
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.mft
File: iCGjmu2dpO46tmOdJEUI-h6NIPY.mft (raw, json)
Hash identifier: QZbP4Vm6wLWWYVs7HTlnZDLItdTul21O59ZL87HBYDA=
Subject key identifier: 9A:29:AA:58:EA:F8:74:71:D3:F0:F5:EE:3D:A3:07:B5:48:D4:53:1A
Authority key identifier: 88:21:A3:9A:ED:9D:A4:EE:3A:B6:63:9D:24:45:08:FA:1E:8D:20:F6
Certificate issuer: /CN=8821a39aed9da4ee3ab6639d244508fa1e8d20f6
Certificate serial: 019EE0D487A6A3E32D2A4792E0F8792C970E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iCGjmu2dpO46tmOdJEUI-h6NIPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.mft
Manifest number: 168E
Signing time: Fri 19 Jun 2026 17:01:25 +0000
Manifest this update: Fri 19 Jun 2026 17:01:25 +0000
Manifest next update: Sat 20 Jun 2026 17:01:25 +0000
Files and hashes: 1: DoG1nIvAyF6Ofk7B7oBXD9fCbWY.roa (hash: 9biYSv6POYCwfleLHgkM4hjjkLE1P6h07qcPCt2vZ8Q=)
2: Ku186Y-Tu0woDCZbFinpqq7ZdFE.roa (hash: v4Tz8TXIdty6/ZjbJ1ivX2W0EU7wX33Cwf/C7mVCK74=)
3: _yFrTYVVOzem6SAvOPOzP_wE_MM.roa (hash: 5prdT05UIi7fhKfl8B0EiaHRzoodJuHLB7r7onONbos=)
4: iCGjmu2dpO46tmOdJEUI-h6NIPY.crl (hash: ZwgREvw6cl80vuEp/qPSanXpEiuqhaBOebyOxy3YAt4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iCGjmu2dpO46tmOdJEUI-h6NIPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Jun 2026 17:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e0:d4:87:a6:a3:e3:2d:2a:47:92:e0:f8:79:2c:97:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8821a39aed9da4ee3ab6639d244508fa1e8d20f6
Validity
Not Before: Jun 19 17:01:25 2026 GMT
Not After : Jun 20 17:01:25 2026 GMT
Subject: CN=9a29aa58eaf87471d3f0f5ee3da307b548d4531a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:88:c8:80:58:b9:86:fc:79:f1:eb:4c:f0:8e:
b6:ec:22:a8:14:95:d0:b5:63:71:74:b0:de:d8:d0:
e5:4d:05:47:c5:68:15:64:1e:00:9c:9e:a6:ab:c6:
bf:65:8c:64:58:62:de:be:9e:59:61:30:55:70:99:
e5:78:04:17:39:7f:04:11:8d:0c:e0:94:37:16:99:
d6:d7:ba:3e:88:4c:35:c2:9b:3b:a6:ce:e7:39:a0:
17:7b:6e:19:33:57:01:37:95:6b:50:1a:ab:a3:3a:
72:84:37:c3:8c:46:0c:36:8f:53:82:37:97:79:b1:
70:78:1a:ae:db:34:e3:b9:09:77:be:01:2c:8d:2b:
20:ee:71:c3:55:07:64:bf:17:4a:f2:82:28:b2:e8:
43:0d:31:d4:cc:72:00:bb:49:02:c1:66:bc:96:6c:
95:d9:08:04:38:90:c3:01:b6:7e:41:4a:8f:15:3b:
37:40:7e:3d:ad:43:a5:46:b6:40:b1:3b:d2:0b:dc:
27:a9:23:a0:a7:76:c2:db:ef:c4:16:e1:46:e3:07:
e5:0c:c4:bd:7b:75:81:d1:24:92:86:29:4b:a1:07:
e9:65:46:8f:d4:ee:e4:83:f6:d6:a7:d0:0c:21:ab:
6b:54:0b:c6:90:33:51:a4:22:2a:2b:a5:db:04:c6:
7d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:29:AA:58:EA:F8:74:71:D3:F0:F5:EE:3D:A3:07:B5:48:D4:53:1A
X509v3 Authority Key Identifier:
keyid:88:21:A3:9A:ED:9D:A4:EE:3A:B6:63:9D:24:45:08:FA:1E:8D:20:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iCGjmu2dpO46tmOdJEUI-h6NIPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:fa:66:6f:c6:6c:b4:6b:0c:00:52:58:70:46:e3:22:63:58:
f9:e2:ee:72:4c:c8:29:2e:2a:e6:ee:18:5e:14:b3:e4:3f:a8:
55:0c:b6:5e:87:19:86:65:3f:67:a0:fd:81:d5:1c:a0:d3:b8:
ae:71:66:65:6e:2e:f8:96:2d:34:21:72:49:4e:ae:7f:f3:1a:
f0:28:36:40:5f:04:da:16:34:b0:63:30:07:5d:ff:00:87:a1:
ab:30:53:a4:ea:d1:2a:0d:a1:f1:a3:84:5e:0c:90:e8:f1:31:
b1:ef:f2:55:fc:9f:9a:90:2e:be:61:d6:a7:f6:66:89:52:e6:
95:32:7e:74:ba:8b:60:33:fb:e9:b2:64:a3:de:c9:e7:b2:bc:
89:70:03:9b:14:f4:aa:95:0e:93:5e:16:c1:bf:b6:61:4c:71:
fe:80:d0:ea:30:c8:03:08:7a:20:f0:3e:82:79:61:bb:d4:5f:
76:b6:91:d5:f0:ea:d0:ab:61:7e:dd:bc:55:d8:fa:6c:da:1e:
e1:89:a1:4e:a7:1e:66:a3:c9:e8:29:8a:92:27:c9:f3:10:8a:
67:e2:25:93:31:b7:99:f7:ad:66:a5:13:15:74:0e:e8:51:4c:
21:b8:67:ba:d2:90:99:11:72:7e:bb:4b:83:f9:86:c0:5e:0c:
10:66:63:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 03:34:15 2026 by rpki-client