Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.mft
File: Icc6XY7GO-1lijj1wm8ZH91035I.mft (raw, json)
Hash identifier: lkfs/Qn65rsxX2JokGF6UZBC+ql40dN95mk8q4Kn0Qg=
Subject key identifier: 72:E3:23:C5:FA:54:59:E3:8A:45:C4:DA:FF:EA:8B:2E:C8:37:6F:22
Authority key identifier: 21:C7:3A:5D:8E:C6:3B:ED:65:8A:38:F5:C2:6F:19:1F:DD:74:DF:92
Certificate issuer: /CN=21c73a5d8ec63bed658a38f5c26f191fdd74df92
Certificate serial: 019DE3A166FDD71E8E5976BF68AEE6F70D84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Icc6XY7GO-1lijj1wm8ZH91035I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.mft
Manifest number: 18EA
Signing time: Fri 01 May 2026 13:01:38 +0000
Manifest this update: Fri 01 May 2026 13:01:38 +0000
Manifest next update: Sat 02 May 2026 13:01:38 +0000
Files and hashes: 1: Fs_FP0zOdfmc7rvun5ERONpmOgw.roa (hash: TWq1U2RPZO5KpxgW/s1ezL7KUt27fk4vKRxKtkmjh/c=)
2: Icc6XY7GO-1lijj1wm8ZH91035I.crl (hash: kDv7ezI5uwBL8e4F4g+9n3PF/mgq7MPb8ctKxJ6chTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Icc6XY7GO-1lijj1wm8ZH91035I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 02 May 2026 13:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:e3:a1:66:fd:d7:1e:8e:59:76:bf:68:ae:e6:f7:0d:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21c73a5d8ec63bed658a38f5c26f191fdd74df92
Validity
Not Before: May 1 13:01:38 2026 GMT
Not After : May 2 13:01:38 2026 GMT
Subject: CN=72e323c5fa5459e38a45c4daffea8b2ec8376f22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:93:0b:6e:6d:bb:7b:94:f1:ce:f9:37:2d:92:
b4:7c:9f:5d:85:b7:68:96:f6:41:51:3c:a7:94:2b:
76:b1:83:df:51:47:e1:01:66:ba:f0:33:2e:e7:ae:
ae:fd:87:41:ff:59:7f:ab:88:fa:b7:64:0c:d8:e1:
af:37:66:23:1d:02:82:9e:6d:da:0c:0c:00:2c:30:
76:e4:ba:76:0a:0a:44:e8:45:03:41:b5:1b:86:4d:
99:02:44:99:0d:23:db:a1:f1:d7:24:86:0c:be:6c:
d9:0a:1f:ed:83:54:35:ba:e7:d0:bf:c0:60:8c:af:
0f:c2:ad:59:ba:94:b7:47:b9:7d:ce:a8:a2:fe:90:
df:6f:19:26:a2:1f:6e:90:d4:ff:fc:9d:fd:a2:a0:
ea:e1:39:21:1e:ba:1e:75:22:4c:ab:15:65:96:21:
a7:e4:71:8a:43:71:e9:74:7f:69:4e:80:19:5a:61:
58:e4:c2:50:00:0b:46:2f:97:4c:4e:40:b4:91:1a:
ef:7a:39:ed:d8:a0:7b:38:cc:10:2e:76:bb:ea:4d:
cc:46:39:38:4f:90:1d:6b:45:ea:ef:57:53:0d:04:
48:c3:b1:7f:92:f7:81:35:78:85:93:ee:6d:26:31:
1d:5e:e8:c9:0c:23:1f:ae:06:a1:16:5f:8d:0c:3a:
e4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:E3:23:C5:FA:54:59:E3:8A:45:C4:DA:FF:EA:8B:2E:C8:37:6F:22
X509v3 Authority Key Identifier:
keyid:21:C7:3A:5D:8E:C6:3B:ED:65:8A:38:F5:C2:6F:19:1F:DD:74:DF:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Icc6XY7GO-1lijj1wm8ZH91035I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:f9:72:a3:9b:7c:53:f9:d9:aa:49:33:ef:ad:8f:71:18:59:
22:32:af:b2:da:7a:f7:0e:da:b4:8f:e3:d6:d5:bf:38:ba:0f:
56:40:aa:4b:9d:62:b1:74:f2:76:f1:37:25:58:dc:36:96:6b:
76:72:b4:d8:59:ea:eb:20:1e:a1:e6:1a:1f:11:68:1e:60:c8:
e8:43:6e:a7:19:1c:8d:b7:11:07:72:c2:3d:44:5a:1b:7e:e4:
11:65:c8:90:ea:f5:fc:f1:97:a5:cf:ce:56:4d:14:5e:92:9e:
86:c4:77:02:61:6e:2e:7e:05:c3:cd:5d:2e:c7:07:f5:3b:db:
b1:9c:44:b8:42:0f:9f:91:f2:67:1d:fb:7a:46:82:45:ad:2e:
6a:1a:f0:4c:3d:0c:27:fa:29:85:a1:11:3c:61:52:21:0f:e4:
c5:cf:d0:60:11:57:5a:6a:2e:ae:41:0e:8c:43:48:79:e8:8d:
a7:ec:6e:80:76:b1:4c:d0:83:34:ce:ba:ee:6b:de:e8:5d:16:
5c:cc:09:1f:6a:b7:77:78:5a:86:c4:65:60:ce:d5:71:ab:fb:
4c:5f:da:fc:ff:4c:1a:60:a6:f3:d2:b5:e0:10:79:b0:36:7c:
8d:a1:2d:83:3f:70:6a:7d:f8:4e:6d:f4:22:97:d1:19:a4:97:
30:70:f7:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 1 19:38:04 2026 by rpki-client