Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/57b7a3-a739-4262-8b01-0c3d4e31eba4/1/icMXcNtymJXGw_2TN15c1WE-82o.mft
File: icMXcNtymJXGw_2TN15c1WE-82o.mft (raw, json)
Hash identifier: HntNMPWJjgQYOeylrRERnkxHMv+kWpWchnMYwPiA60s=
Subject key identifier: 96:FB:2F:DC:87:45:D5:FF:73:20:48:1D:93:51:D1:04:0C:80:3F:4E
Authority key identifier: 89:C3:17:70:DB:72:98:95:C6:C3:FD:93:37:5E:5C:D5:61:3E:F3:6A
Certificate issuer: /CN=89c31770db729895c6c3fd93375e5cd5613ef36a
Certificate serial: 019D284E6328112F11146DE2F144D263EEB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/icMXcNtymJXGw_2TN15c1WE-82o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/57b7a3-a739-4262-8b01-0c3d4e31eba4/1/icMXcNtymJXGw_2TN15c1WE-82o.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 04:01:58 +0000
Manifest this update: Thu 26 Mar 2026 04:01:58 +0000
Manifest next update: Fri 27 Mar 2026 04:01:58 +0000
Files and hashes: 1: ZqdN75hOuragHWh1sW0H53ieou8.roa (hash: VQoXtyLhwzZzJr4fc3dxsvsJER7uYvAei5g/P1rkmVA=)
2: icMXcNtymJXGw_2TN15c1WE-82o.crl (hash: xeehDooJsUGZ9le28Zz7IMy7A1mjXRNKjyr+mflQdg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/57b7a3-a739-4262-8b01-0c3d4e31eba4/1/icMXcNtymJXGw_2TN15c1WE-82o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/57b7a3-a739-4262-8b01-0c3d4e31eba4/1/icMXcNtymJXGw_2TN15c1WE-82o.mft
rsync://rpki.ripe.net/repository/DEFAULT/icMXcNtymJXGw_2TN15c1WE-82o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:63:28:11:2f:11:14:6d:e2:f1:44:d2:63:ee:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89c31770db729895c6c3fd93375e5cd5613ef36a
Validity
Not Before: Mar 26 04:01:58 2026 GMT
Not After : Mar 27 04:01:58 2026 GMT
Subject: CN=96fb2fdc8745d5ff7320481d9351d1040c803f4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d0:a8:00:dc:99:99:2d:d3:c7:d3:40:69:0f:
50:d1:c5:0c:5a:76:76:b4:90:5a:73:32:ef:da:93:
19:7d:ee:c7:0c:7c:1c:f2:1f:27:76:35:e4:60:9a:
54:b3:89:cf:f9:1d:de:ef:4d:c2:cc:43:06:8e:90:
f7:7a:73:1e:73:87:dc:33:b0:19:fa:de:61:3b:d8:
e9:32:54:89:b7:a6:4f:cb:9e:a9:c5:3a:4c:6e:31:
31:85:95:9f:ce:07:66:41:d0:e7:93:42:9e:70:67:
99:e8:01:a5:37:4e:16:d5:43:ab:b5:6e:2e:0e:4e:
a7:16:04:d4:d4:34:70:e9:ff:6d:c1:ca:d3:43:2e:
cc:f2:86:8b:5e:f0:92:59:af:26:b6:2b:df:e0:c7:
56:39:7a:bc:81:db:4f:e4:1a:54:ac:91:53:75:96:
64:99:e4:20:97:1b:dd:24:0a:15:59:e5:39:1e:07:
42:bc:19:6a:95:21:23:e3:67:cf:d0:de:38:1c:0d:
dc:b0:a6:80:44:26:d7:21:5b:90:fa:cd:5a:9a:50:
79:9f:f4:ab:3d:29:04:b9:7e:fa:fa:aa:c0:32:c3:
04:11:d8:71:59:3d:0a:3b:bd:81:1b:bd:00:a1:e6:
ee:21:10:dd:bd:b9:f7:32:19:72:5c:c9:1d:01:b3:
b2:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:FB:2F:DC:87:45:D5:FF:73:20:48:1D:93:51:D1:04:0C:80:3F:4E
X509v3 Authority Key Identifier:
keyid:89:C3:17:70:DB:72:98:95:C6:C3:FD:93:37:5E:5C:D5:61:3E:F3:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/icMXcNtymJXGw_2TN15c1WE-82o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/57b7a3-a739-4262-8b01-0c3d4e31eba4/1/icMXcNtymJXGw_2TN15c1WE-82o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/57b7a3-a739-4262-8b01-0c3d4e31eba4/1/icMXcNtymJXGw_2TN15c1WE-82o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:04:c7:2d:c5:93:29:c1:b0:8d:30:e5:0d:cb:2a:fd:ed:ad:
97:96:aa:1b:0f:e4:5c:97:cf:b8:8e:7a:f4:8e:99:1d:e7:86:
39:13:7b:db:c3:d9:38:46:b7:24:83:d2:f2:28:14:6c:90:22:
68:98:4f:16:f5:63:6b:8b:eb:0b:92:7e:21:26:ad:55:ca:c5:
08:b5:c6:31:a3:43:01:e5:85:e6:05:5c:fc:ef:85:56:9f:51:
f3:59:af:74:f3:c0:5f:f9:8e:08:fe:29:8e:af:8c:14:70:bf:
d3:75:84:21:41:18:28:a4:24:ca:73:fa:e1:87:c9:93:d4:29:
01:86:be:b9:75:dc:36:72:1a:ec:31:2a:4b:69:3f:c1:f0:1f:
16:9e:82:47:83:a2:08:ac:c0:d0:19:5b:14:4d:dc:66:ff:c1:
23:f8:a0:46:cf:e8:d8:22:5e:17:a0:ff:10:8f:38:a9:a5:57:
25:99:e2:7c:ae:43:80:1a:f2:dd:28:77:c5:43:2b:81:a7:11:
b5:75:a8:11:a2:1c:ff:d3:06:dc:17:b4:3d:f9:d7:1e:25:51:
2d:04:16:ee:4e:14:38:87:fd:78:c3:6d:23:ab:f8:50:a8:f2:
30:bc:40:ee:a8:ec:58:8e:63:0c:a2:7c:16:4f:c6:47:83:aa:
60:50:a1:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:10:49 2026 by rpki-client