Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.mft
File: Icc6XY7GO-1lijj1wm8ZH91035I.mft (raw, json)
Hash identifier: ot0mvz67PFcYIfVf6dBl6ad9pO8EpShAd716KSb1uFM=
Subject key identifier: D1:24:E8:5A:78:F8:E1:8A:52:3D:2E:2F:75:5B:C3:E8:5D:12:32:B9
Authority key identifier: 21:C7:3A:5D:8E:C6:3B:ED:65:8A:38:F5:C2:6F:19:1F:DD:74:DF:92
Certificate issuer: /CN=21c73a5d8ec63bed658a38f5c26f191fdd74df92
Certificate serial: 019EDCC187101F3551764ED71D58C77767B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Icc6XY7GO-1lijj1wm8ZH91035I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.mft
Manifest number: 196B
Signing time: Thu 18 Jun 2026 22:02:10 +0000
Manifest this update: Thu 18 Jun 2026 22:02:10 +0000
Manifest next update: Fri 19 Jun 2026 22:02:10 +0000
Files and hashes: 1: Fs_FP0zOdfmc7rvun5ERONpmOgw.roa (hash: TWq1U2RPZO5KpxgW/s1ezL7KUt27fk4vKRxKtkmjh/c=)
2: Icc6XY7GO-1lijj1wm8ZH91035I.crl (hash: AF7XtGWe7xtyjb184M+LSdv0awVbYWNbd04Ud+5d6Ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Icc6XY7GO-1lijj1wm8ZH91035I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Jun 2026 15:43:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:dc:c1:87:10:1f:35:51:76:4e:d7:1d:58:c7:77:67:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21c73a5d8ec63bed658a38f5c26f191fdd74df92
Validity
Not Before: Jun 18 22:02:10 2026 GMT
Not After : Jun 19 22:02:10 2026 GMT
Subject: CN=d124e85a78f8e18a523d2e2f755bc3e85d1232b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:58:30:f2:80:cb:94:dd:1b:00:34:8d:20:da:
3a:a4:a6:48:5a:91:4a:d9:72:69:ae:6a:7f:14:02:
66:38:c9:6b:a7:a8:76:59:4e:df:d2:4c:f2:5c:ae:
06:38:95:20:6e:23:98:ff:55:0f:60:87:8c:21:b9:
13:81:ac:5c:20:6d:bf:ba:0c:c2:56:d3:07:57:2c:
6b:4b:2a:31:5b:96:18:46:9f:ab:56:cb:a4:a0:70:
aa:e8:89:94:5c:d4:15:c9:01:42:bc:bd:22:7c:93:
f3:cb:03:3a:2c:4c:ba:1b:0d:57:d4:aa:d4:b2:5d:
80:03:fd:5c:0d:9b:2e:5e:2e:39:a9:0d:d8:bb:9a:
62:0f:00:d5:44:81:35:40:5b:b6:36:2a:14:36:ad:
ef:0e:b1:d0:90:d9:fb:5b:dc:4b:6d:21:36:c3:b7:
a2:f5:0e:25:e5:09:e5:f8:ce:17:e6:e9:08:4f:5f:
5d:67:24:b9:99:1a:8c:ad:c6:8f:1a:63:cf:0a:cb:
93:38:c8:57:2b:90:13:ad:03:f4:cc:e4:6e:e1:56:
1a:6e:77:49:5a:63:28:09:e5:6f:8f:33:4c:28:99:
db:3d:57:8f:8b:19:25:8e:55:43:79:6d:14:bf:9d:
56:fb:e5:4a:a4:37:a8:18:39:ef:41:1b:2d:1b:9d:
df:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:24:E8:5A:78:F8:E1:8A:52:3D:2E:2F:75:5B:C3:E8:5D:12:32:B9
X509v3 Authority Key Identifier:
keyid:21:C7:3A:5D:8E:C6:3B:ED:65:8A:38:F5:C2:6F:19:1F:DD:74:DF:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Icc6XY7GO-1lijj1wm8ZH91035I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:8b:3d:ae:6a:be:16:2d:44:91:36:7c:5c:32:58:ad:84:1e:
e3:dc:52:ca:6a:43:b3:e8:c5:9c:9c:ae:f5:15:ae:b5:9d:31:
e3:66:d9:64:9a:39:ce:a7:a1:bf:4b:0f:82:c1:05:06:4e:e2:
53:c7:84:e6:98:a3:a3:c4:69:6e:66:df:32:1b:3c:4f:01:da:
71:85:46:a8:22:e2:68:6d:ce:37:8f:c2:4a:aa:d3:8b:ec:df:
94:d5:c5:d4:84:7e:4c:47:b0:fc:9e:d4:7a:f9:a0:a3:f4:a7:
38:68:d9:d0:8f:b1:68:a1:ab:fc:66:45:bf:dc:4b:8c:14:2d:
d0:56:65:29:c9:0b:89:98:02:49:25:82:d0:65:1f:6e:8f:f2:
d0:50:8f:3b:cf:43:14:2f:36:8a:97:0c:23:db:05:35:6e:8f:
83:9f:c8:4e:9b:dd:14:11:e4:7e:23:3f:59:9e:f9:9e:a8:21:
90:f2:33:6f:39:ea:b5:88:c4:49:60:54:6a:71:fb:22:ce:fd:
e2:c5:df:af:26:87:3a:9e:7b:ff:e3:b1:40:f7:ed:99:5e:d5:
14:17:3b:91:47:c9:bd:f6:7e:b1:ce:de:de:68:ed:2c:37:24:
37:a6:b7:37:d7:2b:3c:c7:10:3b:be:9c:70:a4:ec:b3:b5:1a:
fa:da:81:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 19 00:14:39 2026 by rpki-client