Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/b98adc-ede0-4c2a-8c56-a44c8e654df6/1/ICsQHBBwOrYDIfxj3NZpClJNuxA.mft
File: ICsQHBBwOrYDIfxj3NZpClJNuxA.mft (raw, json)
Hash identifier: h30xIU4p6jQj1zICMXJIUc66FVIJ00oOQKCAIPQ9C7c=
Subject key identifier: FD:C8:98:B1:30:7C:E9:89:A0:55:94:72:F0:58:89:F6:1B:C6:38:59
Authority key identifier: 20:2B:10:1C:10:70:3A:B6:03:21:FC:63:DC:D6:69:0A:52:4D:BB:10
Certificate issuer: /CN=202b101c10703ab60321fc63dcd6690a524dbb10
Certificate serial: 019D3866409103F2C0CF95DCDE79A9379DAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ICsQHBBwOrYDIfxj3NZpClJNuxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/b98adc-ede0-4c2a-8c56-a44c8e654df6/1/ICsQHBBwOrYDIfxj3NZpClJNuxA.mft
Manifest number: 0C02
Signing time: Sun 29 Mar 2026 07:01:58 +0000
Manifest this update: Sun 29 Mar 2026 07:01:58 +0000
Manifest next update: Mon 30 Mar 2026 07:01:58 +0000
Files and hashes: 1: ICsQHBBwOrYDIfxj3NZpClJNuxA.crl (hash: GBIp3hy11IL5pMaCNTj+8WAJ0JGdVn4cBHIWePOTyx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/b98adc-ede0-4c2a-8c56-a44c8e654df6/1/ICsQHBBwOrYDIfxj3NZpClJNuxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/b98adc-ede0-4c2a-8c56-a44c8e654df6/1/ICsQHBBwOrYDIfxj3NZpClJNuxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ICsQHBBwOrYDIfxj3NZpClJNuxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:40:91:03:f2:c0:cf:95:dc:de:79:a9:37:9d:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=202b101c10703ab60321fc63dcd6690a524dbb10
Validity
Not Before: Mar 29 07:01:58 2026 GMT
Not After : Mar 30 07:01:58 2026 GMT
Subject: CN=fdc898b1307ce989a0559472f05889f61bc63859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cd:c9:30:9c:88:30:0e:ca:82:44:21:0b:f3:
9e:ff:f5:e6:f6:c7:78:50:5d:cd:a1:0c:a4:c2:9b:
7d:21:ec:09:c9:89:fb:cf:d2:5f:f9:8e:c2:d8:d0:
c2:a6:56:29:27:7b:ab:40:26:c8:19:b5:7f:48:c9:
96:ef:84:30:67:ba:90:dc:26:96:c5:75:f2:cb:e4:
90:06:e6:fc:42:cd:7d:c0:a0:da:53:a8:e0:b3:fe:
44:61:f1:72:8e:8f:72:e0:af:d3:81:71:12:7d:4e:
a6:82:01:c7:7d:fc:91:27:37:58:2d:27:52:66:e5:
ec:fb:2f:ce:46:21:a6:ab:42:1e:9e:b1:54:5f:8d:
98:f9:99:21:aa:88:ff:df:3e:20:48:29:bb:1c:d9:
61:04:3a:ee:75:d6:05:70:0f:ab:97:c8:44:72:6a:
d1:81:d7:e4:1d:21:23:f0:ab:b3:fa:be:28:5d:43:
03:af:46:f4:d7:63:78:d5:df:32:f2:6b:51:05:de:
1d:ec:c3:ce:65:0d:61:6d:25:fc:59:9a:9c:b4:68:
68:e0:bb:73:fe:b0:62:4a:5d:fb:ee:bf:b2:e2:97:
93:c0:51:e1:64:da:95:9e:e3:55:96:fc:94:8f:8c:
ad:fd:31:20:bc:81:08:e0:84:f8:e1:c0:4e:4f:72:
70:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:C8:98:B1:30:7C:E9:89:A0:55:94:72:F0:58:89:F6:1B:C6:38:59
X509v3 Authority Key Identifier:
keyid:20:2B:10:1C:10:70:3A:B6:03:21:FC:63:DC:D6:69:0A:52:4D:BB:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ICsQHBBwOrYDIfxj3NZpClJNuxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b98adc-ede0-4c2a-8c56-a44c8e654df6/1/ICsQHBBwOrYDIfxj3NZpClJNuxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b98adc-ede0-4c2a-8c56-a44c8e654df6/1/ICsQHBBwOrYDIfxj3NZpClJNuxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:da:88:66:24:3e:de:c7:5a:24:73:f2:2c:48:07:5e:3b:e3:
ab:ed:98:c8:a6:9c:4c:5a:e1:31:7c:18:64:88:be:ba:80:9a:
5f:56:b3:89:25:f8:33:eb:b8:71:bd:b6:c5:7d:0f:40:7e:44:
59:be:2d:5c:72:5f:f6:03:94:51:01:4f:11:82:7a:26:15:26:
81:4d:78:cd:68:2b:53:c5:24:93:02:44:29:aa:cb:90:37:58:
89:9a:f4:91:0e:ac:50:1f:91:d4:50:57:d1:27:85:2c:6e:0b:
72:62:11:c9:ce:25:a8:79:1f:e8:ab:49:60:0d:30:5d:7c:3b:
a9:6e:90:88:08:4c:95:e7:8a:f6:00:1d:07:ea:07:43:fd:e1:
b0:e1:c2:9d:04:f5:7d:fa:2e:9d:97:06:1f:ec:7e:23:f0:2a:
4f:46:40:da:79:ff:49:1f:3a:94:77:7b:5d:5d:9d:d2:76:32:
b6:9d:4a:6b:17:23:ac:16:ce:46:ab:fe:21:05:d6:8a:88:bc:
b7:8c:cf:e6:7a:8e:56:35:dc:c0:e3:61:43:b3:4e:4b:20:84:
33:0c:8a:f5:54:8c:46:ce:7d:9f:84:0d:fe:6a:c2:39:31:30:
a1:1f:a6:3c:40:2c:07:ae:82:1b:e7:2c:e2:0d:93:06:23:fb:
f3:23:7b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:26 2026 by rpki-client