Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/f39a49-59ea-4c4f-98fc-53aab42f476e/1/ij_gucYwoz4XGgpceT80C0NEaTI.mft
File: ij_gucYwoz4XGgpceT80C0NEaTI.mft (raw, json)
Hash identifier: YWsUxJVrxYrJYpdE5UMkUccyxAqLNT9X6g9ysSSG2xA=
Subject key identifier: 3B:E7:1F:B3:E0:80:24:B5:48:21:BE:A7:C4:0B:E9:7F:79:37:8D:09
Authority key identifier: 8A:3F:E0:B9:C6:30:A3:3E:17:1A:0A:5C:79:3F:34:0B:43:44:69:32
Certificate issuer: /CN=8a3fe0b9c630a33e171a0a5c793f340b43446932
Certificate serial: 019F8EA28B31932D92D29B3A5504822E3619
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ij_gucYwoz4XGgpceT80C0NEaTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/f39a49-59ea-4c4f-98fc-53aab42f476e/1/ij_gucYwoz4XGgpceT80C0NEaTI.mft
Manifest number: 19A1
Signing time: Thu 23 Jul 2026 11:00:44 +0000
Manifest this update: Thu 23 Jul 2026 11:00:44 +0000
Manifest next update: Fri 24 Jul 2026 11:00:44 +0000
Files and hashes: 1: J_DoxZa70H67ENOsS_n1eDhcFAQ.roa (hash: tQiviNr92MhgXPhEqL1Y9uwZ4I5NyRoLEZEg6GFbSR0=)
2: ij_gucYwoz4XGgpceT80C0NEaTI.crl (hash: 00ygqXYC/QMulRUKVwAKgRfcv01Uq3+mCK4yUp3m8NI=)
3: uWfFwS9q_sRjpANNa-JaK4UEmWc.asa (hash: nQ9YKsuw+nwcF+MWLYDHOUM/N4l8CUXGJztg2lw+NgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/f39a49-59ea-4c4f-98fc-53aab42f476e/1/ij_gucYwoz4XGgpceT80C0NEaTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/f39a49-59ea-4c4f-98fc-53aab42f476e/1/ij_gucYwoz4XGgpceT80C0NEaTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ij_gucYwoz4XGgpceT80C0NEaTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:8b:31:93:2d:92:d2:9b:3a:55:04:82:2e:36:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a3fe0b9c630a33e171a0a5c793f340b43446932
Validity
Not Before: Jul 23 11:00:44 2026 GMT
Not After : Jul 24 11:00:44 2026 GMT
Subject: CN=3be71fb3e08024b54821bea7c40be97f79378d09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ad:88:a0:ea:df:8d:52:3c:7f:b2:dd:83:53:
09:94:ec:ac:ff:be:e4:85:58:3e:23:cf:f3:06:f4:
c1:b3:2d:31:a6:13:d6:2d:7f:91:e9:4c:c7:94:17:
98:75:f7:2d:b9:8f:fd:7c:e0:b1:fb:68:e1:c6:42:
ff:59:bc:1c:8f:71:c2:5b:12:11:90:9b:3a:b5:dd:
03:3b:9d:2e:9f:5b:a9:d4:05:4f:3f:c9:c1:7c:9a:
0d:04:ea:2a:52:1d:f1:34:42:6e:03:66:2b:dc:0a:
c2:98:e9:f2:0b:7b:e9:3f:7e:9e:6f:41:3b:de:2f:
98:70:5a:e8:45:eb:4c:24:82:f9:a0:69:36:e1:1f:
3f:b6:48:5e:c3:4e:e2:e0:69:5b:c6:15:e1:f9:17:
8f:c2:8f:cf:4b:96:5d:ca:14:03:31:6c:b3:8d:fb:
04:65:53:5b:9b:24:2a:1c:d2:91:26:52:97:5f:25:
53:5f:b7:1f:af:2d:3e:2c:14:01:03:09:2b:0c:0b:
9c:af:46:72:39:be:fe:27:fc:40:4a:f8:25:09:8f:
cf:f4:01:38:c0:5d:94:de:a7:e7:f4:e0:da:21:50:
64:a0:f3:69:2d:31:36:db:fe:73:3c:fa:05:31:c5:
7d:e4:71:53:89:df:cc:56:85:e4:1c:2a:bb:12:c3:
c0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:E7:1F:B3:E0:80:24:B5:48:21:BE:A7:C4:0B:E9:7F:79:37:8D:09
X509v3 Authority Key Identifier:
keyid:8A:3F:E0:B9:C6:30:A3:3E:17:1A:0A:5C:79:3F:34:0B:43:44:69:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ij_gucYwoz4XGgpceT80C0NEaTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/f39a49-59ea-4c4f-98fc-53aab42f476e/1/ij_gucYwoz4XGgpceT80C0NEaTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/f39a49-59ea-4c4f-98fc-53aab42f476e/1/ij_gucYwoz4XGgpceT80C0NEaTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:28:b3:1b:a2:29:e4:41:96:4f:5a:cb:c9:08:99:ba:61:d1:
c3:c3:95:61:ae:d3:8b:4e:69:0a:a3:81:c5:d2:8c:8c:a4:f9:
cd:be:87:75:e0:15:73:d7:c1:2a:27:ae:dd:bc:c1:94:75:17:
7e:e8:fe:73:be:8e:07:ca:b4:dc:82:7a:ef:c6:9d:0f:92:f5:
db:ce:d7:6e:01:49:61:19:4f:3b:ae:00:5c:05:28:7d:cf:41:
7e:d8:90:59:be:dd:c3:c2:15:f8:50:52:e1:00:ae:d9:5f:c0:
7a:b4:4a:af:cb:7e:f1:0d:a6:c6:a1:b9:94:6c:40:6e:21:ea:
6b:60:d6:69:73:1c:a8:0b:8b:23:62:de:28:a7:19:38:ce:ad:
28:db:57:c1:a6:6f:dc:9e:57:41:75:e5:2b:b6:43:25:7b:be:
81:00:48:a2:e2:51:65:3d:52:20:f4:f0:03:cb:b1:ad:64:db:
79:72:76:3a:0b:1c:fb:d3:e1:d8:e3:9f:8f:21:6c:a5:26:d5:
d7:ed:91:15:f4:84:64:d4:fd:03:33:50:f7:b3:aa:aa:4c:38:
a2:7e:dd:79:66:e9:26:26:0b:1f:70:9b:6d:4d:56:0d:97:29:
c8:3d:77:88:b0:96:eb:89:a3:e5:4d:fd:23:f4:6b:79:9d:f4:
d6:4b:e6:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:06:34 2026 by rpki-client