Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.mft
File: licbYtGOSsd8YQlpDqrkzDTQ6bY.mft (raw, json)
Hash identifier: 4F8dK4vCU8Pvz5lzOJI36g9S0aHzUzMr1TBJt/QMCnA=
Subject key identifier: 39:6E:78:F2:FD:A3:06:A8:2E:98:BA:05:54:F2:B3:4E:7B:AC:45:2B
Authority key identifier: 96:27:1B:62:D1:8E:4A:C7:7C:61:09:69:0E:AA:E4:CC:34:D0:E9:B6
Certificate issuer: /CN=96271b62d18e4ac77c6109690eaae4cc34d0e9b6
Certificate serial: 019D39E5A4B418C2AD6BB68C71CA2DA79BA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/licbYtGOSsd8YQlpDqrkzDTQ6bY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.mft
Manifest number: 0D46
Signing time: Sun 29 Mar 2026 14:00:44 +0000
Manifest this update: Sun 29 Mar 2026 14:00:44 +0000
Manifest next update: Mon 30 Mar 2026 14:00:44 +0000
Files and hashes: 1: KUOqjCxyAKEhTbAupzFiFaYvtyw.roa (hash: os3TCsMwZbVNQhnConL+JRAfWiuBh8Xi7SXGh1W8p5c=)
2: aZ8AkYbZDzLWgutOqU36IbLeq9I.roa (hash: cnNNZQp5lYYOI91A8raXO1cOrkw9J8G5tTC55Sx7Npk=)
3: licbYtGOSsd8YQlpDqrkzDTQ6bY.crl (hash: 20pGYCZ3H8z/0/2op/WPH8+OGtriud2srTxFh+RYViA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.mft
rsync://rpki.ripe.net/repository/DEFAULT/licbYtGOSsd8YQlpDqrkzDTQ6bY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:a4:b4:18:c2:ad:6b:b6:8c:71:ca:2d:a7:9b:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96271b62d18e4ac77c6109690eaae4cc34d0e9b6
Validity
Not Before: Mar 29 14:00:44 2026 GMT
Not After : Mar 30 14:00:44 2026 GMT
Subject: CN=396e78f2fda306a82e98ba0554f2b34e7bac452b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9d:7b:17:17:cf:9c:8e:90:58:1b:a8:5e:ca:
b9:de:00:83:22:cf:3c:16:db:ca:1b:bf:e7:6d:d2:
c6:65:b7:c9:b8:29:fa:1b:c3:d4:77:95:dc:ae:c4:
d4:1b:b1:5d:60:d8:14:2c:36:ae:25:85:84:83:71:
82:fd:b3:98:dd:f2:22:60:91:0e:6b:76:2d:84:a8:
7a:26:48:bb:b9:6e:92:d6:76:ac:81:54:60:fd:db:
c6:67:b0:6f:66:94:98:f4:68:16:70:96:ea:57:c0:
de:2d:a0:0a:d3:28:d7:ff:60:19:62:1e:10:56:06:
5e:3a:bf:b5:bb:74:13:43:c8:f3:05:0d:7c:11:7e:
f9:80:fb:bb:3d:7e:9a:b8:5e:a5:bb:6c:c8:bf:7b:
84:1b:9c:49:51:d2:94:e6:31:b8:f1:70:9e:48:5d:
81:ae:58:f4:7e:30:b8:a9:bf:cf:01:80:2b:f7:33:
19:38:78:34:31:f8:73:c4:9c:71:37:32:94:4d:b6:
dd:10:2e:2d:49:66:a6:40:b2:c1:32:51:30:63:a9:
0f:1d:c3:fd:86:04:e6:b2:50:be:a1:f5:6a:9a:41:
1d:53:94:d9:bd:dd:2b:7c:ae:dd:46:a4:16:4b:0f:
01:6a:d1:bf:81:d7:2b:b4:43:d1:e2:cf:dc:7d:61:
15:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:6E:78:F2:FD:A3:06:A8:2E:98:BA:05:54:F2:B3:4E:7B:AC:45:2B
X509v3 Authority Key Identifier:
keyid:96:27:1B:62:D1:8E:4A:C7:7C:61:09:69:0E:AA:E4:CC:34:D0:E9:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/licbYtGOSsd8YQlpDqrkzDTQ6bY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:e7:b3:f9:dd:4e:f5:4b:ce:5d:c6:f4:9e:b7:9e:33:fd:de:
d9:2b:df:92:c3:9c:13:77:49:ac:24:bf:61:fe:1f:3e:9f:4c:
94:e4:91:27:46:f0:e8:2d:cc:6f:8e:2e:df:61:ed:dc:2f:0c:
c3:69:e6:c3:b0:b6:9c:9a:18:ba:47:11:0a:28:4c:e5:b4:4d:
7b:91:30:ce:52:3c:02:95:cc:3b:f3:9f:56:f2:26:bc:d9:d8:
5a:da:8a:ed:58:4b:ea:23:46:a0:57:4d:39:6e:65:a8:e6:da:
73:cd:64:11:8a:d4:ad:35:ef:53:15:80:ea:db:9c:fa:b2:36:
d2:34:6a:6b:d2:58:aa:7c:36:b1:26:26:36:eb:6e:37:5b:24:
bf:bf:ac:ce:cc:bb:d9:88:db:31:57:77:d5:d0:f5:d8:43:64:
24:f3:f8:b7:df:a6:1e:23:d7:9c:b7:b4:1a:a7:b5:f8:b8:b4:
7d:36:1d:d7:f6:c7:7b:67:36:1c:b1:b4:f6:fe:25:0f:8e:af:
e8:fe:7b:bf:5d:93:87:9b:8f:5e:8b:05:67:a0:90:35:82:66:
c8:ca:12:6d:5e:dc:e0:1a:5f:0e:0f:c8:0a:5d:e0:24:a5:37:
84:9a:c0:31:e0:85:3a:3b:f7:bf:ef:ac:5e:b4:bc:65:9b:f0:
d9:2c:bf:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:40:16 2026 by rpki-client