Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.mft
File: rLICUNTN02Zxm5adb0EjAcE-uQE.mft (raw, json)
Hash identifier: LOqucS1tSMghqluxu39jtrYy6FrG2FSJ87LCjAKpGRI=
Subject key identifier: 98:04:3A:2B:5A:66:59:D1:06:6A:89:03:E2:37:00:BA:FF:F2:49:02
Authority key identifier: AC:B2:02:50:D4:CD:D3:66:71:9B:96:9D:6F:41:23:01:C1:3E:B9:01
Certificate issuer: /CN=acb20250d4cdd366719b969d6f412301c13eb901
Certificate serial: 019D37F772578E7DE35081B9119E5F472FBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rLICUNTN02Zxm5adb0EjAcE-uQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 05:00:56 +0000
Manifest this update: Sun 29 Mar 2026 05:00:56 +0000
Manifest next update: Mon 30 Mar 2026 05:00:56 +0000
Files and hashes: 1: 6Y7UUUXvw-PaME2ae-Db8-eLow4.roa (hash: 93NzqW0eaEjLpzAyzS+ITs+WJkp6mSQ9IPQy/xcIc0U=)
2: _ONnyoGJy4BONjnQqy_VIZR_lsQ.asa (hash: fg8lcyp5xk0Ls5QPpNy6ZcES0R4cZ7H66Wj2T/SkgFA=)
3: rLICUNTN02Zxm5adb0EjAcE-uQE.crl (hash: IqUsyJD3VuXDc7X2d9gpUCCh2IFfsALoR7NftOVOj1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/rLICUNTN02Zxm5adb0EjAcE-uQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:72:57:8e:7d:e3:50:81:b9:11:9e:5f:47:2f:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acb20250d4cdd366719b969d6f412301c13eb901
Validity
Not Before: Mar 29 05:00:56 2026 GMT
Not After : Mar 30 05:00:56 2026 GMT
Subject: CN=98043a2b5a6659d1066a8903e23700bafff24902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:89:f6:57:bc:e2:ba:1c:64:2a:d8:d3:a8:8c:
72:f7:fc:52:1f:a3:b4:be:ab:6c:b5:e9:2b:b6:3e:
64:f6:c1:70:8c:4a:51:ea:c7:87:92:50:3b:51:69:
50:ee:ff:e6:d6:0a:d8:78:2a:64:80:95:c0:84:50:
7b:dc:b0:37:e9:f0:12:ae:2f:d6:63:15:1f:68:c3:
8b:81:61:d6:99:b6:85:08:18:d0:f3:f8:85:96:e5:
70:e8:dc:1e:f2:12:f1:6b:60:7a:12:d7:e4:5f:8b:
10:3a:b7:b0:7b:8d:b8:a0:a8:7a:99:d4:30:ae:d4:
c6:79:b7:47:ea:4a:c9:2c:37:74:0c:3f:24:c9:f7:
53:7e:cc:41:e2:2e:6d:44:95:50:d4:33:80:a9:08:
d9:ff:59:cc:31:fc:95:ee:3c:25:83:68:95:0f:ba:
f8:ff:e9:fd:44:e9:31:ad:22:4c:78:7d:8b:26:7b:
f7:35:00:a6:ad:9a:87:6e:a8:31:ef:c7:ca:88:61:
c1:09:84:50:95:21:9f:b2:6b:0e:f9:8c:58:53:f7:
b6:30:cf:71:8e:f4:1c:73:88:3d:7a:5c:37:de:ea:
a8:10:30:c7:01:60:d0:91:6c:dc:1c:7e:53:be:2f:
f2:d8:76:31:1b:7b:6f:d9:8c:cb:27:cd:b6:73:22:
1e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:04:3A:2B:5A:66:59:D1:06:6A:89:03:E2:37:00:BA:FF:F2:49:02
X509v3 Authority Key Identifier:
keyid:AC:B2:02:50:D4:CD:D3:66:71:9B:96:9D:6F:41:23:01:C1:3E:B9:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLICUNTN02Zxm5adb0EjAcE-uQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:d5:cc:7d:64:f0:7b:61:f1:59:0f:76:8e:7c:ad:07:f6:b1:
99:60:22:32:8b:5b:df:f9:e3:02:ff:f9:77:ff:f5:a8:22:50:
8a:0d:f0:59:12:6e:15:6b:fc:e0:00:d5:a9:69:1d:25:aa:3b:
41:d4:53:2b:0b:96:db:4f:48:d8:9a:c7:c7:2f:9f:d3:a7:45:
c2:fb:3a:d8:18:99:56:e5:06:6e:b8:45:bc:5e:d8:7f:81:1c:
97:9b:4a:c8:ca:2d:f5:88:78:74:7a:4a:e9:b2:ae:6a:a6:6c:
82:ff:ba:d2:d1:2a:5e:60:5a:d7:8b:a1:71:4c:fd:df:cb:ba:
d7:b5:8a:df:70:35:c9:81:40:77:f6:f9:cf:84:c9:13:73:93:
cb:a3:07:5a:c1:16:3e:78:70:08:aa:80:19:6d:25:df:0f:02:
00:d2:91:e2:4b:f5:1d:ef:3d:32:dd:03:be:51:d4:2c:6d:05:
9e:e5:73:f1:bd:b9:bd:a1:84:40:d6:8c:9d:8e:68:8a:ca:0e:
e5:3d:b3:36:ee:8a:3d:7e:70:46:c2:cf:26:33:68:32:4e:2f:
07:66:21:de:71:15:70:32:d5:9f:05:3a:f5:bd:26:ad:11:b0:
e8:79:40:35:cc:5d:3a:17:67:86:49:fc:e3:e0:b4:bc:1d:9b:
1c:28:84:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:59:53 2026 by rpki-client