Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.mft
File: iC-gGQL06MNH8hFuRkXaGmtOCWI.mft (raw, json)
Hash identifier: jVmF4XXFfZEYBpxG+4gIt1VBlBDyKHY1f5T77JCAQ+Q=
Subject key identifier: E6:16:27:73:72:1E:28:0A:54:C3:96:3E:C5:58:0D:48:A5:1F:AA:2C
Authority key identifier: 88:2F:A0:19:02:F4:E8:C3:47:F2:11:6E:46:45:DA:1A:6B:4E:09:62
Certificate issuer: /CN=882fa01902f4e8c347f2116e4645da1a6b4e0962
Certificate serial: 019D38668061BE61D41BF90D10F8E3D484DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iC-gGQL06MNH8hFuRkXaGmtOCWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.mft
Manifest number: 1650
Signing time: Sun 29 Mar 2026 07:02:14 +0000
Manifest this update: Sun 29 Mar 2026 07:02:14 +0000
Manifest next update: Mon 30 Mar 2026 07:02:14 +0000
Files and hashes: 1: AUEKTW7dpfCyY0l-Yj0HVMTL-KY.roa (hash: V51b9cPnu3jOodKc2fR+o5Zo3IAU5wstih+aBJw2hf4=)
2: Nmm0wQ31BITD2tnmMqSugE8jni8.roa (hash: MBXWfJMMkKif3mZN2luokBtXQW1CjWwle34mvCaFiDo=)
3: SnVfUjSdhXy0ACcSIFHVlQJsS-g.roa (hash: 6PfYLGXYvREp7dIVRY1rgo9qMH5/efzBwsOvXM3p0hU=)
4: iC-gGQL06MNH8hFuRkXaGmtOCWI.crl (hash: vxqBfOFl4fj18Re5tycEg2pzqrvgGcoK0ijM48NwcAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/iC-gGQL06MNH8hFuRkXaGmtOCWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:80:61:be:61:d4:1b:f9:0d:10:f8:e3:d4:84:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=882fa01902f4e8c347f2116e4645da1a6b4e0962
Validity
Not Before: Mar 29 07:02:14 2026 GMT
Not After : Mar 30 07:02:14 2026 GMT
Subject: CN=e6162773721e280a54c3963ec5580d48a51faa2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:d4:f6:91:e9:22:d7:01:c2:88:1e:20:74:ba:
44:d7:c2:fe:bc:32:36:cb:87:55:b6:b6:82:b3:86:
3d:29:03:62:91:9c:21:36:82:ad:f1:3e:15:fe:c5:
54:01:51:e6:5e:a1:e0:14:31:f3:60:df:0e:fa:fb:
48:51:0a:01:29:d8:5d:c9:dd:a8:a4:73:1d:ef:3e:
73:f7:45:46:18:f7:64:38:66:b1:d8:5a:5b:87:6b:
49:e6:68:28:5d:76:ad:61:13:2c:e0:d0:79:b6:2c:
42:24:34:0a:67:fa:c5:79:d5:7a:39:cf:7c:a5:f2:
b5:ea:bb:0a:69:2d:4e:90:8c:0d:ef:c0:bc:f8:1a:
ee:64:ed:c8:22:19:48:28:3b:ed:67:48:90:0a:66:
45:50:6e:10:36:93:43:28:bc:34:39:b7:04:a8:0c:
b8:0f:a2:41:9d:05:47:2c:83:1c:3c:04:df:6a:eb:
83:ee:52:b3:ef:87:5c:06:00:50:be:51:31:1c:c4:
46:b4:34:05:d5:33:fb:27:c9:65:4f:ff:0a:f7:b2:
ae:27:f7:00:e3:6d:9d:fe:24:73:ff:d7:d4:df:05:
08:08:db:dc:ba:02:e5:4e:a4:b9:ee:09:eb:0e:a7:
9b:ba:4c:c5:77:4a:1a:29:47:79:94:9f:c9:53:6f:
05:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:16:27:73:72:1E:28:0A:54:C3:96:3E:C5:58:0D:48:A5:1F:AA:2C
X509v3 Authority Key Identifier:
keyid:88:2F:A0:19:02:F4:E8:C3:47:F2:11:6E:46:45:DA:1A:6B:4E:09:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iC-gGQL06MNH8hFuRkXaGmtOCWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:7f:0c:aa:47:83:28:fa:bf:ca:9b:78:7e:91:f6:ef:80:70:
a3:42:4d:70:5d:a3:d9:90:5a:92:4e:f4:22:39:79:b2:a6:91:
48:75:86:43:e5:eb:f3:15:ca:8f:94:93:6e:a8:84:a6:3a:97:
e2:8e:4a:be:29:ae:43:de:5c:2b:c2:58:4c:78:0d:4b:a6:04:
60:22:c6:e8:13:6d:24:8b:2b:59:6e:fb:e7:b9:27:37:ca:87:
21:87:ba:39:01:bd:87:de:83:02:19:e7:9a:2b:2e:d0:65:89:
7e:5a:cc:58:aa:46:4c:fc:b3:b2:7d:4f:ee:68:97:1f:bc:0f:
d2:2c:9f:f8:a8:51:ee:f8:ec:69:4a:a8:d6:35:79:f9:32:c5:
c3:af:ac:e0:3b:42:d6:1b:e8:2c:2b:6b:c2:70:c2:31:e4:5c:
26:d1:e2:56:a6:e3:9c:ef:c4:cc:42:0d:f7:3e:8f:26:ab:2f:
ec:3b:25:76:1f:21:9c:1d:1b:3c:6c:6e:16:b6:cf:d2:26:96:
6b:3c:fa:dd:11:b1:14:4b:76:b6:00:5b:2f:7c:0c:eb:ec:0d:
63:36:50:4c:e6:b4:a9:75:ca:78:c4:83:3a:40:be:1f:9f:5e:
74:e8:76:6d:37:e5:61:4c:7f:3a:6c:74:aa:6b:c7:88:45:3f:
9f:d0:36:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:32 2026 by rpki-client