Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.mft
File: icPJKk4dT-iFcr-mjJhcMeM2jII.mft (raw, json)
Hash identifier: +LtCXKHY0nRt25FKKhQgmc1rxGdfRFFcr14oNBFs/20=
Subject key identifier: 98:1C:98:33:B8:29:7B:97:B6:B2:E9:D8:A5:25:24:90:43:13:59:28
Authority key identifier: 89:C3:C9:2A:4E:1D:4F:E8:85:72:BF:A6:8C:98:5C:31:E3:36:8C:82
Certificate issuer: /CN=89c3c92a4e1d4fe88572bfa68c985c31e3368c82
Certificate serial: 019D27E019B7947B5A7B78AAE20F74E10965
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/icPJKk4dT-iFcr-mjJhcMeM2jII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.mft
Manifest number: 0C94
Signing time: Thu 26 Mar 2026 02:01:31 +0000
Manifest this update: Thu 26 Mar 2026 02:01:31 +0000
Manifest next update: Fri 27 Mar 2026 02:01:31 +0000
Files and hashes: 1: icPJKk4dT-iFcr-mjJhcMeM2jII.crl (hash: NMQQgcJ4blcCLmpPsiZ3zOnWhNHxgQnEH+DEwcnh0EE=)
2: sohnlsGgCKHLAm9KP5jtzcQ4zgc.roa (hash: A8SuN+TdWXRmsPs52vkKLZkMKVRrAI+hpLud4HRnOAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.mft
rsync://rpki.ripe.net/repository/DEFAULT/icPJKk4dT-iFcr-mjJhcMeM2jII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:19:b7:94:7b:5a:7b:78:aa:e2:0f:74:e1:09:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89c3c92a4e1d4fe88572bfa68c985c31e3368c82
Validity
Not Before: Mar 26 02:01:31 2026 GMT
Not After : Mar 27 02:01:31 2026 GMT
Subject: CN=981c9833b8297b97b6b2e9d8a525249043135928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:81:3b:aa:8b:64:9b:44:bd:be:cb:51:61:61:
8f:6c:13:cf:49:a3:63:48:1a:ed:b5:10:6a:34:f1:
96:72:65:48:33:c8:d9:f8:99:7a:9f:68:71:44:4d:
6f:4d:c0:de:1c:ee:4d:b7:6c:73:a7:3c:47:07:2d:
97:ea:7b:99:55:6e:f7:d7:6c:5c:06:72:55:87:48:
2d:76:53:51:d5:ad:de:ac:8b:92:b7:a6:6d:75:5f:
27:31:1d:c2:94:7e:62:e5:cc:0c:40:4c:39:23:cd:
29:20:f2:ab:e8:83:ce:c7:a6:ad:f0:82:98:c4:1b:
d0:80:e4:4d:20:80:2f:e1:d7:da:d2:01:ca:8c:54:
70:af:30:6a:d6:87:8e:6e:0e:b5:39:a1:11:b4:0f:
cd:70:8d:35:5d:5b:a6:84:bb:a9:b0:a9:35:73:24:
4e:b2:b5:41:6e:e9:c3:14:8f:4b:0f:46:3d:bc:5b:
5b:57:d2:42:54:da:77:a4:d8:99:a1:95:b0:c8:b2:
86:de:4c:03:3b:5d:a6:ed:b6:d9:34:67:b3:41:b8:
80:63:03:64:b1:c0:24:10:24:0c:54:15:54:ac:3a:
01:a3:fa:0d:11:ba:42:6b:33:93:f3:06:ec:3d:39:
ad:d1:25:1c:6b:a6:73:10:c7:d0:55:d7:20:39:41:
00:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:1C:98:33:B8:29:7B:97:B6:B2:E9:D8:A5:25:24:90:43:13:59:28
X509v3 Authority Key Identifier:
keyid:89:C3:C9:2A:4E:1D:4F:E8:85:72:BF:A6:8C:98:5C:31:E3:36:8C:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/icPJKk4dT-iFcr-mjJhcMeM2jII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:01:a8:30:2b:a1:95:04:ec:1f:d1:98:49:81:41:e9:bf:d2:
46:cc:8b:72:09:22:4d:eb:d4:c2:da:6c:3c:c3:03:e2:d4:a2:
d0:2a:5c:d7:a3:a4:77:da:c4:d7:42:80:69:0a:c6:64:19:61:
1a:68:02:82:33:89:de:6c:dc:41:26:61:e4:02:fa:00:fb:70:
5e:ea:45:cc:8d:67:f6:af:c3:c9:da:cd:7a:fa:f1:71:93:25:
73:d1:81:83:4e:0c:01:6e:ec:c0:d1:30:46:71:19:ff:70:d3:
7a:4c:d1:a4:2d:78:cd:41:85:bb:e1:db:05:68:c2:46:c3:89:
55:83:e8:77:c1:e6:8a:55:9d:c3:52:4d:ea:9e:37:a3:79:84:
fc:8a:cb:92:c0:dd:50:e6:d9:99:48:43:0a:2b:27:b2:cd:19:
2a:db:02:22:2a:20:39:e1:8a:c6:98:00:c7:fd:ad:d5:cd:d0:
79:87:fd:41:b5:9d:1b:39:28:e1:d9:04:fa:39:f2:e9:84:4d:
a0:e8:fa:41:47:fa:c9:80:87:69:42:15:81:1c:30:97:93:b6:
9a:5b:81:bb:0a:39:32:78:be:76:40:ca:71:3d:18:9c:b4:19:
50:c6:46:ca:9a:17:50:08:b6:73:e8:60:e0:4a:bf:17:c4:49:
65:37:c3:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:49:29 2026 by rpki-client