Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.mft
File: Icc6XY7GO-1lijj1wm8ZH91035I.mft (raw, json)
Hash identifier: CwalrjB8nlYmxpYzfpWTSlwvMcEiW04GG/V34Oth5SA=
Subject key identifier: 6E:73:22:DF:3A:A7:C3:F0:36:0B:F4:5A:16:EA:7C:44:9D:D1:03:28
Authority key identifier: 21:C7:3A:5D:8E:C6:3B:ED:65:8A:38:F5:C2:6F:19:1F:DD:74:DF:92
Certificate issuer: /CN=21c73a5d8ec63bed658a38f5c26f191fdd74df92
Certificate serial: 019D284E29BE8788FA3D9813F0FBA01658E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Icc6XY7GO-1lijj1wm8ZH91035I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 04:01:44 +0000
Manifest this update: Thu 26 Mar 2026 04:01:44 +0000
Manifest next update: Fri 27 Mar 2026 04:01:44 +0000
Files and hashes: 1: Fs_FP0zOdfmc7rvun5ERONpmOgw.roa (hash: TWq1U2RPZO5KpxgW/s1ezL7KUt27fk4vKRxKtkmjh/c=)
2: Icc6XY7GO-1lijj1wm8ZH91035I.crl (hash: ubY6RSowFv6eX2fr5R/MkG0yTuHAQJ9obPiXLksNiEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Icc6XY7GO-1lijj1wm8ZH91035I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:29:be:87:88:fa:3d:98:13:f0:fb:a0:16:58:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21c73a5d8ec63bed658a38f5c26f191fdd74df92
Validity
Not Before: Mar 26 04:01:44 2026 GMT
Not After : Mar 27 04:01:44 2026 GMT
Subject: CN=6e7322df3aa7c3f0360bf45a16ea7c449dd10328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a9:e6:57:d5:47:7a:73:d3:a4:bc:11:0e:c4:
2f:00:1e:50:64:8a:66:f6:68:a5:79:ce:ae:40:d5:
c1:11:18:6f:a5:e2:2e:d6:f3:7e:1c:3d:85:eb:e5:
e6:6c:ab:ad:7e:b7:c5:c4:bf:c5:c9:de:b4:e9:e4:
4d:3b:22:36:79:08:02:6e:85:80:b7:de:ba:e6:d9:
41:be:7f:6f:ef:5a:9b:aa:31:68:46:73:1c:83:4a:
68:de:e4:76:be:e7:ba:97:dd:06:db:a1:92:df:c7:
79:43:a8:72:6a:71:d8:bc:4b:1b:bb:c9:de:c9:a5:
6c:d9:49:b8:9b:0f:72:df:bc:27:a1:9f:af:a8:e0:
13:07:d6:24:30:e7:12:1e:64:56:0d:1c:b6:96:4f:
39:06:0c:1b:a0:96:03:e5:9d:68:fc:c2:0b:76:7b:
d5:a4:b9:89:19:ad:c7:cb:b4:8b:2e:c5:af:84:39:
17:06:a2:61:12:fe:e3:65:d3:7f:d1:99:05:ae:62:
99:95:3b:4d:df:3c:fb:0a:10:b5:7d:22:cf:4a:b2:
e2:90:e8:ba:5e:54:6d:1c:da:84:a3:85:36:50:bc:
17:42:09:83:1a:e0:75:80:92:ae:63:6d:c9:3f:a6:
5b:f0:de:a6:49:f3:bd:f4:a0:d3:f9:ff:39:95:7f:
32:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:73:22:DF:3A:A7:C3:F0:36:0B:F4:5A:16:EA:7C:44:9D:D1:03:28
X509v3 Authority Key Identifier:
keyid:21:C7:3A:5D:8E:C6:3B:ED:65:8A:38:F5:C2:6F:19:1F:DD:74:DF:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Icc6XY7GO-1lijj1wm8ZH91035I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:44:26:8f:9c:87:1e:e1:e0:8b:e0:0b:f1:98:04:d9:1b:bc:
fc:88:c9:63:a5:32:9c:9f:f4:f8:83:e2:e6:c1:2c:38:1b:3f:
8c:e9:9e:94:15:68:d5:33:fb:1d:d6:32:9a:df:dc:9e:13:ac:
66:9e:e2:c2:fd:27:b4:55:5b:e3:c6:e4:92:42:3f:23:91:cf:
40:71:4d:46:bd:97:ac:14:d8:a2:00:3d:32:e1:b6:96:da:a3:
38:35:c8:d5:8a:7b:8a:e6:8f:ba:8f:6c:78:dd:66:a1:16:98:
0b:06:23:58:01:bf:6f:c8:8d:9c:58:69:1b:9b:21:15:42:81:
90:aa:a8:53:ab:cc:b3:5d:17:4b:33:20:cf:3b:90:b3:60:48:
b6:0f:e4:f6:59:f8:d5:3a:6d:fd:77:01:0f:d6:f1:41:b1:81:
63:c7:75:30:84:c0:2f:d0:1c:23:cc:50:6d:90:ca:58:1a:fc:
d1:18:3c:e5:f1:d6:58:b1:fa:6f:07:00:17:3a:d3:58:9b:76:
2c:e5:42:05:e1:92:c2:ac:2a:ab:32:fb:75:c2:63:71:9d:73:
b1:a6:45:22:f2:92:6c:bd:bc:11:2b:24:29:cd:b7:cf:6e:ee:
f5:8c:db:8c:25:ca:d4:98:31:24:8c:9e:97:5f:0f:05:37:66:
82:5b:b4:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTim+h4j6PZgT8PugFljhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxYzczYTVkOGVjNjNiZWQ2NThhMzhmNWMyNmYxOTFmZGQ3
NGRmOTIwHhcNMjYwMzI2MDQwMTQ0WhcNMjYwMzI3MDQwMTQ0WjAzMTEwLwYDVQQD
Eyg2ZTczMjJkZjNhYTdjM2YwMzYwYmY0NWExNmVhN2M0NDlkZDEwMzI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqnmV9VHenPTpLwRDsQvAB5QZIpm
9milec6uQNXBERhvpeIu1vN+HD2F6+XmbKutfrfFxL/Fyd606eRNOyI2eQgCboWA
t9665tlBvn9v71qbqjFoRnMcg0po3uR2vue6l90G26GS38d5Q6hyanHYvEsbu8ne
yaVs2Um4mw9y37wnoZ+vqOATB9YkMOcSHmRWDRy2lk85BgwboJYD5Z1o/MILdnvV
pLmJGa3Hy7SLLsWvhDkXBqJhEv7jZdN/0ZkFrmKZlTtN3zz7ChC1fSLPSrLikOi6
XlRtHNqEo4U2ULwXQgmDGuB1gJKuY23JP6Zb8N6mSfO99KDT+f85lX8ymQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG5zIt86p8PwNgv0WhbqfESd0QMoMB8GA1UdIwQY
MBaAFCHHOl2OxjvtZYo49cJvGR/ddN+SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWNjNlhZN0dPLTFsaWpqMXdtOFpIOTEwMzVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9mODUwZWMtOTk1NC00ODVjLWFhMGIt
ZmQxMjBjMzFkYTcyLzEvSWNjNlhZN0dPLTFsaWpqMXdtOFpIOTEwMzVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi9mODUwZWMtOTk1NC00ODVjLWFhMGItZmQxMjBjMzFkYTcy
LzEvSWNjNlhZN0dPLTFsaWpqMXdtOFpIOTEwMzVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGEQmj5yH
HuHgi+AL8ZgE2Ru8/IjJY6UynJ/0+IPi5sEsOBs/jOmelBVo1TP7HdYymt/cnhOs
Zp7iwv0ntFVb48bkkkI/I5HPQHFNRr2XrBTYogA9MuG2ltqjODXI1Yp7iuaPuo9s
eN1moRaYCwYjWAG/b8iNnFhpG5shFUKBkKqoU6vMs10XSzMgzzuQs2BItg/k9ln4
1Tpt/XcBD9bxQbGBY8d1MITAL9AcI8xQbZDKWBr80Rg85fHWWLH6bwcAFzrTWJt2
LOVCBeGSwqwqqzL7dcJjcZ1zsaZFIvKSbL28ESskKc23z27u9YzbjCXK1JgxJIye
l18PBTdmglu0cg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:28:14 2026 by rpki-client