Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.mft
File: IJ-vk1JLuAd0_86TQfSVqPsxjxA.mft (raw, json)
Hash identifier: wTHP5sjsHjIYZeHSnwyMAlyD/xZ0rR5MLGYLT1k4Mn0=
Subject key identifier: 2D:E7:06:00:79:08:05:39:C5:63:22:6C:60:1B:AE:7D:6B:94:CF:1A
Authority key identifier: 20:9F:AF:93:52:4B:B8:07:74:FF:CE:93:41:F4:95:A8:FB:31:8F:10
Certificate issuer: /CN=209faf93524bb80774ffce9341f495a8fb318f10
Certificate serial: 01A0C77CEAC20DAC16965A123681AAA0EB65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJ-vk1JLuAd0_86TQfSVqPsxjxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.mft
Manifest number: 0451
Signing time: Tue 22 Sep 2026 05:00:47 +0000
Manifest this update: Tue 22 Sep 2026 05:00:47 +0000
Manifest next update: Wed 23 Sep 2026 05:00:47 +0000
Files and hashes: 1: IJ-vk1JLuAd0_86TQfSVqPsxjxA.crl (hash: R4jcJ0tEV6kUA6m22/NExjKst0HRwMEFVSd921ZSd4c=)
2: ZoxHWr59OftqgFBaS0g_ihcCxHI.roa (hash: WqLRsE9et1dy1xG/u+4z6Ef9e0vz4XBOuKvh8sShkIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IJ-vk1JLuAd0_86TQfSVqPsxjxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:7c:ea:c2:0d:ac:16:96:5a:12:36:81:aa:a0:eb:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=209faf93524bb80774ffce9341f495a8fb318f10
Validity
Not Before: Sep 22 05:00:47 2026 GMT
Not After : Sep 23 05:00:47 2026 GMT
Subject: CN=2de7060079080539c563226c601bae7d6b94cf1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:15:5d:fb:cb:14:0d:99:d4:1b:86:85:97:3a:
2b:5f:c1:ae:6b:a0:c4:40:e7:d6:bb:66:bd:e4:22:
96:49:74:ae:3f:66:f2:39:43:d2:c4:8e:6d:75:c1:
9d:37:31:27:64:0f:59:e2:ed:b8:bc:3c:d0:fa:b5:
43:b0:bd:1d:63:c0:a2:da:51:38:51:b1:6d:37:8d:
3b:4c:60:34:2a:f2:02:9e:b0:f0:1d:d5:40:17:7d:
22:ca:f8:31:27:eb:d4:98:e9:7d:09:0a:74:0f:c9:
a5:9e:50:2d:84:18:46:12:82:8a:c1:36:92:4e:65:
87:ac:be:27:d7:bc:62:07:56:f4:93:e0:c3:f1:5c:
ff:07:5e:da:53:d6:7a:11:a2:53:f8:1a:4d:51:28:
6e:1c:82:be:e5:fb:93:c9:81:36:ee:66:73:cc:4b:
e7:13:43:0b:d8:52:fd:28:64:c8:87:f7:ee:ed:e6:
3e:11:c0:0c:77:69:74:0a:0b:00:a5:f6:12:f0:db:
cd:db:e0:52:1f:90:0b:03:32:51:8e:cb:e8:a2:51:
e9:39:e9:2b:47:c3:6d:b2:e8:c3:a3:3a:93:d2:d6:
fd:ae:f9:9b:37:c6:ef:a5:f9:94:15:f3:58:10:d3:
31:2e:b2:db:16:c8:71:a9:f4:32:bf:d2:64:65:90:
13:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:E7:06:00:79:08:05:39:C5:63:22:6C:60:1B:AE:7D:6B:94:CF:1A
X509v3 Authority Key Identifier:
keyid:20:9F:AF:93:52:4B:B8:07:74:FF:CE:93:41:F4:95:A8:FB:31:8F:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJ-vk1JLuAd0_86TQfSVqPsxjxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:a0:6e:e5:83:9f:88:8f:05:79:90:16:b6:89:f8:cf:de:60:
fb:c4:85:72:2a:1e:c2:e7:37:91:bb:e1:f0:e9:c3:86:c7:a3:
44:2f:84:34:50:5d:7c:ad:38:0c:5c:7d:5e:f2:10:26:1f:8e:
7a:e2:3c:79:56:ae:32:39:a5:c6:2f:a7:fc:6e:be:3c:aa:2b:
89:15:a3:68:95:ab:51:a8:22:dc:62:d7:24:06:bd:5f:ac:c9:
19:f8:3e:42:71:69:f3:93:e4:ce:72:c7:6b:fd:aa:bb:71:59:
75:8a:8e:1c:07:fe:a7:b6:a9:9b:3a:87:7c:eb:b0:21:a1:85:
19:f2:ca:9f:4c:53:aa:0a:76:c8:2b:00:ce:65:c0:4d:15:72:
77:bb:f8:36:3f:f1:01:84:56:c5:22:56:91:16:4f:a7:d8:e1:
37:a1:ee:71:d6:b6:32:2f:66:8d:6b:b8:2e:d6:d6:86:a3:88:
2b:dc:46:32:96:c4:0b:21:6a:59:c3:fd:c7:94:31:5d:45:4c:
6a:f1:ba:19:78:f7:61:88:52:5a:80:6f:7d:65:be:20:2f:90:
11:d6:23:f4:6a:5f:9c:c7:f1:86:4e:e5:37:de:fe:ea:1c:7a:
73:0b:45:09:35:9a:55:48:a8:5f:13:c5:93:a5:8f:93:2e:8b:
33:92:47:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:58:33 2026 by rpki-client