Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/ICZNUaES0LwizqcxTLBs9aGuM-k.mft
File: ICZNUaES0LwizqcxTLBs9aGuM-k.mft (raw, json)
Hash identifier: YGuxexxgLrxOg9tisJtwCDMZRNk4WPQl7o4cCXXxq6o=
Subject key identifier: D2:D1:C0:0A:D1:53:54:7C:89:F3:17:CA:47:2B:12:41:CF:10:CF:9E
Authority key identifier: 20:26:4D:51:A1:12:D0:BC:22:CE:A7:31:4C:B0:6C:F5:A1:AE:33:E9
Certificate issuer: /CN=20264d51a112d0bc22cea7314cb06cf5a1ae33e9
Certificate serial: 019D284D36D00AE80446367E6FC3D41F2F40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ICZNUaES0LwizqcxTLBs9aGuM-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/ICZNUaES0LwizqcxTLBs9aGuM-k.mft
Manifest number: 181A
Signing time: Thu 26 Mar 2026 04:00:41 +0000
Manifest this update: Thu 26 Mar 2026 04:00:41 +0000
Manifest next update: Fri 27 Mar 2026 04:00:41 +0000
Files and hashes: 1: ICZNUaES0LwizqcxTLBs9aGuM-k.crl (hash: bY/j6I0vzpZTO7VAszGOO1Fst//1UuRfoxJDdIxlVPo=)
2: TlCjshw48MI80zaCqZRdp10HXmU.roa (hash: IUaeg0F1EJZvlebFMhAdUjihSrKer72rVZfI7a/WmYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/ICZNUaES0LwizqcxTLBs9aGuM-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/ICZNUaES0LwizqcxTLBs9aGuM-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/ICZNUaES0LwizqcxTLBs9aGuM-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:36:d0:0a:e8:04:46:36:7e:6f:c3:d4:1f:2f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20264d51a112d0bc22cea7314cb06cf5a1ae33e9
Validity
Not Before: Mar 26 04:00:41 2026 GMT
Not After : Mar 27 04:00:41 2026 GMT
Subject: CN=d2d1c00ad153547c89f317ca472b1241cf10cf9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:24:9a:03:64:a0:dc:a1:2d:d9:44:cd:b7:d4:
51:63:11:19:ea:e3:8c:89:94:6e:4f:f1:e1:72:66:
53:59:0a:a6:1c:99:10:52:2a:7d:bd:de:a7:6c:0f:
f4:08:b8:d0:f9:7b:58:d0:cd:4f:cf:b3:b4:65:b4:
48:00:93:30:1f:c1:2e:09:0e:6e:9d:68:75:6d:91:
7b:1b:81:1e:17:b8:72:4d:4b:0b:65:87:d2:2f:92:
20:99:d7:4b:05:87:f9:2a:ba:7e:8f:30:2c:0c:bf:
00:78:bc:6f:5e:5f:66:78:66:19:51:b1:2c:d0:cd:
8d:13:63:83:77:72:39:f7:06:fb:44:0d:72:c6:ec:
1b:ef:bf:da:14:80:fe:10:db:76:ba:e3:b4:b3:e6:
39:0e:5e:a9:af:0a:8a:69:e5:d8:55:93:46:dc:5d:
1d:e3:86:18:ee:72:70:59:a3:e6:23:e3:9c:17:70:
c4:f5:21:4c:64:11:9f:96:95:e2:b4:c1:6e:f2:df:
53:30:0e:77:c6:39:99:40:fb:27:d2:bf:a0:87:75:
e4:00:0f:7a:39:1a:fe:4e:61:0b:be:5f:a7:fd:41:
ef:d0:e0:1d:2a:9c:1f:e8:8f:35:14:82:e6:f7:83:
1d:f3:44:7b:60:f5:01:00:c6:3f:44:0d:50:cc:6b:
32:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:D1:C0:0A:D1:53:54:7C:89:F3:17:CA:47:2B:12:41:CF:10:CF:9E
X509v3 Authority Key Identifier:
keyid:20:26:4D:51:A1:12:D0:BC:22:CE:A7:31:4C:B0:6C:F5:A1:AE:33:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ICZNUaES0LwizqcxTLBs9aGuM-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/ICZNUaES0LwizqcxTLBs9aGuM-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/ICZNUaES0LwizqcxTLBs9aGuM-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:8c:0f:b1:70:ee:27:72:07:d3:59:6e:02:bc:a9:1f:36:5f:
fc:c7:b9:05:ee:32:75:af:f6:9e:f6:7e:57:b6:c6:96:fb:3a:
04:91:f0:ba:f5:49:e6:a2:d3:9f:a9:fb:25:d9:3c:49:16:e2:
01:56:0f:25:04:c2:57:d4:8b:dc:d5:b2:02:ed:e7:7e:45:9d:
f0:29:ac:9a:89:61:9b:01:6d:c8:bf:3c:ef:b9:2c:fa:65:9c:
45:40:9a:5f:dd:d0:0c:28:85:94:cd:08:36:14:40:1e:b1:7c:
2f:bf:46:11:78:c7:7b:34:bd:0d:5b:a2:0c:9e:98:a8:05:18:
35:2a:88:24:48:a7:0b:2b:cd:e8:a4:1b:88:38:c7:00:99:ad:
8f:35:5c:f9:d5:71:40:08:f2:3e:c4:8c:11:ef:45:bc:e4:92:
fc:96:88:ac:db:e7:b9:7b:4b:4f:1c:44:39:e1:06:49:be:23:
1a:71:f2:c2:08:7b:97:cc:ad:ac:25:6c:07:38:c0:31:30:9b:
d7:65:6f:66:69:4f:33:fd:c3:a2:d9:88:e4:5e:d8:1b:7d:5e:
6b:98:76:f1:4d:1e:3d:6f:cc:3c:5f:5e:7f:6e:b0:e1:93:ef:
96:69:6a:4d:f9:cc:e1:78:d7:14:1d:f1:68:8d:a6:7a:df:53:
ea:60:b3:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:51:58 2026 by rpki-client