Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.mft
File: icPJKk4dT-iFcr-mjJhcMeM2jII.mft (raw, json)
Hash identifier: b0Ap67JcnXzEcWlmLOb8OiifuqgGPraMgASspp4qw5Y=
Subject key identifier: 73:5D:53:A6:BF:21:F2:A9:99:73:1F:1A:DC:05:7F:17:6B:EE:F6:F0
Authority key identifier: 89:C3:C9:2A:4E:1D:4F:E8:85:72:BF:A6:8C:98:5C:31:E3:36:8C:82
Certificate issuer: /CN=89c3c92a4e1d4fe88572bfa68c985c31e3368c82
Certificate serial: 019D99D07A5234C5E3E529524B9707B70B3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/icPJKk4dT-iFcr-mjJhcMeM2jII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.mft
Manifest number: 0CCF
Signing time: Fri 17 Apr 2026 05:01:09 +0000
Manifest this update: Fri 17 Apr 2026 05:01:09 +0000
Manifest next update: Sat 18 Apr 2026 05:01:09 +0000
Files and hashes: 1: icPJKk4dT-iFcr-mjJhcMeM2jII.crl (hash: spsGsASYmRqDGGYZoqSMhmh2dv9gq5pUmVJAkgXNnF8=)
2: sohnlsGgCKHLAm9KP5jtzcQ4zgc.roa (hash: A8SuN+TdWXRmsPs52vkKLZkMKVRrAI+hpLud4HRnOAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.mft
rsync://rpki.ripe.net/repository/DEFAULT/icPJKk4dT-iFcr-mjJhcMeM2jII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:7a:52:34:c5:e3:e5:29:52:4b:97:07:b7:0b:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89c3c92a4e1d4fe88572bfa68c985c31e3368c82
Validity
Not Before: Apr 17 05:01:09 2026 GMT
Not After : Apr 18 05:01:09 2026 GMT
Subject: CN=735d53a6bf21f2a999731f1adc057f176beef6f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:7c:1e:c0:69:79:2a:f0:a7:05:e5:ed:ef:1b:
7d:4e:06:c4:0b:e0:87:2d:7a:ba:0d:5b:33:0b:be:
3f:27:6d:f2:85:ad:12:66:a9:b6:cd:2a:4d:5c:71:
11:89:7e:0d:45:9c:fa:ac:31:c2:d8:24:54:7a:34:
7b:bf:03:37:57:ff:e0:9b:8d:e5:5c:f1:7e:da:17:
d4:4c:3b:22:d0:b2:41:c9:8d:18:92:03:77:9e:89:
bc:61:ee:40:e2:02:11:3c:85:ef:fb:f2:7d:38:2e:
04:06:f0:fa:56:85:64:50:50:32:31:93:2d:a0:d9:
7b:4f:2e:71:59:6f:fc:2b:4e:4e:5c:e8:c1:c9:60:
f9:7d:1e:fd:5f:42:4d:0d:b9:e5:88:ef:6f:25:f3:
18:b0:c0:f8:08:b5:1b:3b:a6:5c:61:4c:52:f4:8d:
41:84:ff:1e:b2:9c:03:36:22:a8:90:27:02:70:f2:
4c:98:14:ad:7a:02:86:54:01:f1:85:af:4e:c4:b4:
f4:ee:2a:b7:eb:60:bf:5c:33:07:61:cc:e5:be:59:
f3:40:41:ae:84:ff:eb:7e:14:a4:a5:f5:5d:82:23:
4d:6e:cb:0d:28:ca:50:98:ca:98:32:35:5f:63:64:
21:cb:ab:51:d5:28:78:3e:53:d4:b9:c8:89:bf:f2:
4b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:5D:53:A6:BF:21:F2:A9:99:73:1F:1A:DC:05:7F:17:6B:EE:F6:F0
X509v3 Authority Key Identifier:
keyid:89:C3:C9:2A:4E:1D:4F:E8:85:72:BF:A6:8C:98:5C:31:E3:36:8C:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/icPJKk4dT-iFcr-mjJhcMeM2jII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:e3:93:ce:39:b5:e7:03:2f:f9:7d:56:b5:7a:e0:f4:e6:1f:
2a:a0:0e:7c:23:6d:f8:86:9d:1a:e0:ae:80:1a:c7:57:d6:c1:
a6:cc:61:49:40:ef:a1:96:75:02:22:d1:24:0d:31:fd:6a:5e:
19:93:2e:25:11:cd:b7:79:7a:e1:08:e3:9f:b6:5c:6f:bd:39:
bf:81:b3:da:ce:a2:c1:e8:df:e1:1e:b4:f1:bf:1e:c9:99:72:
1c:6c:2b:cd:2c:15:24:53:22:45:63:f1:3d:75:3d:a6:02:b9:
22:3c:94:04:38:93:2c:e5:7e:75:00:93:88:b3:1b:ad:78:3c:
b6:d9:1c:c1:3e:f6:55:95:63:4b:41:1b:85:c7:50:64:2e:6c:
99:83:d1:e2:4e:4c:a5:7d:f6:85:b9:c4:1a:d3:b2:7b:61:9d:
bd:83:c1:a9:1e:8d:1f:af:1a:3e:29:dc:13:4b:0e:a2:48:0c:
47:b2:b6:56:56:51:d3:7e:d8:83:19:a1:31:34:d6:4f:47:28:
50:fc:22:9a:46:80:e6:e7:3b:53:1d:5b:1b:59:59:20:e1:a0:
e0:9d:11:38:5a:c2:73:f4:73:89:c7:26:e7:0c:61:e5:74:f9:
2a:40:c5:c9:a0:21:2f:b1:03:81:33:72:2b:a5:3a:79:b6:8a:
1f:dc:e3:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:13:41 2026 by rpki-client