Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/ICZNUaES0LwizqcxTLBs9aGuM-k.mft
File: ICZNUaES0LwizqcxTLBs9aGuM-k.mft (raw, json)
Hash identifier: CeYfFB0fSkszhgxQoBqiiH9w9LSrjas/km9RIovCfu0=
Subject key identifier: F1:29:97:25:41:DA:93:B1:A1:55:DB:36:17:71:91:E2:03:76:C8:57
Authority key identifier: 20:26:4D:51:A1:12:D0:BC:22:CE:A7:31:4C:B0:6C:F5:A1:AE:33:E9
Certificate issuer: /CN=20264d51a112d0bc22cea7314cb06cf5a1ae33e9
Certificate serial: 019E1F7EC39DA65C1E7D13FE398763F257A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ICZNUaES0LwizqcxTLBs9aGuM-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/ICZNUaES0LwizqcxTLBs9aGuM-k.mft
Manifest number: 189A
Signing time: Wed 13 May 2026 04:01:01 +0000
Manifest this update: Wed 13 May 2026 04:01:01 +0000
Manifest next update: Thu 14 May 2026 04:01:01 +0000
Files and hashes: 1: ICZNUaES0LwizqcxTLBs9aGuM-k.crl (hash: Rcr3FQ7hjqYtMh80ytHFyvkPlbUav0ioE7nwb8NmD8U=)
2: TlCjshw48MI80zaCqZRdp10HXmU.roa (hash: IUaeg0F1EJZvlebFMhAdUjihSrKer72rVZfI7a/WmYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/ICZNUaES0LwizqcxTLBs9aGuM-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/ICZNUaES0LwizqcxTLBs9aGuM-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/ICZNUaES0LwizqcxTLBs9aGuM-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7e:c3:9d:a6:5c:1e:7d:13:fe:39:87:63:f2:57:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20264d51a112d0bc22cea7314cb06cf5a1ae33e9
Validity
Not Before: May 13 04:01:01 2026 GMT
Not After : May 14 04:01:01 2026 GMT
Subject: CN=f129972541da93b1a155db36177191e20376c857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ec:f2:ee:fb:12:3b:02:b7:b8:5d:c7:54:e5:
3c:c5:c4:7e:22:c4:96:7a:81:83:30:5a:e2:ab:e9:
13:e6:4d:50:a7:46:a9:11:a5:e7:ae:22:a3:44:c0:
58:01:a1:87:6a:b8:76:08:f5:3b:49:74:94:89:65:
83:a1:f0:78:03:69:eb:c6:be:9f:fd:88:d7:ee:2f:
aa:56:ed:27:bd:bb:88:b6:0c:a4:94:64:e3:31:7d:
23:cb:63:45:01:77:7b:5f:d0:be:f1:f2:ab:c4:1a:
61:ca:bb:8a:c7:9b:8f:67:8a:0a:57:e1:19:90:74:
e4:f5:71:7d:73:63:90:9a:cc:75:9b:79:8c:00:f8:
24:92:03:96:f8:db:a4:10:44:37:b5:b3:b0:e9:81:
1f:03:74:e6:73:10:a7:4c:4a:dd:ff:87:05:57:b2:
eb:91:0f:f1:24:7e:8b:40:0a:26:a9:a6:a3:b8:71:
0f:42:50:f5:62:b3:00:2f:68:9f:a4:a0:85:63:81:
eb:54:4b:c0:34:0a:16:59:8d:58:e1:db:78:74:1d:
b5:66:1f:7c:3d:aa:d1:d1:21:9c:a8:31:81:51:d2:
8f:ea:d5:40:7a:66:d8:ec:37:56:5f:7a:0d:5f:a4:
8c:64:c0:f6:24:72:d7:c0:26:a5:04:f7:5c:fe:80:
5d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:29:97:25:41:DA:93:B1:A1:55:DB:36:17:71:91:E2:03:76:C8:57
X509v3 Authority Key Identifier:
keyid:20:26:4D:51:A1:12:D0:BC:22:CE:A7:31:4C:B0:6C:F5:A1:AE:33:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ICZNUaES0LwizqcxTLBs9aGuM-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/ICZNUaES0LwizqcxTLBs9aGuM-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/ICZNUaES0LwizqcxTLBs9aGuM-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:15:3e:f6:88:12:56:25:46:2e:6e:d2:19:b4:35:3c:df:63:
b1:fb:04:3c:86:fa:a8:4a:f6:60:77:fc:b9:67:51:cc:9b:3f:
64:f9:57:00:22:85:e3:c4:b8:29:91:02:1e:0b:3f:dd:39:74:
55:42:0f:98:6b:fb:04:74:94:c9:dd:87:ba:1c:7a:8c:dd:9e:
40:d2:48:6b:7e:65:01:01:93:ab:37:06:b3:06:c0:4c:44:b4:
1a:5e:8d:0d:86:2d:e7:2f:8e:08:47:34:ce:0d:97:a0:23:37:
07:91:6e:8f:48:f7:db:35:d7:21:1e:3a:a2:5a:22:5e:5b:80:
2f:39:4f:36:43:45:6c:db:6d:2e:ca:7a:26:8c:f5:18:ad:82:
cc:ab:0a:50:c3:83:ab:27:e7:77:e9:0e:69:16:2a:4b:e5:11:
35:03:8a:11:ce:af:3e:bd:4a:ed:c5:61:d7:74:4a:9b:c0:69:
5c:63:6f:82:d2:b9:ec:8f:9e:e9:55:41:00:46:4c:69:b8:ba:
f2:b4:d2:6b:8d:cc:96:70:cb:d7:ac:6f:1d:08:86:56:62:5c:
9d:8d:d8:69:4a:42:21:93:2e:2a:9c:0a:80:c3:2c:c3:59:24:
45:9f:fe:7c:13:1b:b8:9a:6f:b6:48:50:87:8b:b5:66:f6:9b:
dd:1a:61:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:25:25 2026 by rpki-client