Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/f39a49-59ea-4c4f-98fc-53aab42f476e/1/ij_gucYwoz4XGgpceT80C0NEaTI.mft
File: ij_gucYwoz4XGgpceT80C0NEaTI.mft (raw, json)
Hash identifier: 5QIS2MZ0okaqYqqA1muXyPTEfaXxQNVX5sER8BGQY+M=
Subject key identifier: CE:64:29:86:BF:02:61:73:F0:33:74:96:70:21:0C:02:1A:5E:9A:D1
Authority key identifier: 8A:3F:E0:B9:C6:30:A3:3E:17:1A:0A:5C:79:3F:34:0B:43:44:69:32
Certificate issuer: /CN=8a3fe0b9c630a33e171a0a5c793f340b43446932
Certificate serial: 01A0CF3664BFF90ABD5FB2F031FDA87258AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ij_gucYwoz4XGgpceT80C0NEaTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/f39a49-59ea-4c4f-98fc-53aab42f476e/1/ij_gucYwoz4XGgpceT80C0NEaTI.mft
Manifest number: 1A47
Signing time: Wed 23 Sep 2026 17:00:43 +0000
Manifest this update: Wed 23 Sep 2026 17:00:43 +0000
Manifest next update: Thu 24 Sep 2026 17:00:43 +0000
Files and hashes: 1: J_DoxZa70H67ENOsS_n1eDhcFAQ.roa (hash: tQiviNr92MhgXPhEqL1Y9uwZ4I5NyRoLEZEg6GFbSR0=)
2: ij_gucYwoz4XGgpceT80C0NEaTI.crl (hash: HiJ9moAwWwJLbJn6uWw9HtudhXUFOZY7Atq/s0x9SKA=)
3: uWfFwS9q_sRjpANNa-JaK4UEmWc.asa (hash: nQ9YKsuw+nwcF+MWLYDHOUM/N4l8CUXGJztg2lw+NgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/f39a49-59ea-4c4f-98fc-53aab42f476e/1/ij_gucYwoz4XGgpceT80C0NEaTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/f39a49-59ea-4c4f-98fc-53aab42f476e/1/ij_gucYwoz4XGgpceT80C0NEaTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ij_gucYwoz4XGgpceT80C0NEaTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:36:64:bf:f9:0a:bd:5f:b2:f0:31:fd:a8:72:58:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a3fe0b9c630a33e171a0a5c793f340b43446932
Validity
Not Before: Sep 23 17:00:43 2026 GMT
Not After : Sep 24 17:00:43 2026 GMT
Subject: CN=ce642986bf026173f033749670210c021a5e9ad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c4:a3:40:91:c2:79:bb:6f:69:72:71:d2:10:
a1:60:82:da:70:2c:e3:c9:cb:95:c1:6f:4e:57:f8:
91:a7:92:09:58:fa:1e:f8:32:37:c4:8b:79:d4:0e:
0a:4b:db:70:6f:d1:82:c2:7c:07:9b:00:0e:6e:50:
5d:f8:3f:be:37:ee:79:f6:74:f8:73:36:ff:d0:9c:
f1:a3:86:22:ef:84:a4:07:2c:4c:06:81:34:a3:92:
1b:67:d6:61:1f:fe:34:ba:ad:91:bb:b4:5f:c6:b5:
92:2d:8e:ea:58:c5:5e:a2:6f:40:b1:d5:60:cd:cb:
3c:cb:04:69:ef:a7:ed:c3:03:41:14:dc:a7:18:7b:
92:61:69:df:0d:ef:7a:fa:d1:a1:7d:84:32:57:6e:
58:f9:2c:91:f3:95:ee:be:62:83:65:ff:11:e9:48:
6a:7d:68:0e:eb:6b:8f:a4:69:56:58:6b:e8:9f:de:
80:14:ee:16:0c:76:35:98:e8:e5:6e:ad:34:7e:86:
03:e2:f0:cb:4f:3d:f1:87:3e:2e:67:09:17:4d:cd:
43:0c:33:42:1b:34:3f:7c:c3:82:81:7d:cd:15:98:
20:e7:a8:81:63:84:0b:bc:fc:b9:a7:89:8f:11:c8:
6d:fc:64:99:da:80:8f:60:d2:6c:4c:11:62:43:c6:
c5:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:64:29:86:BF:02:61:73:F0:33:74:96:70:21:0C:02:1A:5E:9A:D1
X509v3 Authority Key Identifier:
keyid:8A:3F:E0:B9:C6:30:A3:3E:17:1A:0A:5C:79:3F:34:0B:43:44:69:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ij_gucYwoz4XGgpceT80C0NEaTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/f39a49-59ea-4c4f-98fc-53aab42f476e/1/ij_gucYwoz4XGgpceT80C0NEaTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/f39a49-59ea-4c4f-98fc-53aab42f476e/1/ij_gucYwoz4XGgpceT80C0NEaTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:65:c2:d6:47:40:19:d5:82:6b:8f:c3:da:92:74:e9:3a:34:
ed:e3:72:49:b4:06:ea:67:c3:b9:3d:a1:0f:b9:44:80:dc:71:
35:89:3d:18:6d:78:67:30:28:5a:72:27:c1:37:64:2e:35:89:
0f:0a:80:57:8d:03:1c:22:d6:1f:db:75:3f:f0:da:b2:39:17:
79:6a:37:e4:e4:56:b7:31:8c:95:46:52:21:5b:fb:c0:d2:93:
71:f2:12:dc:6b:4e:b5:98:1d:9a:90:fa:cf:99:c4:61:b6:35:
20:b3:cb:83:0c:ca:a4:5c:30:00:76:99:e0:55:3d:a1:31:36:
ab:bb:b5:b1:82:30:56:74:5d:6a:6e:f7:ba:36:13:32:7a:65:
d9:66:67:49:e0:72:26:ab:84:1b:91:b2:00:0a:84:f9:b8:a8:
c2:59:25:e9:26:65:12:76:ba:93:da:27:74:22:8a:92:39:58:
5b:7b:86:b3:d7:3c:b0:bb:01:0c:09:a9:4a:d6:75:b8:a8:25:
67:94:dd:86:4e:2a:59:a1:21:73:41:04:53:3d:a5:86:ef:5f:
56:b5:f9:6f:15:8e:31:1f:76:07:bd:08:e4:f9:e7:bd:0d:9c:
ad:e9:c6:da:5a:f8:34:70:64:41:c8:a7:34:c1:ef:d6:8c:54:
cf:93:c1:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDPNmS/+Qq9X7LwMf2oclirMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhM2ZlMGI5YzYzMGEzM2UxNzFhMGE1Yzc5M2YzNDBiNDM0
NDY5MzIwHhcNMjYwOTIzMTcwMDQzWhcNMjYwOTI0MTcwMDQzWjAzMTEwLwYDVQQD
EyhjZTY0Mjk4NmJmMDI2MTczZjAzMzc0OTY3MDIxMGMwMjFhNWU5YWQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28SjQJHCebtvaXJx0hChYILacCzj
ycuVwW9OV/iRp5IJWPoe+DI3xIt51A4KS9twb9GCwnwHmwAOblBd+D++N+559nT4
czb/0Jzxo4Yi74SkByxMBoE0o5IbZ9ZhH/40uq2Ru7RfxrWSLY7qWMVeom9AsdVg
zcs8ywRp76ftwwNBFNynGHuSYWnfDe96+tGhfYQyV25Y+SyR85XuvmKDZf8R6Uhq
fWgO62uPpGlWWGvon96AFO4WDHY1mOjlbq00foYD4vDLTz3xhz4uZwkXTc1DDDNC
GzQ/fMOCgX3NFZgg56iBY4QLvPy5p4mPEcht/GSZ2oCPYNJsTBFiQ8bFbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM5kKYa/AmFz8DN0lnAhDAIaXprRMB8GA1UdIwQY
MBaAFIo/4LnGMKM+FxoKXHk/NAtDRGkyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWpfZ3VjWXdvejRYR2dwY2VUODBDME5FYVRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9mMzlhNDktNTllYS00YzRmLTk4ZmMt
NTNhYWI0MmY0NzZlLzEvaWpfZ3VjWXdvejRYR2dwY2VUODBDME5FYVRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi9mMzlhNDktNTllYS00YzRmLTk4ZmMtNTNhYWI0MmY0NzZl
LzEvaWpfZ3VjWXdvejRYR2dwY2VUODBDME5FYVRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAumXC1kdA
GdWCa4/D2pJ06To07eNySbQG6mfDuT2hD7lEgNxxNYk9GG14ZzAoWnInwTdkLjWJ
DwqAV40DHCLWH9t1P/DasjkXeWo35ORWtzGMlUZSIVv7wNKTcfIS3GtOtZgdmpD6
z5nEYbY1ILPLgwzKpFwwAHaZ4FU9oTE2q7u1sYIwVnRdam73ujYTMnpl2WZnSeBy
JquEG5GyAAqE+biowlkl6SZlEna6k9ondCKKkjlYW3uGs9c8sLsBDAmpStZ1uKgl
Z5Tdhk4qWaEhc0EEUz2lhu9fVrX5bxWOMR92B70I5PnnvQ2crenG2lr4NHBkQcin
NMHv1oxUz5PBwQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 23:14:32 2026 by rpki-client