Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.mft
File: Icc6XY7GO-1lijj1wm8ZH91035I.mft (raw, json)
Hash identifier: GI1XXlNe7ktAM9KLJJisWTbCtadi4YnYwYaevX3s3Yw=
Subject key identifier: 8F:52:FE:C4:88:BD:C2:84:1C:A7:C4:4C:F6:78:D5:05:C8:7F:37:3B
Authority key identifier: 21:C7:3A:5D:8E:C6:3B:ED:65:8A:38:F5:C2:6F:19:1F:DD:74:DF:92
Certificate issuer: /CN=21c73a5d8ec63bed658a38f5c26f191fdd74df92
Certificate serial: 019EDAD28E63460CE4137778E1571C51E1DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Icc6XY7GO-1lijj1wm8ZH91035I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.mft
Manifest number: 196A
Signing time: Thu 18 Jun 2026 13:01:32 +0000
Manifest this update: Thu 18 Jun 2026 13:01:32 +0000
Manifest next update: Fri 19 Jun 2026 13:01:32 +0000
Files and hashes: 1: Fs_FP0zOdfmc7rvun5ERONpmOgw.roa (hash: TWq1U2RPZO5KpxgW/s1ezL7KUt27fk4vKRxKtkmjh/c=)
2: Icc6XY7GO-1lijj1wm8ZH91035I.crl (hash: UOKuYsaSi0Ya9Oq6hb2lGlhBmL4O+z66c05poCgIQtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Icc6XY7GO-1lijj1wm8ZH91035I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Jun 2026 13:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:da:d2:8e:63:46:0c:e4:13:77:78:e1:57:1c:51:e1:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21c73a5d8ec63bed658a38f5c26f191fdd74df92
Validity
Not Before: Jun 18 13:01:32 2026 GMT
Not After : Jun 19 13:01:32 2026 GMT
Subject: CN=8f52fec488bdc2841ca7c44cf678d505c87f373b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8f:6c:ae:89:49:d4:a3:fb:9f:ac:07:c8:ff:
7c:f7:98:72:d2:65:bc:83:6e:bc:87:94:b9:c4:a9:
0a:4b:85:25:2c:34:60:74:76:f8:7b:46:2d:b8:68:
30:54:be:ea:77:df:bc:3f:5a:87:1a:d1:6c:e1:10:
d4:67:7b:5e:eb:0a:d7:ee:f5:71:d6:8b:e2:d6:46:
f1:f2:97:d7:8c:ba:22:24:81:43:d0:fe:0d:a8:50:
8b:53:ae:43:67:d0:50:31:27:ed:c1:e4:3c:21:db:
98:aa:13:44:3e:3c:83:14:48:28:eb:b8:fe:9b:bf:
0d:92:d8:9d:d0:22:e7:fc:f0:2c:35:43:7d:a1:33:
14:39:e6:c4:35:a5:38:f0:9a:f2:7c:c2:61:ad:2e:
fe:47:b3:83:d7:5a:8f:ca:cc:17:2b:f0:0b:9c:d4:
32:ce:aa:ab:ee:28:da:01:79:d7:38:90:1a:44:c9:
c2:57:40:86:cb:d6:cc:42:da:97:6c:11:38:22:b4:
6d:7d:fa:99:c3:b4:fc:40:2b:4a:98:4a:1a:b9:70:
2c:0c:22:e6:df:47:04:d2:7e:e6:7b:98:4a:bd:16:
e5:67:fb:f0:aa:7c:02:3f:2b:c3:58:d2:cb:a4:d7:
ad:ca:7f:ee:b4:9f:95:83:dd:7a:8b:ba:53:2e:a5:
5d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:52:FE:C4:88:BD:C2:84:1C:A7:C4:4C:F6:78:D5:05:C8:7F:37:3B
X509v3 Authority Key Identifier:
keyid:21:C7:3A:5D:8E:C6:3B:ED:65:8A:38:F5:C2:6F:19:1F:DD:74:DF:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Icc6XY7GO-1lijj1wm8ZH91035I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:57:19:c1:74:0a:76:01:6f:19:fa:38:6d:eb:e8:07:bf:38:
98:84:fd:51:e9:87:a5:59:44:53:64:94:6b:be:89:43:91:32:
d5:02:e2:d4:5f:20:8b:dd:df:1f:8c:2c:66:c4:cd:14:42:a3:
65:43:5d:72:ca:b4:01:95:4a:27:1f:06:76:c9:79:40:86:51:
cb:42:4a:50:0f:88:5b:92:f7:6e:7e:e5:b7:ac:3a:5a:1d:78:
67:09:c5:22:bc:50:24:43:08:cf:83:17:d0:db:66:bc:c0:87:
3d:cb:bf:c8:2c:f0:59:6c:52:42:98:7f:dd:8d:fe:69:d1:1c:
67:72:f0:91:15:29:02:9c:fd:53:bf:31:77:21:9d:5a:b5:dc:
07:b5:0c:24:0f:19:24:40:39:d4:7f:2c:cd:21:89:fa:c1:78:
7d:e9:a7:ed:9f:ce:a1:fa:a5:63:41:71:a9:85:be:ed:75:5b:
48:6b:a2:bf:7a:f8:dc:dd:d2:2c:c9:4c:6a:31:94:cb:0e:6d:
43:75:a7:16:46:8d:3d:78:3c:de:64:1b:11:7c:66:5c:8b:8a:
db:3e:a8:eb:df:54:96:0a:1c:fa:2f:9e:e6:02:da:d6:23:b2:
59:ec:85:15:85:30:9b:99:db:a8:77:4f:13:20:03:c8:43:34:
0a:0a:b0:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 18 23:23:19 2026 by rpki-client