Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft
File: 1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft (raw, json)
Hash identifier: d8Tsu56WIQhynxVVtLFgk4+QUiaL2nLa8aBnnDVvUeQ=
Subject key identifier: 62:B6:4F:DC:2E:2F:AD:F4:CF:C6:78:7C:F7:41:C4:02:6E:7C:20:CC
Authority key identifier: D4:22:36:74:33:76:5B:54:1A:37:39:0A:99:89:97:B7:37:C4:64:72
Certificate issuer: /CN=d422367433765b541a37390a998997b737c46472
Certificate serial: 019CA97CC6B9307D21565765A9A8A163DB53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1CI2dDN2W1QaNzkKmYmXtzfEZHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft
Manifest number: 17D8
Signing time: Sun 01 Mar 2026 13:00:52 +0000
Manifest this update: Sun 01 Mar 2026 13:00:52 +0000
Manifest next update: Mon 02 Mar 2026 13:00:52 +0000
Files and hashes: 1: 1CI2dDN2W1QaNzkKmYmXtzfEZHI.crl (hash: EQCRTcwj+nubw1KZZoafwaeSY8LdSHl+X8H1x3IbeIg=)
2: nmpthTHAT4WUcq8Q3IMochngGiw.roa (hash: WMNeejxSLtwCCkkRDHZIffdNUGROwkauBCQwzToW+EM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1CI2dDN2W1QaNzkKmYmXtzfEZHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 13:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7c:c6:b9:30:7d:21:56:57:65:a9:a8:a1:63:db:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d422367433765b541a37390a998997b737c46472
Validity
Not Before: Mar 1 13:00:52 2026 GMT
Not After : Mar 2 13:00:52 2026 GMT
Subject: CN=62b64fdc2e2fadf4cfc6787cf741c4026e7c20cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:82:10:e3:39:d1:fa:8f:46:58:a8:99:b3:e0:
e3:d3:ad:14:c2:52:77:97:d7:41:91:e8:ff:02:be:
05:53:07:3e:b3:53:3d:de:3b:9f:a0:84:ff:b5:f8:
c1:96:2d:4d:ae:cf:90:45:f2:9e:00:5e:b1:05:f1:
60:fc:07:e3:cc:9d:57:49:8c:87:4c:64:1b:b4:31:
25:3a:4a:6a:17:73:cb:22:91:d8:e9:e4:e4:e6:53:
0a:0d:72:d7:b8:35:29:1b:49:15:83:e4:9c:47:31:
60:87:c3:ff:06:4f:f3:16:15:1c:87:f9:0e:6b:ba:
ef:a1:ee:d9:b0:85:44:dd:89:f6:2d:20:78:2f:91:
23:23:f2:f6:16:ab:2b:87:19:32:98:f8:db:65:20:
ee:6e:b3:44:be:d2:26:e7:85:5a:b0:96:0a:83:bd:
7e:a9:05:1f:de:29:d0:2e:1d:15:a5:e3:07:83:42:
40:08:3b:85:2c:f7:e5:f1:a9:ae:c3:67:44:0d:27:
e6:da:ff:a6:5b:7a:77:36:1e:66:b7:f3:ff:61:73:
bf:b4:5a:75:8e:1e:74:05:5e:f2:bc:06:af:67:15:
81:89:6d:8d:5f:a2:c6:e6:26:c6:0b:80:cc:9a:96:
6c:13:69:b7:b2:99:95:d0:31:8f:fe:87:66:df:b7:
c0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:B6:4F:DC:2E:2F:AD:F4:CF:C6:78:7C:F7:41:C4:02:6E:7C:20:CC
X509v3 Authority Key Identifier:
keyid:D4:22:36:74:33:76:5B:54:1A:37:39:0A:99:89:97:B7:37:C4:64:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1CI2dDN2W1QaNzkKmYmXtzfEZHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:d6:64:78:c2:82:2a:22:a9:5d:41:21:72:ab:5b:72:46:03:
9f:a5:a9:dd:61:4f:6c:03:72:9f:25:a1:24:c0:c5:ad:aa:b9:
39:e8:e3:c5:56:2d:94:a1:4d:df:6b:e2:32:dd:50:78:49:d2:
ff:34:0d:26:2a:28:cb:01:45:04:59:b8:e1:e9:eb:fb:d5:e6:
0b:11:8f:00:f3:43:11:3d:0d:7a:e2:21:44:24:27:c9:53:0f:
3a:10:f0:ff:de:84:9a:e4:e4:b1:48:3a:b1:17:d0:39:51:b8:
1b:d4:8c:bc:5d:10:8a:5d:1f:76:a7:47:3b:17:19:eb:fc:e3:
68:a4:53:13:f8:ed:54:19:a3:30:07:68:d8:85:27:e2:9d:74:
8d:bc:01:12:2f:0a:ac:31:ae:7c:4b:20:e9:11:9e:0a:a9:23:
d8:88:32:bc:b9:31:0e:fd:01:b7:25:aa:55:44:bc:f8:b6:5f:
58:64:cc:4d:cc:19:ac:47:97:34:8d:2f:88:38:2a:74:4d:7f:
63:d6:00:8e:34:9a:74:b7:ce:64:25:88:92:65:d8:1e:07:ff:
1e:f5:23:e3:51:df:e6:71:08:e3:a2:db:d2:f7:1f:c6:ce:51:
b7:8f:5e:a1:ec:8e:25:7c:b2:c0:b3:96:1c:23:04:8e:95:53:
52:45:e0:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:59 2026 by rpki-client