Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.mft
File: iC-gGQL06MNH8hFuRkXaGmtOCWI.mft (raw, json)
Hash identifier: 1frD8UoV8X4ZMKfd9Xz/FzYTBQ1aECJ7NpQrkXzEwIg=
Subject key identifier: B9:F1:2D:49:63:EF:6B:EA:EB:21:21:A1:EE:30:E8:93:CE:D6:A0:B0
Authority key identifier: 88:2F:A0:19:02:F4:E8:C3:47:F2:11:6E:46:45:DA:1A:6B:4E:09:62
Certificate issuer: /CN=882fa01902f4e8c347f2116e4645da1a6b4e0962
Certificate serial: 019D28F32F12E220C804C09C6E6E94CC4140
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iC-gGQL06MNH8hFuRkXaGmtOCWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.mft
Manifest number: 1648
Signing time: Thu 26 Mar 2026 07:01:58 +0000
Manifest this update: Thu 26 Mar 2026 07:01:58 +0000
Manifest next update: Fri 27 Mar 2026 07:01:58 +0000
Files and hashes: 1: AUEKTW7dpfCyY0l-Yj0HVMTL-KY.roa (hash: V51b9cPnu3jOodKc2fR+o5Zo3IAU5wstih+aBJw2hf4=)
2: Nmm0wQ31BITD2tnmMqSugE8jni8.roa (hash: MBXWfJMMkKif3mZN2luokBtXQW1CjWwle34mvCaFiDo=)
3: SnVfUjSdhXy0ACcSIFHVlQJsS-g.roa (hash: 6PfYLGXYvREp7dIVRY1rgo9qMH5/efzBwsOvXM3p0hU=)
4: iC-gGQL06MNH8hFuRkXaGmtOCWI.crl (hash: w5XU106igG89ufn/dK5cGSFly+sPvMKDdJVHLR/1PZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/iC-gGQL06MNH8hFuRkXaGmtOCWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f3:2f:12:e2:20:c8:04:c0:9c:6e:6e:94:cc:41:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=882fa01902f4e8c347f2116e4645da1a6b4e0962
Validity
Not Before: Mar 26 07:01:58 2026 GMT
Not After : Mar 27 07:01:58 2026 GMT
Subject: CN=b9f12d4963ef6beaeb2121a1ee30e893ced6a0b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:44:9d:19:e2:2e:46:75:b2:42:ff:55:b5:50:
8b:b0:96:70:86:17:38:ce:a9:02:af:f1:f4:31:c7:
31:0e:5d:83:54:f5:69:03:8c:ba:68:62:43:4f:0c:
ad:13:0f:c9:55:9e:e3:83:4a:0d:4f:4c:b9:24:05:
91:5f:f8:a8:33:9e:83:39:07:1a:90:48:28:ce:b6:
09:45:68:05:8c:dc:25:cb:f2:9c:2a:17:7c:5e:d9:
0b:bd:bf:d3:19:a7:c9:13:05:6b:0c:84:ed:4f:08:
1d:c1:ea:6a:71:c5:fb:ba:4d:c5:c5:b3:ef:81:29:
69:99:5c:d6:d0:88:53:96:83:d0:41:45:82:84:69:
7c:e9:b9:84:06:2e:54:13:65:70:df:fc:4e:42:a1:
2e:2e:fa:bb:63:db:01:7a:28:b2:25:a7:4b:e1:3f:
b5:89:a5:36:31:71:e0:de:92:1a:30:4a:ec:cf:ae:
c9:27:d6:a6:68:3d:80:79:8d:e7:0d:2a:0b:45:96:
83:41:fe:4a:b4:0a:ca:1f:d8:d7:d5:c4:07:6a:1a:
88:98:bf:b4:15:b4:ce:53:79:d5:1f:b1:35:96:f2:
7b:bd:a7:3f:83:06:d5:f8:17:1b:5e:06:b3:97:21:
93:29:66:12:60:12:20:0d:6c:82:49:c8:7f:52:ec:
cb:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:F1:2D:49:63:EF:6B:EA:EB:21:21:A1:EE:30:E8:93:CE:D6:A0:B0
X509v3 Authority Key Identifier:
keyid:88:2F:A0:19:02:F4:E8:C3:47:F2:11:6E:46:45:DA:1A:6B:4E:09:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iC-gGQL06MNH8hFuRkXaGmtOCWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:e7:62:f8:b6:36:72:de:38:8c:21:01:e7:3c:c9:51:48:1e:
9c:97:4b:f9:c4:fc:dc:11:3d:7b:36:2a:33:24:d1:ac:6e:e9:
e4:15:05:df:c4:e2:80:ed:ab:59:17:b1:81:02:e3:65:56:29:
95:2b:38:ad:c1:c5:5e:fb:da:51:a0:34:0f:2a:a2:06:8e:5b:
50:ce:16:0b:ca:01:20:ec:ef:07:4c:5e:3c:6b:f2:6c:27:cc:
a7:84:47:8e:5c:b4:91:d7:e7:ed:25:fb:b8:36:9f:c8:49:70:
e8:59:a7:04:d7:9f:22:bf:9d:3a:30:76:ed:e7:da:77:9b:ce:
ed:78:d5:ec:7b:64:10:8e:33:96:c6:12:79:f5:2e:83:99:fd:
c0:fb:d2:d9:b6:3c:76:03:ad:b7:c6:94:62:a0:59:71:dc:55:
b6:b3:b6:d7:f3:35:56:63:df:4c:8c:f4:05:de:a8:00:91:f7:
78:14:bb:2c:3d:d8:e6:df:21:33:43:6c:ae:3c:fb:ce:89:ae:
71:88:f0:d3:1a:db:ba:a2:2f:7a:8c:2f:ac:c0:0b:53:ac:3c:
ae:ec:78:69:dd:f3:6e:3d:df:ac:67:17:66:e5:5b:40:6d:12:
6e:9d:6f:0d:72:e6:bf:79:12:96:05:06:9f:a6:24:e9:0e:08:
fc:b2:92:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:10:09 2026 by rpki-client