Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.mft
File: iCGjmu2dpO46tmOdJEUI-h6NIPY.mft (raw, json)
Hash identifier: kpwXp/BxLC+zaW54MHO57AkPLAwWACdIdTiBC02uN7I=
Subject key identifier: 22:72:AF:BC:DB:12:94:34:EC:16:E5:2A:80:DC:05:9D:93:96:CD:9D
Authority key identifier: 88:21:A3:9A:ED:9D:A4:EE:3A:B6:63:9D:24:45:08:FA:1E:8D:20:F6
Certificate issuer: /CN=8821a39aed9da4ee3ab6639d244508fa1e8d20f6
Certificate serial: 019CB881CC51D85339272766C8161469FCB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iCGjmu2dpO46tmOdJEUI-h6NIPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.mft
Manifest number: 1570
Signing time: Wed 04 Mar 2026 11:00:40 +0000
Manifest this update: Wed 04 Mar 2026 11:00:40 +0000
Manifest next update: Thu 05 Mar 2026 11:00:40 +0000
Files and hashes: 1: DoG1nIvAyF6Ofk7B7oBXD9fCbWY.roa (hash: 9biYSv6POYCwfleLHgkM4hjjkLE1P6h07qcPCt2vZ8Q=)
2: Ku186Y-Tu0woDCZbFinpqq7ZdFE.roa (hash: v4Tz8TXIdty6/ZjbJ1ivX2W0EU7wX33Cwf/C7mVCK74=)
3: _yFrTYVVOzem6SAvOPOzP_wE_MM.roa (hash: 5prdT05UIi7fhKfl8B0EiaHRzoodJuHLB7r7onONbos=)
4: iCGjmu2dpO46tmOdJEUI-h6NIPY.crl (hash: gSVfCMeuuLmFCnxN258rhYZmD/EyoC3qLRPYTaaCURA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iCGjmu2dpO46tmOdJEUI-h6NIPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 11:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b8:81:cc:51:d8:53:39:27:27:66:c8:16:14:69:fc:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8821a39aed9da4ee3ab6639d244508fa1e8d20f6
Validity
Not Before: Mar 4 11:00:40 2026 GMT
Not After : Mar 5 11:00:40 2026 GMT
Subject: CN=2272afbcdb129434ec16e52a80dc059d9396cd9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:37:d0:0c:a5:da:41:b1:9f:16:ce:d2:d8:0a:
0e:04:24:eb:9c:cc:5f:a8:ef:4d:10:12:5f:8d:d2:
47:67:a6:13:71:f1:7d:d2:04:c8:3f:5a:de:ca:97:
da:56:6d:dc:87:20:7f:0e:84:6e:20:3e:39:a8:6b:
b7:36:b6:51:c3:3e:35:4a:ab:a2:7b:bb:d7:30:4f:
ca:a1:32:d4:07:47:24:3a:17:86:dc:c0:e9:b8:45:
85:1f:ea:3f:3c:82:50:2d:fd:87:27:26:a2:dc:64:
79:f8:ac:39:7c:83:84:f3:7f:65:27:fe:76:6a:85:
f2:d5:17:b5:96:d4:bf:f6:c1:85:75:a7:55:24:a9:
0c:07:23:d6:b9:e2:32:bd:5c:24:54:fb:9a:fa:03:
09:80:71:fc:25:a1:ec:15:9a:b7:a0:84:de:d0:ad:
81:d5:06:06:71:74:91:35:f3:23:e2:d9:c6:9c:48:
43:d2:a9:52:51:be:4a:55:36:45:a8:85:4b:38:90:
f9:97:1a:c4:33:9e:c4:12:54:63:4e:d6:ef:c2:e9:
1c:e9:39:24:48:42:2c:48:4e:f1:c9:46:38:c3:49:
61:ee:94:81:bb:01:16:ad:18:6d:e7:2d:3f:aa:a7:
26:e9:74:eb:18:8f:1b:c7:23:c1:da:fd:28:e0:7d:
77:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:72:AF:BC:DB:12:94:34:EC:16:E5:2A:80:DC:05:9D:93:96:CD:9D
X509v3 Authority Key Identifier:
keyid:88:21:A3:9A:ED:9D:A4:EE:3A:B6:63:9D:24:45:08:FA:1E:8D:20:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iCGjmu2dpO46tmOdJEUI-h6NIPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:5d:a7:1a:eb:df:8f:3f:19:60:8b:2c:c9:7e:1e:86:7e:a3:
19:42:5b:31:a3:08:d9:05:19:ad:45:3d:2e:6d:7a:3b:05:19:
d9:64:98:78:bb:ed:ac:f1:61:58:1a:64:e2:6c:1b:20:6b:c0:
94:8a:8c:58:88:d5:f9:0d:81:42:b3:e1:fe:34:ba:33:82:82:
08:9b:ba:c4:c8:12:58:56:8b:36:f4:f9:20:05:d9:78:59:a9:
2d:31:e4:52:90:7e:73:37:54:23:2e:d9:26:2a:ac:fd:df:ee:
df:d1:3f:ec:7a:51:8c:20:a2:bc:fa:21:d0:19:21:36:55:e2:
5b:71:9a:68:ff:15:f1:5d:c3:3c:b9:1f:28:45:95:53:20:99:
29:4d:f9:ba:6a:27:b6:2d:27:25:3d:de:c4:24:9d:34:ca:74:
14:43:b1:12:f1:87:e1:2f:52:29:74:e4:e8:7e:50:c0:fd:63:
0f:0c:04:97:e7:0f:63:ff:8d:93:2c:fc:19:9a:44:1a:55:0b:
98:19:31:11:af:cf:c5:c9:13:0f:4a:d0:cb:74:90:1a:a0:06:
3c:50:58:16:df:d3:2d:05:94:54:f8:e6:fc:4a:69:4f:fd:cb:
b3:d2:ab:bc:9e:96:9c:fa:a9:52:00:ad:58:b0:9b:6c:0e:55:
30:be:41:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 20:57:16 2026 by rpki-client