Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.mft
File: Icc6XY7GO-1lijj1wm8ZH91035I.mft (raw, json)
Hash identifier: S6zf7p6G4qwiFvSQrU2EJjNAXVWYDz/CQQcUcCaz4yA=
Subject key identifier: 2D:E9:C3:FB:FE:96:70:AE:ED:0F:08:8F:F6:02:4A:4D:0E:5B:A1:B3
Authority key identifier: 21:C7:3A:5D:8E:C6:3B:ED:65:8A:38:F5:C2:6F:19:1F:DD:74:DF:92
Certificate issuer: /CN=21c73a5d8ec63bed658a38f5c26f191fdd74df92
Certificate serial: 019CE6A3E88098B04FA5DD32BF83BB4607A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Icc6XY7GO-1lijj1wm8ZH91035I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.mft
Manifest number: 1867
Signing time: Fri 13 Mar 2026 10:00:27 +0000
Manifest this update: Fri 13 Mar 2026 10:00:27 +0000
Manifest next update: Sat 14 Mar 2026 10:00:27 +0000
Files and hashes: 1: Fs_FP0zOdfmc7rvun5ERONpmOgw.roa (hash: TWq1U2RPZO5KpxgW/s1ezL7KUt27fk4vKRxKtkmjh/c=)
2: Icc6XY7GO-1lijj1wm8ZH91035I.crl (hash: xfdPqzq9FeRsLVIOFXmdnQZApMEc2+RscIOYa1luWHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Icc6XY7GO-1lijj1wm8ZH91035I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:a3:e8:80:98:b0:4f:a5:dd:32:bf:83:bb:46:07:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21c73a5d8ec63bed658a38f5c26f191fdd74df92
Validity
Not Before: Mar 13 10:00:27 2026 GMT
Not After : Mar 14 10:00:27 2026 GMT
Subject: CN=2de9c3fbfe9670aeed0f088ff6024a4d0e5ba1b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c1:e2:c9:5c:9b:22:34:7a:90:c3:d9:ee:b8:
46:7b:cc:b6:ba:c8:65:3f:93:33:07:8b:4d:f2:b5:
0e:d3:2f:64:d1:e2:41:14:53:06:3a:27:7e:ff:a3:
10:a8:68:65:b4:e0:11:e2:db:e0:a1:fb:cc:69:1d:
e4:fa:3d:6b:f9:91:19:bd:96:94:22:27:c8:6e:e1:
96:c7:d6:95:ee:96:ae:e6:33:7f:4e:15:74:57:ea:
be:22:1b:ea:38:05:7a:09:13:ae:c0:2c:6a:af:4f:
f0:ce:b1:3b:a0:72:a9:e8:d7:07:c9:e8:85:95:af:
db:45:df:c6:b7:e8:d8:25:7e:b8:56:92:07:35:52:
b7:60:7d:90:55:07:33:b8:c3:d8:2f:68:4b:1f:03:
4e:8d:99:c4:64:6a:30:94:e6:c0:99:4c:0f:f1:95:
e0:16:ae:01:cf:da:20:4c:8a:7c:4d:f5:8b:1b:b1:
96:dd:de:b1:2d:bb:4f:e5:e7:40:b3:f6:03:4e:ad:
79:e7:7e:4f:b0:80:50:08:76:6a:b4:7a:8a:a6:9b:
36:57:8f:f0:a0:ee:92:d4:5f:a9:c6:1c:c4:50:55:
60:ed:cd:b8:61:85:20:e2:60:86:71:2c:c4:07:3f:
9e:69:73:55:4f:b8:ff:da:ed:0e:d1:27:94:d4:9f:
bb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:E9:C3:FB:FE:96:70:AE:ED:0F:08:8F:F6:02:4A:4D:0E:5B:A1:B3
X509v3 Authority Key Identifier:
keyid:21:C7:3A:5D:8E:C6:3B:ED:65:8A:38:F5:C2:6F:19:1F:DD:74:DF:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Icc6XY7GO-1lijj1wm8ZH91035I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:53:f9:6f:9d:f0:03:2d:93:70:b8:9b:fb:65:54:ce:b4:1b:
cf:c2:0a:61:7f:05:70:b1:10:15:b9:ce:3f:f0:a8:f5:68:e1:
fa:16:2e:5b:4e:da:83:07:d7:1b:04:78:11:08:78:01:d0:6e:
49:92:0f:c0:ee:62:b9:9b:01:18:90:30:42:c0:6e:b2:76:a3:
01:65:b6:51:e7:f7:0c:98:b6:38:a4:cd:02:bf:67:68:38:54:
f7:06:b1:01:79:f3:58:e4:62:06:36:3c:71:eb:5e:53:da:d9:
01:07:87:69:7f:5c:38:f0:97:00:92:3a:5d:51:40:83:10:1f:
cd:03:01:42:d0:56:7c:7f:fa:80:b7:72:1f:37:96:a2:68:bd:
e3:82:21:85:9e:d1:f2:cf:b0:cd:fc:03:f3:b9:6d:c8:3c:09:
be:ab:20:47:63:27:6f:d5:88:7d:af:22:a0:db:2f:ad:9f:db:
e9:36:15:33:71:99:c0:77:68:11:8e:8d:52:8c:f3:ec:61:12:
13:32:d7:02:f5:1e:39:20:f7:bc:1a:89:68:4f:e4:19:e7:4b:
29:56:dc:d3:50:bf:f7:c4:4f:bb:c8:e2:83:e3:91:85:6b:00:
64:07:05:ba:bd:56:e8:41:a7:c1:d9:f6:3c:ef:bd:80:54:4f:
86:f6:08:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 14:34:29 2026 by rpki-client