Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.mft
File: icPJKk4dT-iFcr-mjJhcMeM2jII.mft (raw, json)
Hash identifier: UFROzFvcoEx/D5oXVTfHvd+YHyNZZ2CENuIXGhh2kko=
Subject key identifier: 0E:6F:1E:11:A3:DC:D9:FD:FF:B0:0E:70:F9:70:1A:92:D0:68:B6:DA
Authority key identifier: 89:C3:C9:2A:4E:1D:4F:E8:85:72:BF:A6:8C:98:5C:31:E3:36:8C:82
Certificate issuer: /CN=89c3c92a4e1d4fe88572bfa68c985c31e3368c82
Certificate serial: 019CAC4738DE1CE87601764D1F8ED57FA408
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/icPJKk4dT-iFcr-mjJhcMeM2jII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.mft
Manifest number: 0C54
Signing time: Mon 02 Mar 2026 02:01:14 +0000
Manifest this update: Mon 02 Mar 2026 02:01:14 +0000
Manifest next update: Tue 03 Mar 2026 02:01:14 +0000
Files and hashes: 1: icPJKk4dT-iFcr-mjJhcMeM2jII.crl (hash: J8i9h2rhfnB3733tpyADXSUItCb3q+mcsWxkJ+rlXPU=)
2: sohnlsGgCKHLAm9KP5jtzcQ4zgc.roa (hash: A8SuN+TdWXRmsPs52vkKLZkMKVRrAI+hpLud4HRnOAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.mft
rsync://rpki.ripe.net/repository/DEFAULT/icPJKk4dT-iFcr-mjJhcMeM2jII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:38:de:1c:e8:76:01:76:4d:1f:8e:d5:7f:a4:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89c3c92a4e1d4fe88572bfa68c985c31e3368c82
Validity
Not Before: Mar 2 02:01:14 2026 GMT
Not After : Mar 3 02:01:14 2026 GMT
Subject: CN=0e6f1e11a3dcd9fdffb00e70f9701a92d068b6da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7b:95:ef:cf:ff:64:a0:f8:c7:91:cd:41:f4:
57:38:d1:be:17:4f:20:3a:3f:d9:f2:a4:ad:01:0f:
d3:12:ae:aa:db:24:fc:73:da:3c:53:11:39:6a:22:
79:72:17:5d:2f:5c:cf:69:75:8b:bc:22:cc:6f:17:
66:75:84:a3:e0:f0:b6:f8:f8:70:98:cf:a5:0b:1d:
02:bb:31:bc:f2:21:39:1a:35:aa:3d:91:96:e5:6d:
f4:6a:a4:f7:a2:ce:60:e9:8f:58:04:56:8f:9f:84:
51:be:6c:4e:e6:05:78:09:24:6a:f5:15:9e:67:f4:
eb:4a:20:86:06:75:3d:f7:3e:a8:85:9d:ff:60:06:
3a:67:32:ca:90:69:44:62:5d:bd:16:49:45:83:73:
01:db:e7:c0:23:78:72:e9:78:ae:9c:7b:d1:25:59:
a9:47:8a:3b:25:01:b7:a3:c9:b5:89:75:78:6a:66:
b0:d0:31:8a:15:4c:01:9e:55:a8:a2:c6:b8:37:38:
04:09:6c:0f:ab:a4:4c:74:76:7d:73:67:d4:e5:98:
ac:97:ca:1f:7c:b8:c6:55:6f:85:a0:2f:16:73:d3:
f3:bd:b7:e9:58:87:9f:d9:c7:c7:65:f3:97:d9:eb:
98:93:a7:e3:7a:d6:fa:df:59:6c:2c:83:b4:7b:e6:
cc:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:6F:1E:11:A3:DC:D9:FD:FF:B0:0E:70:F9:70:1A:92:D0:68:B6:DA
X509v3 Authority Key Identifier:
keyid:89:C3:C9:2A:4E:1D:4F:E8:85:72:BF:A6:8C:98:5C:31:E3:36:8C:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/icPJKk4dT-iFcr-mjJhcMeM2jII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:af:3f:ff:15:f4:fd:32:7c:c9:52:d0:a6:f8:31:62:3f:a7:
b3:7f:d8:86:bf:01:26:c7:34:1f:70:8a:ea:91:c5:27:41:99:
12:e3:85:b0:9f:3a:c2:2d:b8:df:ed:aa:b2:08:11:c0:7c:b1:
af:a2:79:e6:e9:a6:b5:a1:3b:7f:8c:3d:a2:6d:5f:61:91:6a:
af:4f:8e:b5:28:ea:e5:53:63:2f:2e:65:74:0d:8c:f1:dc:b3:
6a:29:64:3e:dc:14:95:af:3a:e6:dd:f0:89:5b:cc:dd:94:14:
90:f8:05:aa:09:69:98:1d:69:c1:b7:ed:2d:a5:b3:d5:73:d5:
5d:e1:3b:1a:ec:1e:72:94:b1:92:46:74:50:69:87:83:89:be:
24:8e:d4:92:78:b0:5b:e0:e6:0c:eb:96:0d:f0:33:79:12:85:
c0:49:1a:04:4d:08:1f:5d:b4:50:be:7a:65:96:7f:9a:ad:11:
1e:a9:54:3e:30:f6:82:93:fb:73:6d:25:b8:40:89:dc:fa:c0:
04:e2:d1:09:fd:ca:12:1b:32:1e:16:a8:b7:6f:07:7b:68:4c:
d8:44:c3:e1:cd:64:5f:e0:c3:5f:3d:22:a3:8f:6a:19:c7:28:
47:1c:89:e8:2f:94:80:1c:b7:a8:eb:2a:64:9a:1f:e3:49:68:
9b:e0:1a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:35:30 2026 by rpki-client