Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.mft
File: iCl5Lj_yH8NYJ_aKeMgFABXGanI.mft (raw, json)
Hash identifier: NsqJPnxQD2sxTebQAwwIb9M+WhscFr1fBkTH/pHXL/U=
Subject key identifier: 3C:8F:1D:88:5E:42:92:45:EA:E7:54:0D:26:DD:EF:70:7F:59:6A:17
Authority key identifier: 88:29:79:2E:3F:F2:1F:C3:58:27:F6:8A:78:C8:05:00:15:C6:6A:72
Certificate issuer: /CN=8829792e3ff21fc35827f68a78c8050015c66a72
Certificate serial: 019CE36BFC1CA52B45B19566AAD5A9488412
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iCl5Lj_yH8NYJ_aKeMgFABXGanI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.mft
Manifest number: 1864
Signing time: Thu 12 Mar 2026 19:00:30 +0000
Manifest this update: Thu 12 Mar 2026 19:00:30 +0000
Manifest next update: Fri 13 Mar 2026 19:00:30 +0000
Files and hashes: 1: 33ZsgU5AHkIb_3u_7p6IlSFFgCg.roa (hash: baStD7TfXhuGuW8n2xQfJJOjFkibkZZVuX/gIDwnSdY=)
2: ZwN_WyION8uYqDjoA1xnQkchTaM.roa (hash: 9ecMI7J0CNr0a+4Dpddr7hBWVjwMKVw4wUfu93dW1GA=)
3: cvSdtYHjcF0hm5LM33yb8CXcRJ0.roa (hash: SeB26lO22kntrqAzZ6tUP2JVxAvCIZQ3YSpxsX2UeNc=)
4: iCl5Lj_yH8NYJ_aKeMgFABXGanI.crl (hash: rVs+Be9w9+x2nEIrkLEl1ruwlv6Z92rMmMyTaK3HScg=)
5: lpRiSpVU7WkVK-wBgfs_oAGVrH4.roa (hash: MQZ0Y/f4J2tN35URQbJyIVwQHuBTWdjyvB5VP1KRnL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.mft
rsync://rpki.ripe.net/repository/DEFAULT/iCl5Lj_yH8NYJ_aKeMgFABXGanI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 15:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:6b:fc:1c:a5:2b:45:b1:95:66:aa:d5:a9:48:84:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8829792e3ff21fc35827f68a78c8050015c66a72
Validity
Not Before: Mar 12 19:00:30 2026 GMT
Not After : Mar 13 19:00:30 2026 GMT
Subject: CN=3c8f1d885e429245eae7540d26ddef707f596a17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:db:70:f8:81:04:28:3f:6f:5b:d7:5d:17:3c:
f7:eb:cc:43:e3:d2:30:51:9b:6c:7d:36:14:d7:37:
19:95:d2:8c:85:68:60:c9:1f:b4:76:9e:36:2e:98:
17:46:93:12:a8:07:77:69:a4:7e:b3:24:c2:54:ba:
77:2f:6e:a0:0d:87:42:cc:ed:c6:85:42:2e:fd:6e:
1b:f7:db:8b:29:a8:9a:90:69:2b:bd:78:ca:ff:5a:
4e:32:92:15:dd:0f:ad:6e:2e:6b:e7:a1:9d:32:65:
be:0e:56:4a:6a:bb:cb:2b:a0:9e:64:dc:48:df:f5:
13:94:ab:f2:f6:6f:72:54:70:c8:5f:9f:95:92:7e:
a1:d7:d3:a4:0f:a6:6d:58:7e:4b:a7:00:92:55:b5:
d6:9a:db:3f:ab:a1:d2:cc:bc:f1:90:34:18:f0:3b:
21:14:f8:c1:7e:c7:8c:54:e1:a6:41:64:27:65:37:
5f:11:65:ca:6e:d6:a9:21:7b:55:ce:89:19:83:b3:
12:78:22:d8:e0:2f:68:1f:21:17:3c:b3:ec:73:b6:
f0:74:fb:41:cf:54:63:ca:bb:a8:32:2b:a0:10:b8:
e4:d6:9b:51:27:c1:72:3d:41:ba:94:37:d6:98:d5:
18:6e:c5:06:05:92:be:2a:59:61:64:9c:2a:7c:38:
0c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:8F:1D:88:5E:42:92:45:EA:E7:54:0D:26:DD:EF:70:7F:59:6A:17
X509v3 Authority Key Identifier:
keyid:88:29:79:2E:3F:F2:1F:C3:58:27:F6:8A:78:C8:05:00:15:C6:6A:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iCl5Lj_yH8NYJ_aKeMgFABXGanI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:59:3f:3e:d0:d5:b9:10:4e:97:c8:1c:ad:93:55:f2:27:c5:
72:ff:09:3d:7f:14:46:66:00:26:f7:9a:08:7b:37:08:28:b4:
72:e6:c4:54:46:5b:a9:7e:fa:76:19:9b:3b:9a:ae:ce:64:17:
d5:d8:aa:9d:6b:ff:95:1a:b0:90:47:66:fa:47:66:17:a7:5d:
2c:96:c5:57:12:26:57:2b:23:0a:74:84:57:b3:a3:09:c3:1d:
f3:0e:c2:c5:53:7c:ee:35:16:24:88:85:d2:fb:e9:6a:29:f2:
11:c1:0f:18:7b:eb:be:34:17:8b:d4:db:a8:0b:73:a0:69:b4:
2e:97:f0:c5:eb:d7:68:c6:ef:1c:01:36:49:42:02:e5:41:b4:
09:e6:1c:c4:3e:5d:84:4d:4d:d0:bb:79:f8:66:50:97:24:00:
a4:1f:36:e9:24:d1:5b:70:f6:f4:18:63:2d:3a:70:ce:e7:87:
70:13:ab:f4:95:bd:da:8e:8b:65:3c:94:ef:f5:b2:7a:03:cd:
5c:36:5a:1c:ac:89:35:e3:04:d4:06:99:34:68:7b:93:01:7e:
79:25:4f:40:5b:63:e2:18:99:a1:72:71:2b:f1:23:ad:bf:ec:
cf:fb:c8:4d:47:a3:45:37:ab:7a:19:ea:0f:54:05:29:a6:47:
29:b3:95:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 22:35:11 2026 by rpki-client