Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/f39a49-59ea-4c4f-98fc-53aab42f476e/1/ij_gucYwoz4XGgpceT80C0NEaTI.mft
File: ij_gucYwoz4XGgpceT80C0NEaTI.mft (raw, json)
Hash identifier: SrumoiD+NR2mzc1EhdaKOuLhnQBoAxzaQkPDWaxVNwc=
Subject key identifier: A6:3F:2B:25:7E:80:93:5D:3F:F4:9D:BE:56:DB:E9:A8:E1:08:00:6E
Authority key identifier: 8A:3F:E0:B9:C6:30:A3:3E:17:1A:0A:5C:79:3F:34:0B:43:44:69:32
Certificate issuer: /CN=8a3fe0b9c630a33e171a0a5c793f340b43446932
Certificate serial: 01A03C71646FDB5E08A4FEC30464E34749DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ij_gucYwoz4XGgpceT80C0NEaTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/f39a49-59ea-4c4f-98fc-53aab42f476e/1/ij_gucYwoz4XGgpceT80C0NEaTI.mft
Manifest number: 19FB
Signing time: Wed 26 Aug 2026 05:00:59 +0000
Manifest this update: Wed 26 Aug 2026 05:00:59 +0000
Manifest next update: Thu 27 Aug 2026 05:00:59 +0000
Files and hashes: 1: J_DoxZa70H67ENOsS_n1eDhcFAQ.roa (hash: tQiviNr92MhgXPhEqL1Y9uwZ4I5NyRoLEZEg6GFbSR0=)
2: ij_gucYwoz4XGgpceT80C0NEaTI.crl (hash: 2dAnxKDYr5aN+QxruVZSeB+Td01EiGQokyJ2xR9MCyY=)
3: uWfFwS9q_sRjpANNa-JaK4UEmWc.asa (hash: nQ9YKsuw+nwcF+MWLYDHOUM/N4l8CUXGJztg2lw+NgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/f39a49-59ea-4c4f-98fc-53aab42f476e/1/ij_gucYwoz4XGgpceT80C0NEaTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/f39a49-59ea-4c4f-98fc-53aab42f476e/1/ij_gucYwoz4XGgpceT80C0NEaTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ij_gucYwoz4XGgpceT80C0NEaTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3c:71:64:6f:db:5e:08:a4:fe:c3:04:64:e3:47:49:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a3fe0b9c630a33e171a0a5c793f340b43446932
Validity
Not Before: Aug 26 05:00:59 2026 GMT
Not After : Aug 27 05:00:59 2026 GMT
Subject: CN=a63f2b257e80935d3ff49dbe56dbe9a8e108006e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d6:23:de:7c:8f:3f:40:65:d9:a6:6c:b0:5c:
c6:79:e2:9b:17:a0:75:b0:f3:54:3f:d9:46:43:3f:
f8:8a:c8:6f:3b:34:bb:60:89:1a:52:92:a4:9c:8c:
8b:27:d2:40:7c:60:91:db:d9:84:27:46:a6:84:7c:
da:e1:57:33:d9:2b:98:0a:c7:46:b8:0b:ff:75:4b:
94:79:dd:e6:cc:17:3c:18:db:e2:6a:b8:6f:57:5d:
97:3c:60:53:81:e4:9e:49:29:e7:80:10:6c:3d:01:
2d:70:7f:7b:8c:3a:e2:4d:66:63:1c:9b:64:cb:00:
49:90:9d:bb:01:87:fb:b7:88:0e:0a:bd:b2:ba:1f:
f3:e2:00:c3:71:1e:94:63:9c:c0:0c:4c:c2:b1:45:
ed:b5:85:1b:7c:b7:5a:dc:c1:fe:ed:9b:8c:54:c3:
a0:14:31:a7:71:86:b1:50:ea:99:ae:db:b4:e4:23:
b7:de:82:1d:53:1d:a7:fb:23:77:d2:f7:59:2f:b8:
17:3d:c6:21:91:d9:1f:41:37:e5:72:b9:c7:b5:8c:
7e:9d:39:d1:f2:da:45:1f:aa:fc:c7:82:39:38:b4:
ae:67:7a:22:e0:f8:57:b7:39:0d:c3:72:e7:b2:57:
25:a2:25:a8:ab:ef:b3:35:c5:b9:b1:05:74:13:99:
b5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:3F:2B:25:7E:80:93:5D:3F:F4:9D:BE:56:DB:E9:A8:E1:08:00:6E
X509v3 Authority Key Identifier:
keyid:8A:3F:E0:B9:C6:30:A3:3E:17:1A:0A:5C:79:3F:34:0B:43:44:69:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ij_gucYwoz4XGgpceT80C0NEaTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/f39a49-59ea-4c4f-98fc-53aab42f476e/1/ij_gucYwoz4XGgpceT80C0NEaTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/f39a49-59ea-4c4f-98fc-53aab42f476e/1/ij_gucYwoz4XGgpceT80C0NEaTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:57:c1:86:a8:76:15:4f:d4:3e:bd:0b:dd:77:56:33:8d:e3:
ab:1a:f7:aa:6c:6d:b8:18:13:8f:1d:42:3f:d7:69:11:67:9e:
80:3b:83:a9:5d:ed:b8:e3:ea:54:29:8c:f7:89:9d:bc:43:25:
b9:87:c5:24:fb:b2:6e:c5:99:d6:cc:c5:19:0c:9e:0a:3e:f2:
6f:88:73:aa:c5:f0:0f:21:3b:10:fa:dc:84:94:45:37:82:0b:
67:3f:05:cd:54:c7:1e:05:44:22:a1:5f:12:aa:ac:fe:e9:a0:
9c:a8:98:e4:fe:45:26:5a:63:c6:83:6d:53:c5:11:96:04:c9:
bd:1e:fa:27:71:07:55:12:7a:2d:27:dc:6b:26:80:c1:81:29:
d0:5a:84:99:49:cc:e5:cd:96:87:9d:08:5b:7c:3c:25:6c:ae:
b8:2f:d9:2b:c5:0c:96:5c:64:70:ad:4a:c6:8e:2f:e9:a2:ce:
b2:08:36:93:eb:de:78:97:eb:c2:f1:4b:19:a5:d7:8a:f9:f1:
aa:46:77:31:36:cc:b9:b1:cc:74:77:53:f9:3e:fb:1a:46:06:
74:b5:4e:69:08:b4:1f:4e:2d:26:04:7e:78:27:44:74:ad:a7:
82:04:8e:68:56:48:34:fd:14:7b:f0:82:8e:9f:1a:ed:9e:a4:
39:11:0f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:06:42 2026 by rpki-client