Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/f39a49-59ea-4c4f-98fc-53aab42f476e/1/ij_gucYwoz4XGgpceT80C0NEaTI.mft
File: ij_gucYwoz4XGgpceT80C0NEaTI.mft (raw, json)
Hash identifier: 9KNwQLpW5zpsooOZIv//aQH01vu1pbup+WwMgK2gf7w=
Subject key identifier: D2:44:FC:ED:5D:37:69:04:DE:FE:65:B3:F2:AC:CE:33:50:42:60:39
Authority key identifier: 8A:3F:E0:B9:C6:30:A3:3E:17:1A:0A:5C:79:3F:34:0B:43:44:69:32
Certificate issuer: /CN=8a3fe0b9c630a33e171a0a5c793f340b43446932
Certificate serial: 01A0CB59525B493F20503EF2B527B8D80931
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ij_gucYwoz4XGgpceT80C0NEaTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/f39a49-59ea-4c4f-98fc-53aab42f476e/1/ij_gucYwoz4XGgpceT80C0NEaTI.mft
Manifest number: 1A45
Signing time: Tue 22 Sep 2026 23:00:23 +0000
Manifest this update: Tue 22 Sep 2026 23:00:23 +0000
Manifest next update: Wed 23 Sep 2026 23:00:23 +0000
Files and hashes: 1: J_DoxZa70H67ENOsS_n1eDhcFAQ.roa (hash: tQiviNr92MhgXPhEqL1Y9uwZ4I5NyRoLEZEg6GFbSR0=)
2: ij_gucYwoz4XGgpceT80C0NEaTI.crl (hash: uvRrSmAnn9tVVIkk/gTlVtJXlsC5iBWJAClF5dXZ3RA=)
3: uWfFwS9q_sRjpANNa-JaK4UEmWc.asa (hash: nQ9YKsuw+nwcF+MWLYDHOUM/N4l8CUXGJztg2lw+NgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/f39a49-59ea-4c4f-98fc-53aab42f476e/1/ij_gucYwoz4XGgpceT80C0NEaTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/f39a49-59ea-4c4f-98fc-53aab42f476e/1/ij_gucYwoz4XGgpceT80C0NEaTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ij_gucYwoz4XGgpceT80C0NEaTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:59:52:5b:49:3f:20:50:3e:f2:b5:27:b8:d8:09:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a3fe0b9c630a33e171a0a5c793f340b43446932
Validity
Not Before: Sep 22 23:00:23 2026 GMT
Not After : Sep 23 23:00:23 2026 GMT
Subject: CN=d244fced5d376904defe65b3f2acce3350426039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3a:70:04:1f:c6:4a:24:9d:aa:1b:47:fa:17:
f2:1d:77:fc:3d:d4:5e:e0:fd:8e:bd:a3:46:4a:ac:
9e:ea:21:b9:b8:c9:bd:a2:0b:a6:a1:52:65:6b:4d:
24:21:ac:02:5a:12:24:81:91:61:66:37:8f:7e:06:
6e:94:42:6a:90:a9:cd:87:25:ce:0b:85:a0:c0:41:
23:ba:bb:c9:d5:d3:96:12:e9:bf:d1:e8:c6:c9:a8:
c0:6f:0a:08:74:7b:5c:83:39:59:79:aa:3b:55:06:
1c:92:10:eb:6d:12:1c:75:6e:f0:4f:58:42:f6:10:
f5:52:66:89:9e:94:03:0a:d8:53:79:3c:66:79:f4:
1e:ea:04:21:8c:f3:bd:0e:3e:65:8a:c9:83:ff:5e:
d7:00:a1:c5:bc:b6:28:1f:32:88:0a:a9:73:02:7b:
35:44:2f:2e:23:3b:6a:d6:5f:74:bc:52:be:d7:4b:
93:ec:2c:13:8b:15:83:f3:83:f8:87:f2:aa:68:df:
04:6a:f6:c0:a8:f2:8e:fb:d5:fb:8c:e2:bf:16:f5:
0d:18:95:eb:16:a5:2c:0b:13:5f:f3:ce:65:c5:8b:
1d:34:aa:99:d7:69:d4:6c:1c:2c:d7:5b:71:1c:11:
2e:2c:ea:22:ff:18:c7:c4:31:7d:a7:b9:29:df:19:
42:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:44:FC:ED:5D:37:69:04:DE:FE:65:B3:F2:AC:CE:33:50:42:60:39
X509v3 Authority Key Identifier:
keyid:8A:3F:E0:B9:C6:30:A3:3E:17:1A:0A:5C:79:3F:34:0B:43:44:69:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ij_gucYwoz4XGgpceT80C0NEaTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/f39a49-59ea-4c4f-98fc-53aab42f476e/1/ij_gucYwoz4XGgpceT80C0NEaTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/f39a49-59ea-4c4f-98fc-53aab42f476e/1/ij_gucYwoz4XGgpceT80C0NEaTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:58:20:ff:84:33:2e:3b:69:79:9f:04:d8:79:aa:3b:42:fb:
85:c3:fc:61:3d:4e:52:29:85:87:ae:7d:a1:d7:d8:b1:d6:27:
b0:1a:8a:26:eb:1e:ac:3c:fc:3e:64:4e:0d:8e:1a:77:ce:87:
66:2f:af:72:c9:90:16:cf:1f:0c:ef:db:d8:5c:7f:64:06:25:
ab:ca:47:c4:a3:78:51:53:a6:fa:fb:35:b2:11:7b:25:cb:a5:
1b:ec:fa:c5:5c:21:44:3a:ea:a5:4e:1e:c7:ce:37:8f:2e:f4:
4e:7d:46:a7:cd:e1:e0:96:4a:9c:57:bc:0c:6f:67:93:3d:3b:
1d:8e:57:c6:82:64:5c:cb:a2:a4:79:9f:03:0c:27:94:d6:fb:
fd:cf:a8:2d:eb:08:0e:ed:61:d2:b1:61:29:d2:da:f2:c2:e0:
79:1c:ea:ea:3b:5a:35:b2:11:f2:f7:99:28:6b:e5:c6:bd:58:
9e:66:99:7a:91:43:75:2c:22:41:75:7a:f3:d5:43:0f:78:8c:
b1:68:19:b2:46:02:13:05:cf:2f:04:c1:16:b0:33:81:14:0d:
72:da:ca:db:60:8e:93:2f:51:07:39:b8:13:96:7d:76:4d:c9:
73:71:b1:bb:b0:00:56:8f:69:12:61:4f:98:52:88:e0:26:ff:
ab:bf:b2:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:42:31 2026 by rpki-client