Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.mft
File: icPJKk4dT-iFcr-mjJhcMeM2jII.mft (raw, json)
Hash identifier: Op2Ci7Ky8b9xosg60BuhnD6Fq/kpageqe6JNcqBi9wk=
Subject key identifier: FA:58:FB:C3:09:08:12:64:C5:9E:0E:59:4E:DB:6B:CD:22:F4:E7:67
Authority key identifier: 89:C3:C9:2A:4E:1D:4F:E8:85:72:BF:A6:8C:98:5C:31:E3:36:8C:82
Certificate issuer: /CN=89c3c92a4e1d4fe88572bfa68c985c31e3368c82
Certificate serial: 019D3752D4513C5A5708FD58509B311AC8B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/icPJKk4dT-iFcr-mjJhcMeM2jII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.mft
Manifest number: 0C9C
Signing time: Sun 29 Mar 2026 02:01:08 +0000
Manifest this update: Sun 29 Mar 2026 02:01:08 +0000
Manifest next update: Mon 30 Mar 2026 02:01:08 +0000
Files and hashes: 1: icPJKk4dT-iFcr-mjJhcMeM2jII.crl (hash: 6skWibprM8n1X8W25CCeMvv/9kLDwB4ctqqPIVXPas4=)
2: sohnlsGgCKHLAm9KP5jtzcQ4zgc.roa (hash: A8SuN+TdWXRmsPs52vkKLZkMKVRrAI+hpLud4HRnOAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.mft
rsync://rpki.ripe.net/repository/DEFAULT/icPJKk4dT-iFcr-mjJhcMeM2jII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:d4:51:3c:5a:57:08:fd:58:50:9b:31:1a:c8:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89c3c92a4e1d4fe88572bfa68c985c31e3368c82
Validity
Not Before: Mar 29 02:01:08 2026 GMT
Not After : Mar 30 02:01:08 2026 GMT
Subject: CN=fa58fbc309081264c59e0e594edb6bcd22f4e767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9d:d4:15:21:64:e2:4d:84:35:56:e7:2b:62:
aa:e5:6e:90:9a:82:85:a6:91:14:9c:cc:53:99:6f:
fa:8f:f1:11:a9:3b:af:3e:04:9f:43:de:96:e8:2c:
1a:58:50:34:06:20:ab:81:91:f7:3e:c2:21:a6:1b:
23:59:76:92:8c:fa:aa:80:ca:40:93:eb:39:c0:de:
c7:2f:8c:89:27:49:1f:be:22:02:4c:d1:da:81:7f:
c4:f6:b7:29:4e:da:9a:f0:86:ff:53:bb:95:f1:00:
0e:ae:24:21:3a:b6:ca:29:e8:ed:43:bd:22:16:a6:
9d:4d:f0:85:3f:87:1a:e8:56:c2:c9:32:0e:77:f1:
4b:41:8f:13:04:b3:47:db:55:f9:ab:fd:17:27:ad:
a5:f3:56:7a:44:98:db:c1:d6:86:6d:0f:e8:65:52:
fc:1d:53:46:87:d0:40:bf:12:26:44:26:7f:3b:91:
bc:86:f6:6c:00:ac:e7:de:4b:76:c5:e3:4b:63:26:
7c:7a:c6:fc:cb:1b:c2:87:99:42:86:97:11:ae:33:
93:a3:89:29:1d:d1:0f:83:ac:07:cc:59:ff:8f:c3:
f0:36:e7:35:6f:8d:23:e7:99:80:b1:ff:9d:dc:5a:
41:f8:37:0f:53:7e:0e:d8:32:da:ae:f6:01:08:b7:
52:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:58:FB:C3:09:08:12:64:C5:9E:0E:59:4E:DB:6B:CD:22:F4:E7:67
X509v3 Authority Key Identifier:
keyid:89:C3:C9:2A:4E:1D:4F:E8:85:72:BF:A6:8C:98:5C:31:E3:36:8C:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/icPJKk4dT-iFcr-mjJhcMeM2jII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:08:92:ee:e7:de:91:1f:ef:8f:90:ad:fe:fb:16:17:dc:94:
fc:3e:9d:29:51:18:a2:f1:f9:75:f6:a1:b3:81:98:de:6a:d7:
4f:c2:65:05:b8:21:5d:b8:64:58:2a:6f:13:03:17:39:c6:1a:
f7:5c:bd:71:17:e4:45:37:12:13:61:e5:53:44:19:9b:88:0c:
40:58:60:ab:00:68:ec:b1:71:e1:8a:1d:d7:9b:e3:55:9d:24:
c9:2b:f3:17:22:dc:2c:c9:d2:23:16:91:06:a3:b3:70:20:f0:
ef:63:a3:66:30:89:ce:37:e3:60:d9:ce:12:68:b4:3d:a4:5b:
dd:ef:ad:76:61:38:9e:9e:f9:fc:64:53:9f:b6:09:f0:49:56:
c9:47:14:1f:d2:09:8a:a8:b2:cc:9e:1c:73:a7:7d:6c:10:04:
b0:ab:c7:3a:21:e0:9e:b3:de:de:46:82:9c:e8:31:b8:77:1c:
e5:16:d0:5e:53:0f:03:f1:e2:03:2d:ee:2d:99:c1:a3:2c:33:
b1:69:da:2c:62:54:25:eb:6f:ae:1a:d3:b9:f3:48:8c:54:97:
d3:45:ef:a0:0f:40:bc:23:f7:67:fd:e3:a6:37:71:b7:dd:32:
31:e6:97:28:15:5f:a7:5e:c4:f3:5e:97:56:19:40:9f:11:eb:
ee:18:ff:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03UtRRPFpXCP1YUJsxGsi3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5YzNjOTJhNGUxZDRmZTg4NTcyYmZhNjhjOTg1YzMxZTMz
NjhjODIwHhcNMjYwMzI5MDIwMTA4WhcNMjYwMzMwMDIwMTA4WjAzMTEwLwYDVQQD
EyhmYTU4ZmJjMzA5MDgxMjY0YzU5ZTBlNTk0ZWRiNmJjZDIyZjRlNzY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1J3UFSFk4k2ENVbnK2Kq5W6QmoKF
ppEUnMxTmW/6j/ERqTuvPgSfQ96W6CwaWFA0BiCrgZH3PsIhphsjWXaSjPqqgMpA
k+s5wN7HL4yJJ0kfviICTNHagX/E9rcpTtqa8Ib/U7uV8QAOriQhOrbKKejtQ70i
FqadTfCFP4ca6FbCyTIOd/FLQY8TBLNH21X5q/0XJ62l81Z6RJjbwdaGbQ/oZVL8
HVNGh9BAvxImRCZ/O5G8hvZsAKzn3kt2xeNLYyZ8esb8yxvCh5lChpcRrjOTo4kp
HdEPg6wHzFn/j8PwNuc1b40j55mAsf+d3FpB+DcPU34O2DLarvYBCLdSswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPpY+8MJCBJkxZ4OWU7ba80i9OdnMB8GA1UdIwQY
MBaAFInDySpOHU/ohXK/poyYXDHjNoyCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWNQSktrNGRULWlGY3ItbWpKaGNNZU0yaklJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9jMzM5MDUtZWNjNS00NGI3LTgxNDYt
ZTkxZmY1ZmU2YzI2LzEvaWNQSktrNGRULWlGY3ItbWpKaGNNZU0yaklJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9jMzM5MDUtZWNjNS00NGI3LTgxNDYtZTkxZmY1ZmU2YzI2
LzEvaWNQSktrNGRULWlGY3ItbWpKaGNNZU0yaklJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABwiS7ufe
kR/vj5Ct/vsWF9yU/D6dKVEYovH5dfahs4GY3mrXT8JlBbghXbhkWCpvEwMXOcYa
91y9cRfkRTcSE2HlU0QZm4gMQFhgqwBo7LFx4Yod15vjVZ0kySvzFyLcLMnSIxaR
BqOzcCDw72OjZjCJzjfjYNnOEmi0PaRb3e+tdmE4np75/GRTn7YJ8ElWyUcUH9IJ
iqiyzJ4cc6d9bBAEsKvHOiHgnrPe3kaCnOgxuHcc5RbQXlMPA/HiAy3uLZnBoywz
sWnaLGJUJetvrhrTufNIjFSX00XvoA9AvCP3Z/3jpjdxt90yMeaXKBVfp17E816X
VhlAnxHr7hj/Iw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:29:55 2026 by rpki-client