate serial: 019CAEDA4C86A21F4D6C5BD43EE4C09F84D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJ-vk1JLuAd0_86TQfSVqPsxjxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.mft
Manifest number: 0232
Signing time: Mon 02 Mar 2026 14:01:07 +0000
Manifest this update: Mon 02 Mar 2026 14:01:07 +0000
Manifest next update: Tue 03 Mar 2026 14:01:07 +0000
Files and hashes: 1: IJ-vk1JLuAd0_86TQfSVqPsxjxA.crl (hash: 3DlUOjZoIOXMpEt2bnumnu1E8/zdebS/07kxLUQD5q0=)
2: ZoxHWr59OftqgFBaS0g_ihcCxHI.roa (hash: WqLRsE9et1dy1xG/u+4z6Ef9e0vz4XBOuKvh8sShkIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IJ-vk1JLuAd0_86TQfSVqPsxjxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 14:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:da:4c:86:a2:1f:4d:6c:5b:d4:3e:e4:c0:9f:84:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=209faf93524bb80774ffce9341f495a8fb318f10
Validity
Not Before: Mar 2 14:01:07 2026 GMT
Not After : Mar 3 14:01:07 2026 GMT
Subject: CN=7fc3b2972aa817432dbc450b7bd7f88b7bea3de1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:15:94:7f:32:1c:a5:13:c3:e7:b2:b7:29:1f:
d5:d0:ad:48:0d:37:67:15:bb:7f:59:14:db:57:28:
09:4d:52:d2:5c:f9:11:4c:b2:63:cc:22:98:3d:2c:
5f:63:d9:0e:bc:b5:c9:0e:15:ad:11:a3:95:22:c3:
13:03:45:40:a8:a4:df:60:da:ff:7f:37:1b:a7:f5:
0a:46:43:d7:a8:b2:ee:37:f0:da:d0:eb:04:f1:ef:
e0:4f:02:e4:aa:1e:21:2a:32:cf:a9:4b:88:a3:10:
b6:e6:45:56:6d:5d:71:24:45:5c:b5:34:e9:ba:76:
1b:67:7c:43:19:7b:64:c8:2f:88:4e:53:31:f2:c6:
d5:a2:bd:d5:25:f7:87:ea:ee:e4:a2:b5:e8:a1:7e:
91:f6:e2:50:ec:3c:26:67:d2:69:05:48:51:e0:23:
e7:43:77:b6:27:eb:8e:8c:c4:ed:24:de:20:27:30:
84:23:01:21:02:75:33:9f:5e:4c:4d:6a:df:62:c5:
65:6b:a3:b9:ee:2d:fc:52:34:b5:ba:6c:4a:26:8f:
81:71:90:00:a5:f1:32:bb:52:2b:b0:11:cc:9e:dd:
88:0c:4f:f7:13:87:1f:36:64:af:36:05:e0:89:90:
78:9a:95:c2:b9:a4:a7:b3:2d:12:ff:84:bd:75:09:
ef:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:C3:B2:97:2A:A8:17:43:2D:BC:45:0B:7B:D7:F8:8B:7B:EA:3D:E1
X509v3 Authority Key Identifier:
keyid:20:9F:AF:93:52:4B:B8:07:74:FF:CE:93:41:F4:95:A8:FB:31:8F:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJ-vk1JLuAd0_86TQfSVqPsxjxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:8f:34:97:4f:af:75:a3:9e:f5:ac:b1:73:1f:74:2b:57:58:
55:c9:ba:1c:13:21:ae:8b:ff:bb:be:2a:a3:69:30:21:40:51:
1a:6c:d6:11:31:53:02:a1:18:bc:90:52:36:d1:8a:18:65:07:
16:a5:bd:95:19:3b:bc:f2:cd:63:65:22:6e:21:61:bc:69:b9:
b5:5d:a3:ad:82:1e:45:1a:f5:d3:01:4a:63:e9:fb:0b:84:e0:
19:fc:9f:ec:59:9f:de:f4:69:26:a3:72:6a:99:be:2b:2e:ec:
07:42:ce:55:bf:df:12:08:32:9a:8f:6a:08:f1:9e:1c:0f:83:
8d:c0:46:63:98:60:5b:86:82:5a:49:f1:51:77:9a:27:ae:db:
f6:d1:d0:94:05:b8:29:6f:29:57:05:04:e2:2c:c5:b7:aa:6d:
9e:3a:5f:08:11:1f:04:62:fc:cd:99:65:b0:e3:e6:b3:eb:01:
9b:39:7b:a0:70:61:27:6a:ee:61:a2:9d:bb:4a:e6:81:2c:be:
b8:57:59:24:5e:79:6d:39:f2:59:23:3c:24:4f:68:fe:b2:d5:
92:bd:a9:e0:d1:f8:e4:9d:3b:eb:2a:f2:3c:02:17:8b:82:a6:
f5:26:47:62:47:d8:80:40:c8:d8:08:4f:3d:a8:2b:81:1e:bd:
74:d5:11:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:55:45 2026 by rpki-client