Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.mft
File: licbYtGOSsd8YQlpDqrkzDTQ6bY.mft (raw, json)
Hash identifier: dP2YhxfSwg0J8ZY+oHm+EMf1HkiWyoh8VSDaGYYAruU=
Subject key identifier: E6:53:F7:7E:54:3B:7F:18:57:77:97:9A:22:69:A6:28:5E:68:E8:E9
Authority key identifier: 96:27:1B:62:D1:8E:4A:C7:7C:61:09:69:0E:AA:E4:CC:34:D0:E9:B6
Certificate issuer: /CN=96271b62d18e4ac77c6109690eaae4cc34d0e9b6
Certificate serial: 01A08B9F79BA984A057584DD936670358968
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/licbYtGOSsd8YQlpDqrkzDTQ6bY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.mft
Manifest number: 0EFE
Signing time: Thu 10 Sep 2026 14:01:19 +0000
Manifest this update: Thu 10 Sep 2026 14:01:19 +0000
Manifest next update: Fri 11 Sep 2026 14:01:19 +0000
Files and hashes: 1: KUOqjCxyAKEhTbAupzFiFaYvtyw.roa (hash: os3TCsMwZbVNQhnConL+JRAfWiuBh8Xi7SXGh1W8p5c=)
2: aZ8AkYbZDzLWgutOqU36IbLeq9I.roa (hash: cnNNZQp5lYYOI91A8raXO1cOrkw9J8G5tTC55Sx7Npk=)
3: licbYtGOSsd8YQlpDqrkzDTQ6bY.crl (hash: dHmHbR2SjLTiZ8HwQHmm0sRurA0hg7uesc6jLUKNUeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.mft
rsync://rpki.ripe.net/repository/DEFAULT/licbYtGOSsd8YQlpDqrkzDTQ6bY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:9f:79:ba:98:4a:05:75:84:dd:93:66:70:35:89:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96271b62d18e4ac77c6109690eaae4cc34d0e9b6
Validity
Not Before: Sep 10 14:01:19 2026 GMT
Not After : Sep 11 14:01:19 2026 GMT
Subject: CN=e653f77e543b7f185777979a2269a6285e68e8e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f8:11:f2:43:97:2e:b6:c1:df:7a:c2:c8:3a:
d9:ba:50:39:da:f5:9e:b1:d9:8d:3e:ff:32:4f:73:
f3:9d:c1:97:b7:1b:e6:49:2d:33:9a:fc:cd:6f:29:
4f:9d:f7:e3:93:de:6c:00:fa:f1:a6:dc:d4:92:78:
f4:8a:5c:dd:b4:fb:25:90:6e:cc:38:d4:a6:97:33:
c2:81:da:16:af:6a:16:b9:be:6e:d6:fc:ed:66:f8:
22:60:16:29:c2:a9:49:95:ab:88:e3:03:0e:7f:46:
19:34:f9:bd:98:b2:2c:26:4a:05:06:d8:2d:fc:84:
6d:5a:de:63:7d:07:25:1e:ef:8e:87:32:58:92:38:
8d:ef:90:b1:58:5e:8f:ba:34:33:ff:02:84:30:42:
14:47:c2:c7:73:1b:5c:34:a1:80:64:a0:9f:e4:0a:
57:77:4b:90:8d:7c:ad:a6:6c:da:ae:b5:0b:ac:65:
e4:f9:4c:46:c4:2c:33:1a:da:da:c7:e3:3b:16:01:
0b:5f:8c:ea:3a:76:99:e1:ac:15:d9:79:d6:b3:79:
5b:1c:24:b4:11:69:a3:c2:cc:e7:f5:59:55:91:01:
d8:54:3b:92:78:e6:a3:dc:57:c7:a9:fc:59:eb:6d:
77:e0:07:a6:ee:51:65:72:5f:17:30:66:9b:9d:a5:
87:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:53:F7:7E:54:3B:7F:18:57:77:97:9A:22:69:A6:28:5E:68:E8:E9
X509v3 Authority Key Identifier:
keyid:96:27:1B:62:D1:8E:4A:C7:7C:61:09:69:0E:AA:E4:CC:34:D0:E9:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/licbYtGOSsd8YQlpDqrkzDTQ6bY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:7c:81:cb:76:a4:83:bd:da:ae:22:79:53:4c:8a:17:6d:b9:
db:fe:73:ff:0d:c7:8c:12:99:a1:b5:26:fa:f3:9d:67:ba:b8:
5f:bd:88:28:e8:d2:1e:95:09:19:22:1b:bc:e9:89:37:bb:19:
fb:c5:f7:42:88:83:b2:74:12:e6:8c:9d:2f:eb:07:33:e3:f2:
3e:94:80:76:20:ee:f0:33:27:b6:b7:d5:9c:2a:b5:0d:17:c2:
46:10:f5:c2:3e:69:a2:25:00:6d:12:ec:e5:53:e9:6c:2d:ce:
0b:fc:32:e9:eb:a3:a1:e6:54:c0:01:3d:53:20:c9:7d:a9:b4:
2b:2b:9d:9b:da:23:eb:d8:aa:0c:92:fa:5c:4d:c6:42:59:0f:
35:6d:6e:ad:e5:ae:5d:e2:3b:13:56:0c:6a:d8:0f:e6:2e:55:
0f:44:17:ed:81:5e:73:86:5d:ca:9d:bf:29:31:36:79:26:f5:
f0:d2:1c:76:df:95:ad:ea:08:d0:4c:11:af:f9:96:58:6e:4a:
1f:c3:0d:44:b9:2d:fa:fc:f0:b5:21:1e:00:4d:eb:1e:ef:dd:
70:36:a1:ac:69:94:b9:5e:fc:d1:56:a7:a7:bc:f8:57:60:6a:
e1:6b:fe:a2:a0:85:f0:e4:63:df:2a:d3:e6:1d:59:51:e1:de:
a4:70:ee:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCLn3m6mEoFdYTdk2ZwNYloMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2MjcxYjYyZDE4ZTRhYzc3YzYxMDk2OTBlYWFlNGNjMzRk
MGU5YjYwHhcNMjYwOTEwMTQwMTE5WhcNMjYwOTExMTQwMTE5WjAzMTEwLwYDVQQD
EyhlNjUzZjc3ZTU0M2I3ZjE4NTc3Nzk3OWEyMjY5YTYyODVlNjhlOGU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/gR8kOXLrbB33rCyDrZulA52vWe
sdmNPv8yT3PzncGXtxvmSS0zmvzNbylPnffjk95sAPrxptzUknj0ilzdtPslkG7M
ONSmlzPCgdoWr2oWub5u1vztZvgiYBYpwqlJlauI4wMOf0YZNPm9mLIsJkoFBtgt
/IRtWt5jfQclHu+OhzJYkjiN75CxWF6PujQz/wKEMEIUR8LHcxtcNKGAZKCf5ApX
d0uQjXytpmzarrULrGXk+UxGxCwzGtrax+M7FgELX4zqOnaZ4awV2XnWs3lbHCS0
EWmjwszn9VlVkQHYVDuSeOaj3FfHqfxZ62134Aem7lFlcl8XMGabnaWHRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOZT935UO38YV3eXmiJppiheaOjpMB8GA1UdIwQY
MBaAFJYnG2LRjkrHfGEJaQ6q5Mw00Om2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGljYll0R09Tc2Q4WVFscERxcmt6RFRRNmJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9mNmI2MGItNTgwOC00OGEyLTgyMDMt
MWNhM2ZiYmZiYTNmLzEvbGljYll0R09Tc2Q4WVFscERxcmt6RFRRNmJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9mNmI2MGItNTgwOC00OGEyLTgyMDMtMWNhM2ZiYmZiYTNm
LzEvbGljYll0R09Tc2Q4WVFscERxcmt6RFRRNmJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL3yBy3ak
g73ariJ5U0yKF2252/5z/w3HjBKZobUm+vOdZ7q4X72IKOjSHpUJGSIbvOmJN7sZ
+8X3QoiDsnQS5oydL+sHM+PyPpSAdiDu8DMntrfVnCq1DRfCRhD1wj5poiUAbRLs
5VPpbC3OC/wy6eujoeZUwAE9UyDJfam0Kyudm9oj69iqDJL6XE3GQlkPNW1ureWu
XeI7E1YMatgP5i5VD0QX7YFec4Zdyp2/KTE2eSb18NIcdt+VreoI0EwRr/mWWG5K
H8MNRLkt+vzwtSEeAE3rHu/dcDahrGmUuV780Vanp7z4V2Bq4Wv+oqCF8ORj3yrT
5h1ZUeHepHDuMQ==
-----END CERTIFICATE-----
Generated at Thu Sep 10 17:25:04 2026 by rpki-client