Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/57b7a3-a739-4262-8b01-0c3d4e31eba4/1/icMXcNtymJXGw_2TN15c1WE-82o.mft
File: icMXcNtymJXGw_2TN15c1WE-82o.mft (raw, json)
Hash identifier: 86vqhcPodApteensPGfcRDq5WJiq97Nm9R9VEhjEFrY=
Subject key identifier: 62:56:A5:CD:A1:68:40:CC:1E:E6:10:3A:B5:D3:FC:A7:74:CB:64:84
Authority key identifier: 89:C3:17:70:DB:72:98:95:C6:C3:FD:93:37:5E:5C:D5:61:3E:F3:6A
Certificate issuer: /CN=89c31770db729895c6c3fd93375e5cd5613ef36a
Certificate serial: 019DA3E6B1CB22C4DE66B5A8A67B625AD804
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/icMXcNtymJXGw_2TN15c1WE-82o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/57b7a3-a739-4262-8b01-0c3d4e31eba4/1/icMXcNtymJXGw_2TN15c1WE-82o.mft
Manifest number: 18C6
Signing time: Sun 19 Apr 2026 04:01:38 +0000
Manifest this update: Sun 19 Apr 2026 04:01:38 +0000
Manifest next update: Mon 20 Apr 2026 04:01:38 +0000
Files and hashes: 1: ZqdN75hOuragHWh1sW0H53ieou8.roa (hash: VQoXtyLhwzZzJr4fc3dxsvsJER7uYvAei5g/P1rkmVA=)
2: icMXcNtymJXGw_2TN15c1WE-82o.crl (hash: zDJXsRoWHKP6nOJyePxjNPsb+XPbH5mA/ZQnWrBv9S0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/57b7a3-a739-4262-8b01-0c3d4e31eba4/1/icMXcNtymJXGw_2TN15c1WE-82o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/57b7a3-a739-4262-8b01-0c3d4e31eba4/1/icMXcNtymJXGw_2TN15c1WE-82o.mft
rsync://rpki.ripe.net/repository/DEFAULT/icMXcNtymJXGw_2TN15c1WE-82o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:b1:cb:22:c4:de:66:b5:a8:a6:7b:62:5a:d8:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89c31770db729895c6c3fd93375e5cd5613ef36a
Validity
Not Before: Apr 19 04:01:38 2026 GMT
Not After : Apr 20 04:01:38 2026 GMT
Subject: CN=6256a5cda16840cc1ee6103ab5d3fca774cb6484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:ba:12:c1:a7:01:ee:05:28:73:33:ea:9f:ab:
2c:f5:26:2e:e5:03:bd:7b:b8:9e:94:61:8b:54:7f:
84:d2:fa:6e:38:54:33:47:49:e2:ac:2c:5d:74:73:
b2:7e:89:31:f9:e2:cd:6a:56:39:56:7b:cd:b4:b1:
3e:ee:ae:25:b7:de:79:fd:74:f2:62:f5:e7:4d:42:
3b:4a:89:4e:49:72:0e:88:57:eb:3a:c7:51:16:90:
6e:32:1d:f3:02:65:de:da:a3:a1:fb:53:7d:69:18:
ef:b2:78:aa:17:e8:16:17:5b:a2:0a:f4:b2:49:80:
00:86:aa:77:f3:90:e6:ff:03:86:19:8d:37:73:63:
bf:ea:35:97:a9:8e:24:96:3d:28:4d:4a:1e:48:45:
21:50:14:3e:9c:a2:f0:a6:fe:6f:40:4f:ca:14:1d:
e0:12:82:d6:25:d5:18:cc:b7:ab:df:a1:8b:7e:e5:
da:de:b3:ce:c4:4d:67:66:51:07:49:61:3c:3d:46:
fa:8f:36:91:14:1e:d0:e6:5a:44:3f:ba:dd:7e:89:
23:15:b7:7b:fa:99:fb:88:6c:b8:95:25:0c:b8:30:
61:49:48:e4:d8:56:dd:71:cc:03:6c:ed:49:2a:e5:
bb:09:16:5d:3b:25:8c:c0:82:d7:5b:90:3f:ca:bd:
7e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:56:A5:CD:A1:68:40:CC:1E:E6:10:3A:B5:D3:FC:A7:74:CB:64:84
X509v3 Authority Key Identifier:
keyid:89:C3:17:70:DB:72:98:95:C6:C3:FD:93:37:5E:5C:D5:61:3E:F3:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/icMXcNtymJXGw_2TN15c1WE-82o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/57b7a3-a739-4262-8b01-0c3d4e31eba4/1/icMXcNtymJXGw_2TN15c1WE-82o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/57b7a3-a739-4262-8b01-0c3d4e31eba4/1/icMXcNtymJXGw_2TN15c1WE-82o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:46:0b:ae:ed:82:0a:38:6a:e4:f8:c5:55:bf:20:b4:cc:e7:
71:4e:71:c7:b4:3b:7b:6e:9e:a3:45:08:f1:c1:c1:0f:8a:cf:
30:05:33:2a:a3:57:4e:74:5e:a8:1a:31:cc:0f:96:ce:47:12:
3a:dd:1d:d5:6f:18:b0:ee:52:7c:da:b7:ac:46:57:24:64:73:
30:3b:1d:71:44:48:3b:15:5a:df:a2:b7:e9:8c:55:f4:2b:c6:
7e:e5:a7:e4:d4:bd:19:55:13:73:25:70:a5:67:16:3d:e4:49:
9a:db:bf:aa:bc:3d:da:63:83:bf:42:7b:6c:cc:35:52:b9:c5:
38:63:73:e9:04:83:6a:d9:f2:27:c8:39:dd:3d:a9:43:42:b7:
90:58:50:35:e6:d7:f7:d5:13:2c:9f:74:77:7b:1a:61:e5:8c:
b4:3e:52:56:52:a2:db:b5:c8:dc:90:30:c1:9e:d7:f2:89:b0:
42:1d:6e:8e:bc:f9:0c:e3:f1:2a:7f:1e:d8:9e:c6:6f:44:e0:
7b:53:7d:ea:9c:46:43:6a:21:cb:9b:e3:ac:58:2f:18:48:f2:
03:a7:0e:89:ba:6e:4c:f3:48:98:2b:5e:48:98:70:01:d2:ab:
67:c7:50:9d:75:32:53:ed:16:d1:67:47:d4:8d:d8:d2:74:7a:
82:21:c0:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2j5rHLIsTeZrWopntiWtgEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5YzMxNzcwZGI3Mjk4OTVjNmMzZmQ5MzM3NWU1Y2Q1NjEz
ZWYzNmEwHhcNMjYwNDE5MDQwMTM4WhcNMjYwNDIwMDQwMTM4WjAzMTEwLwYDVQQD
Eyg2MjU2YTVjZGExNjg0MGNjMWVlNjEwM2FiNWQzZmNhNzc0Y2I2NDg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9boSwacB7gUoczPqn6ss9SYu5QO9
e7ielGGLVH+E0vpuOFQzR0nirCxddHOyfokx+eLNalY5VnvNtLE+7q4lt955/XTy
YvXnTUI7SolOSXIOiFfrOsdRFpBuMh3zAmXe2qOh+1N9aRjvsniqF+gWF1uiCvSy
SYAAhqp385Dm/wOGGY03c2O/6jWXqY4klj0oTUoeSEUhUBQ+nKLwpv5vQE/KFB3g
EoLWJdUYzLer36GLfuXa3rPOxE1nZlEHSWE8PUb6jzaRFB7Q5lpEP7rdfokjFbd7
+pn7iGy4lSUMuDBhSUjk2FbdccwDbO1JKuW7CRZdOyWMwILXW5A/yr1+TQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGJWpc2haEDMHuYQOrXT/Kd0y2SEMB8GA1UdIwQY
MBaAFInDF3DbcpiVxsP9kzdeXNVhPvNqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWNNWGNOdHltSlhHd18yVE4xNWMxV0UtODJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi81N2I3YTMtYTczOS00MjYyLThiMDEt
MGMzZDRlMzFlYmE0LzEvaWNNWGNOdHltSlhHd18yVE4xNWMxV0UtODJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi81N2I3YTMtYTczOS00MjYyLThiMDEtMGMzZDRlMzFlYmE0
LzEvaWNNWGNOdHltSlhHd18yVE4xNWMxV0UtODJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADEYLru2C
Cjhq5PjFVb8gtMzncU5xx7Q7e26eo0UI8cHBD4rPMAUzKqNXTnReqBoxzA+WzkcS
Ot0d1W8YsO5SfNq3rEZXJGRzMDsdcURIOxVa36K36YxV9CvGfuWn5NS9GVUTcyVw
pWcWPeRJmtu/qrw92mODv0J7bMw1UrnFOGNz6QSDatnyJ8g53T2pQ0K3kFhQNebX
99UTLJ90d3saYeWMtD5SVlKi27XI3JAwwZ7X8omwQh1ujrz5DOPxKn8e2J7Gb0Tg
e1N96pxGQ2ohy5vjrFgvGEjyA6cOibpuTPNImCteSJhwAdKrZ8dQnXUyU+0W0WdH
1I3Y0nR6giHAtg==
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:32:54 2026 by rpki-client