Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft
File: IcOUybOja2n57l-JNqL1G5XqzrQ.mft (raw, json)
Hash identifier: V5BgQF4rjwbVdasRPOF/HAXrSl9cczLc/kseTZOl3Uw=
Subject key identifier: 01:2B:64:86:2A:CC:65:C1:F1:02:EB:DA:23:F7:D5:13:8D:71:7D:64
Authority key identifier: 21:C3:94:C9:B3:A3:6B:69:F9:EE:5F:89:36:A2:F5:1B:95:EA:CE:B4
Certificate issuer: /CN=21c394c9b3a36b69f9ee5f8936a2f51b95eaceb4
Certificate serial: 019CC7BDF261517330783DFE8C1D78E3ADA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft
Manifest number: 185A
Signing time: Sat 07 Mar 2026 10:00:40 +0000
Manifest this update: Sat 07 Mar 2026 10:00:40 +0000
Manifest next update: Sun 08 Mar 2026 10:00:40 +0000
Files and hashes: 1: 2vB0H2qYyz6SI0m9_Uc6vD9cNDE.roa (hash: nA5TN8D8VR57ajti92sbOf79Vloshs+N1jBn946xsJk=)
2: IcOUybOja2n57l-JNqL1G5XqzrQ.crl (hash: LqFqxYHJNXwKp8sMHDBfKokaeF3/D5KdkFNR3vZNsgs=)
3: O_6FFbhc4JZemzwdUopF30jTO70.roa (hash: YpXPwTYN0lUePsEcimr/XTryk56n06KBrcCoSPFO4DM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 04:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c7:bd:f2:61:51:73:30:78:3d:fe:8c:1d:78:e3:ad:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21c394c9b3a36b69f9ee5f8936a2f51b95eaceb4
Validity
Not Before: Mar 7 10:00:40 2026 GMT
Not After : Mar 8 10:00:40 2026 GMT
Subject: CN=012b64862acc65c1f102ebda23f7d5138d717d64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:91:e9:d4:e2:d4:00:a2:88:9b:c9:51:b8:a4:
f7:e1:d9:ae:46:77:bb:0c:b3:49:60:48:da:f5:e1:
e0:d4:30:6d:c4:dc:9a:0d:53:d9:36:eb:f4:bf:0f:
b9:20:49:79:c8:75:4e:7e:0e:d1:b4:99:58:cb:f1:
fc:c9:3e:b2:7d:fb:5f:37:2c:86:da:a6:d5:ac:59:
69:82:ee:1f:8f:74:4b:16:1d:23:c4:e9:fd:b5:60:
3d:0e:8a:5b:cf:bd:f3:f7:97:2e:15:c0:d0:1f:29:
00:30:06:86:20:d2:67:6e:ad:fa:2b:df:7e:5d:b3:
1f:5f:1e:07:46:5d:39:bf:ce:30:1e:77:39:f3:2b:
4e:18:33:d0:74:d2:85:60:67:48:bc:00:5b:e7:60:
66:6b:5c:f4:41:18:2a:a2:d2:a4:7f:8c:61:31:7c:
02:2b:96:28:33:4a:9c:e7:23:40:a2:7c:a3:46:a9:
a4:ff:e3:e6:0b:db:e0:c4:b2:c1:4b:dc:2f:ee:fa:
ef:a1:7c:17:5f:e3:f2:f5:2a:18:bf:df:da:4f:88:
56:10:86:b6:6c:13:f4:3f:de:89:18:76:02:68:cd:
83:42:44:b4:db:b4:7b:4d:73:2b:cd:b8:b4:14:49:
24:41:42:1c:6b:2c:06:6d:7b:b4:7f:4c:26:33:85:
cf:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:2B:64:86:2A:CC:65:C1:F1:02:EB:DA:23:F7:D5:13:8D:71:7D:64
X509v3 Authority Key Identifier:
keyid:21:C3:94:C9:B3:A3:6B:69:F9:EE:5F:89:36:A2:F5:1B:95:EA:CE:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:91:6c:40:22:1f:8a:a0:8d:fb:45:d8:80:78:c2:1d:8c:5e:
6b:eb:de:04:53:db:45:3c:32:c3:c2:be:78:04:26:f6:08:ff:
74:a7:97:fc:d0:00:f2:d7:60:73:65:55:11:1b:b7:2a:7d:17:
1e:aa:2d:e3:80:30:67:65:65:b7:8c:bb:17:e2:0f:eb:81:2f:
e9:4b:b0:22:bf:07:91:97:d9:0b:01:33:47:d7:fb:7e:b9:34:
51:c7:dd:42:b8:e7:38:30:38:fa:66:23:4e:91:12:66:2f:3c:
9d:06:ce:08:05:49:76:21:ff:66:62:15:d7:54:d3:24:52:cb:
83:cc:43:14:b4:de:05:48:86:df:40:90:33:76:ad:1d:29:39:
5b:0d:f7:dd:72:43:77:06:03:b0:5b:71:a4:6b:63:b0:d5:e6:
2b:c1:11:6d:68:5f:fb:5e:48:80:dd:71:c5:2c:39:ef:6f:7e:
3b:1e:d6:3c:fe:e4:ba:d8:05:81:6b:eb:2b:57:3b:16:80:70:
c4:21:77:4c:67:1e:54:24:64:8b:ee:11:a7:b6:59:4b:8a:62:
ef:61:75:b4:16:28:2a:6b:22:4e:4d:10:59:19:17:d2:46:f0:
45:c8:3b:fc:bf:74:52:4e:dc:8e:81:15:19:b5:84:0e:2d:0b:
6d:4a:e8:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 12:58:45 2026 by rpki-client