Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/f39a49-59ea-4c4f-98fc-53aab42f476e/1/ij_gucYwoz4XGgpceT80C0NEaTI.mft
File: ij_gucYwoz4XGgpceT80C0NEaTI.mft (raw, json)
Hash identifier: aqC6r7XKkNZ6981EoVYoVC0SDn+FlKP+81OJ+bcjHUA=
Subject key identifier: 02:1A:26:88:94:83:4A:8B:96:B6:BD:26:38:E1:B8:15:4F:23:18:C1
Authority key identifier: 8A:3F:E0:B9:C6:30:A3:3E:17:1A:0A:5C:79:3F:34:0B:43:44:69:32
Certificate issuer: /CN=8a3fe0b9c630a33e171a0a5c793f340b43446932
Certificate serial: 01A0C1B200A92AF32D61CFB630010C7AFAB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ij_gucYwoz4XGgpceT80C0NEaTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/f39a49-59ea-4c4f-98fc-53aab42f476e/1/ij_gucYwoz4XGgpceT80C0NEaTI.mft
Manifest number: 1A40
Signing time: Mon 21 Sep 2026 02:01:03 +0000
Manifest this update: Mon 21 Sep 2026 02:01:03 +0000
Manifest next update: Tue 22 Sep 2026 02:01:03 +0000
Files and hashes: 1: J_DoxZa70H67ENOsS_n1eDhcFAQ.roa (hash: tQiviNr92MhgXPhEqL1Y9uwZ4I5NyRoLEZEg6GFbSR0=)
2: ij_gucYwoz4XGgpceT80C0NEaTI.crl (hash: oYGyGVMRD4FOJmiqy3U3W1OLeDVRATVORUqj5Tp0ENU=)
3: uWfFwS9q_sRjpANNa-JaK4UEmWc.asa (hash: nQ9YKsuw+nwcF+MWLYDHOUM/N4l8CUXGJztg2lw+NgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/f39a49-59ea-4c4f-98fc-53aab42f476e/1/ij_gucYwoz4XGgpceT80C0NEaTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/f39a49-59ea-4c4f-98fc-53aab42f476e/1/ij_gucYwoz4XGgpceT80C0NEaTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ij_gucYwoz4XGgpceT80C0NEaTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 02:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:b2:00:a9:2a:f3:2d:61:cf:b6:30:01:0c:7a:fa:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a3fe0b9c630a33e171a0a5c793f340b43446932
Validity
Not Before: Sep 21 02:01:03 2026 GMT
Not After : Sep 22 02:01:03 2026 GMT
Subject: CN=021a268894834a8b96b6bd2638e1b8154f2318c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f3:f9:3b:5b:cc:66:19:a5:bd:77:0e:53:6a:
fd:7d:08:46:99:c1:e2:27:60:95:25:30:a9:5a:d3:
3e:76:3d:65:64:2d:a2:b0:f6:e0:2a:f5:79:e4:ad:
30:b0:51:0c:4d:b4:79:05:14:74:e9:f7:41:9b:66:
bb:4e:b5:d7:a3:24:17:46:fc:17:e3:29:74:5a:17:
8a:22:c6:5d:06:cb:95:70:e5:bc:51:30:c7:ca:07:
fc:b4:37:1a:03:15:aa:f0:14:17:65:ad:28:9c:cd:
d5:97:75:4e:41:c8:60:86:fa:18:9f:cc:a1:cb:f9:
16:13:ad:d2:69:26:56:cb:24:c6:52:58:69:f7:c2:
da:34:a7:48:f8:45:a1:ec:2e:9f:9d:c4:e3:ef:b6:
59:e8:9f:aa:1c:bb:50:f0:34:c8:b2:29:f6:ff:39:
d7:ad:cd:00:72:0f:57:f1:c1:3f:30:02:06:56:48:
51:d7:7a:98:f2:56:24:2b:2c:40:1b:2f:28:c1:ac:
c2:f3:ee:2f:7c:0e:85:4d:a9:72:2f:c8:4f:9d:f9:
5a:78:24:b9:28:e1:72:47:7c:f6:75:2e:1f:65:f9:
af:5d:c9:39:0f:65:3e:12:04:34:45:e4:16:40:37:
d1:b2:2e:87:cf:b0:11:59:f8:d5:2c:5e:66:47:74:
20:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:1A:26:88:94:83:4A:8B:96:B6:BD:26:38:E1:B8:15:4F:23:18:C1
X509v3 Authority Key Identifier:
keyid:8A:3F:E0:B9:C6:30:A3:3E:17:1A:0A:5C:79:3F:34:0B:43:44:69:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ij_gucYwoz4XGgpceT80C0NEaTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/f39a49-59ea-4c4f-98fc-53aab42f476e/1/ij_gucYwoz4XGgpceT80C0NEaTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/f39a49-59ea-4c4f-98fc-53aab42f476e/1/ij_gucYwoz4XGgpceT80C0NEaTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:f1:1c:c1:25:53:46:b6:c5:34:8f:ba:eb:f7:84:dd:82:7e:
cd:d9:d2:9c:8a:81:97:1b:ca:9c:c1:5a:31:64:37:a0:c9:74:
d7:9b:f5:86:4a:73:fc:b2:27:38:ba:b2:11:92:46:43:c1:14:
e1:bc:d2:f4:41:b8:22:b5:e8:a9:73:80:ec:ac:a4:47:d1:4e:
46:67:7a:25:31:f1:c4:aa:52:36:e6:03:7f:43:79:c7:db:2a:
f2:92:6f:5d:3c:ca:69:4c:85:f0:ae:c6:98:49:9b:95:4c:9f:
df:ae:53:85:30:a0:43:13:9c:e3:d7:8b:8e:43:79:63:31:b3:
74:ca:bb:ef:c0:71:d0:cf:53:9e:b6:26:f0:b0:54:bb:69:00:
5f:0c:50:96:7b:2b:f4:35:e0:33:63:b4:e6:63:45:0c:f3:ab:
fe:05:fc:25:86:9f:38:b6:44:25:80:6f:bf:3d:62:ad:7a:b6:
1f:ee:55:23:d6:25:1d:67:d8:bf:30:4a:e9:0d:8c:50:6b:1b:
12:f0:fb:bc:fd:ed:41:2b:cf:c3:d2:51:4e:d4:d9:ba:33:fc:
8b:81:c1:28:24:1f:1a:74:4c:2a:eb:b5:9d:d2:6e:ff:1d:c7:
c5:ef:77:cd:78:67:c2:1c:b6:81:81:d7:79:5d:25:e6:11:f4:
41:e3:38:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:21:51 2026 by rpki-client