Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.mft
File: iCl5Lj_yH8NYJ_aKeMgFABXGanI.mft (raw, json)
Hash identifier: CwdDcx0Jhm6kkGRzIVHvC+CXAhgw8ZnEW5uQVeAVxd4=
Subject key identifier: CD:63:D2:8E:25:B8:B3:AC:A1:9A:56:86:49:9E:96:50:A8:91:15:F1
Authority key identifier: 88:29:79:2E:3F:F2:1F:C3:58:27:F6:8A:78:C8:05:00:15:C6:6A:72
Certificate issuer: /CN=8829792e3ff21fc35827f68a78c8050015c66a72
Certificate serial: 019D254CB9B3E887E3C7325F44FC1F9FBDBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iCl5Lj_yH8NYJ_aKeMgFABXGanI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 14:01:18 +0000
Manifest this update: Wed 25 Mar 2026 14:01:18 +0000
Manifest next update: Thu 26 Mar 2026 14:01:18 +0000
Files and hashes: 1: 33ZsgU5AHkIb_3u_7p6IlSFFgCg.roa (hash: baStD7TfXhuGuW8n2xQfJJOjFkibkZZVuX/gIDwnSdY=)
2: IaXoeRFo8oZIZuTY3duOe59BUCc.roa (hash: 8fZ9vrPYI8jxQ4Q3pQ1/ew70xq1NmBM7Qvx8mbUZu5w=)
3: RPt5k7y-VAMu34YaCIIef-nOQII.roa (hash: bOuBKk/Rho1r5yGSQObXjtTLuWRCdzlQHlOjUnu9/wE=)
4: iCl5Lj_yH8NYJ_aKeMgFABXGanI.crl (hash: EREUFM6pm0mUK3NrKEmjrWP32l+yqhA0B7jTLA5H/WQ=)
5: lpRiSpVU7WkVK-wBgfs_oAGVrH4.roa (hash: MQZ0Y/f4J2tN35URQbJyIVwQHuBTWdjyvB5VP1KRnL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.mft
rsync://rpki.ripe.net/repository/DEFAULT/iCl5Lj_yH8NYJ_aKeMgFABXGanI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:b9:b3:e8:87:e3:c7:32:5f:44:fc:1f:9f:bd:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8829792e3ff21fc35827f68a78c8050015c66a72
Validity
Not Before: Mar 25 14:01:18 2026 GMT
Not After : Mar 26 14:01:18 2026 GMT
Subject: CN=cd63d28e25b8b3aca19a5686499e9650a89115f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8f:e5:d7:84:7d:e2:92:d4:99:72:28:b1:78:
66:d5:d7:dc:83:a5:6b:72:1f:2e:06:2f:8f:47:a8:
8a:43:97:d7:fb:c9:25:28:f3:be:a2:24:f1:50:98:
e9:15:3f:8d:ce:54:3f:c5:cf:53:0b:c9:0f:6a:01:
62:52:1e:78:dc:8d:e7:4e:9d:63:83:a5:9f:c8:d5:
f2:01:bb:e5:46:ab:bc:6b:87:ca:f8:a0:12:e1:2f:
ae:60:28:90:ae:55:e3:ca:09:c9:8c:04:37:1b:9f:
3b:d7:a6:6c:31:6a:ad:4e:63:10:13:93:99:a6:c1:
27:a3:7f:c8:5a:7c:7f:a6:d1:40:b7:9b:c5:7a:7c:
b6:29:39:77:56:18:f4:94:a7:ba:1e:3f:f0:0b:49:
cd:cb:b9:1c:da:10:3e:aa:7c:2c:5d:12:14:2d:75:
5a:40:7d:7e:de:8d:b4:c6:d2:d8:8a:dd:f7:53:fb:
c1:f9:d0:10:f6:9f:81:01:5b:04:8a:52:4a:f9:cb:
cb:a8:d7:27:43:5d:97:6c:ef:6e:70:49:98:4a:95:
86:74:6e:04:62:d3:cf:7e:bc:63:a9:b4:28:ec:6a:
44:1d:90:73:29:c3:11:d0:8d:91:1d:fe:a7:6d:d2:
57:47:8e:1e:10:09:3c:aa:cc:16:0c:1e:40:d6:b4:
a7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:63:D2:8E:25:B8:B3:AC:A1:9A:56:86:49:9E:96:50:A8:91:15:F1
X509v3 Authority Key Identifier:
keyid:88:29:79:2E:3F:F2:1F:C3:58:27:F6:8A:78:C8:05:00:15:C6:6A:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iCl5Lj_yH8NYJ_aKeMgFABXGanI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:59:a7:e2:8a:ee:0a:7d:9b:ac:8f:7d:b5:14:ec:58:6f:56:
f0:cc:0e:ec:d1:39:49:54:87:7f:4b:f9:7f:17:6a:9a:2e:d2:
aa:0a:a0:e2:cf:fe:3c:c9:8b:06:2f:c1:68:24:93:b6:b5:c9:
9f:46:f7:f7:ac:63:f5:8d:17:11:c5:1f:60:59:41:bf:d1:23:
49:e2:66:26:a2:50:98:a6:72:18:c0:19:2d:2f:18:10:ed:a3:
3c:e9:5f:39:04:26:0a:30:4b:39:8b:c9:f6:76:8e:eb:cf:5f:
a0:56:84:0e:74:8f:db:57:8c:6d:a8:23:bc:b6:b1:17:3c:f4:
d9:63:d6:da:03:8d:20:9d:38:ab:25:a4:9c:50:41:c3:35:35:
3f:31:21:10:3d:a1:a5:25:ef:33:a5:ff:f6:68:73:3b:14:ef:
b2:33:57:1c:ae:5e:12:a2:19:c5:5b:7f:c0:40:a1:bb:72:13:
fd:72:44:22:4d:8c:b2:64:9a:04:4d:98:24:cb:36:d2:aa:87:
14:1f:fa:c4:0f:67:66:b6:c3:a1:40:3b:bf:34:6a:57:4e:f1:
0b:fa:6b:3a:c8:d4:b6:78:35:bf:c8:b9:a1:93:e6:1e:e0:17:
99:7e:2b:13:80:cc:3e:d9:1b:cf:0b:1a:0e:b3:75:15:e2:1b:
20:0c:bb:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:25:11 2026 by rpki-client