Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/f39a49-59ea-4c4f-98fc-53aab42f476e/1/ij_gucYwoz4XGgpceT80C0NEaTI.mft
File: ij_gucYwoz4XGgpceT80C0NEaTI.mft (raw, json)
Hash identifier: uNTrLUEaimT90bUcG3b11R6KRgsbw4pYkSBeSaC+b/4=
Subject key identifier: C7:E7:4E:A7:AB:30:52:53:89:10:33:10:FF:C8:EE:51:A5:12:D0:CB
Authority key identifier: 8A:3F:E0:B9:C6:30:A3:3E:17:1A:0A:5C:79:3F:34:0B:43:44:69:32
Certificate issuer: /CN=8a3fe0b9c630a33e171a0a5c793f340b43446932
Certificate serial: 019E1DFE630D0B0EA540DF519FBB84DDF87E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ij_gucYwoz4XGgpceT80C0NEaTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/f39a49-59ea-4c4f-98fc-53aab42f476e/1/ij_gucYwoz4XGgpceT80C0NEaTI.mft
Manifest number: 18E2
Signing time: Tue 12 May 2026 21:01:11 +0000
Manifest this update: Tue 12 May 2026 21:01:11 +0000
Manifest next update: Wed 13 May 2026 21:01:11 +0000
Files and hashes: 1: J_DoxZa70H67ENOsS_n1eDhcFAQ.roa (hash: tQiviNr92MhgXPhEqL1Y9uwZ4I5NyRoLEZEg6GFbSR0=)
2: ij_gucYwoz4XGgpceT80C0NEaTI.crl (hash: isvVWs9wssvYO8k2GJscc33wXTf/BfFN32eNgTprUtE=)
3: uWfFwS9q_sRjpANNa-JaK4UEmWc.asa (hash: nQ9YKsuw+nwcF+MWLYDHOUM/N4l8CUXGJztg2lw+NgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/f39a49-59ea-4c4f-98fc-53aab42f476e/1/ij_gucYwoz4XGgpceT80C0NEaTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/f39a49-59ea-4c4f-98fc-53aab42f476e/1/ij_gucYwoz4XGgpceT80C0NEaTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ij_gucYwoz4XGgpceT80C0NEaTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:63:0d:0b:0e:a5:40:df:51:9f:bb:84:dd:f8:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a3fe0b9c630a33e171a0a5c793f340b43446932
Validity
Not Before: May 12 21:01:11 2026 GMT
Not After : May 13 21:01:11 2026 GMT
Subject: CN=c7e74ea7ab30525389103310ffc8ee51a512d0cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:60:22:4b:42:98:42:f7:cb:7c:ea:1c:d1:65:
3b:3e:b6:25:bb:87:e5:76:17:47:d1:f4:84:4c:ea:
13:3f:7e:b7:de:18:db:80:0b:75:86:15:33:8d:ce:
01:00:25:9d:1f:7a:8a:08:aa:fe:3a:af:9c:af:70:
74:dd:8e:5d:0d:41:15:17:f9:d9:f6:78:fd:bc:e9:
5d:15:76:93:00:3a:93:d5:b9:c4:a9:55:99:a3:c4:
93:e5:60:3c:79:0c:b6:5f:d3:d5:f6:19:80:a4:f3:
ea:a7:65:ec:54:ae:b6:43:72:d8:ed:7e:81:93:5b:
7d:41:6a:b0:b6:dc:e3:46:ad:f8:22:c8:9c:04:c4:
75:df:ae:16:29:85:0f:4a:01:3d:d7:f2:de:fd:e7:
d3:df:6e:19:fd:e2:92:e8:de:c8:9b:79:a8:56:34:
0b:9c:e0:95:86:d7:be:4e:15:47:0c:c9:e2:f3:94:
cf:22:f3:ca:b4:de:eb:19:f6:51:f6:b1:15:a1:8e:
41:11:95:d2:7d:9a:47:34:d0:18:6a:4f:44:f9:91:
f0:c9:64:3e:d0:d9:2f:9b:15:bf:2e:8a:a1:7c:de:
dd:15:cb:10:3f:15:c5:aa:31:54:3b:03:79:4a:f4:
67:5c:b0:70:28:ab:4b:55:6e:e0:6b:ab:9c:97:7f:
bf:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:E7:4E:A7:AB:30:52:53:89:10:33:10:FF:C8:EE:51:A5:12:D0:CB
X509v3 Authority Key Identifier:
keyid:8A:3F:E0:B9:C6:30:A3:3E:17:1A:0A:5C:79:3F:34:0B:43:44:69:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ij_gucYwoz4XGgpceT80C0NEaTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/f39a49-59ea-4c4f-98fc-53aab42f476e/1/ij_gucYwoz4XGgpceT80C0NEaTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/f39a49-59ea-4c4f-98fc-53aab42f476e/1/ij_gucYwoz4XGgpceT80C0NEaTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:a2:51:83:3d:8b:e2:7d:7a:d3:51:a4:9a:aa:e5:eb:c2:f0:
d0:8c:99:97:8d:cb:54:c5:96:fb:7e:13:17:b7:df:4a:01:3c:
71:82:81:48:b5:4a:bd:ff:97:d7:5e:99:89:a3:25:94:1d:28:
e2:ef:3f:6e:da:f3:89:68:bf:9f:1c:7a:08:4e:2d:80:48:94:
88:96:db:19:d0:84:76:5b:8a:4e:50:ce:b1:ec:da:be:5c:a6:
3a:d7:0c:65:61:e1:15:f7:98:2f:0c:e9:24:d2:ea:70:f8:2f:
3d:64:77:25:89:3f:d1:68:17:ac:6f:0d:83:46:4a:fe:13:f7:
d8:88:ab:f5:53:50:c5:63:6f:21:92:76:9a:91:7b:99:49:87:
86:e4:cc:89:a5:12:e0:25:7a:b0:3b:0f:8a:e9:21:01:76:8e:
e6:dc:ce:93:da:60:10:e3:90:34:fc:f5:e2:b7:90:fc:ec:d0:
14:a8:af:97:6f:aa:d3:99:fd:a4:a8:e8:ba:6e:a8:aa:a1:3c:
00:20:33:3c:35:a1:32:80:4d:5a:bf:95:73:db:a6:b9:ae:1c:
ec:a5:64:d6:50:26:8a:8a:68:00:cd:92:f2:2d:95:e0:ca:0e:
9e:5e:b5:5d:d6:72:50:c7:ec:a1:8b:58:4b:91:94:e5:96:e9:
89:02:91:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:29:25 2026 by rpki-client