Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.mft
File: licbYtGOSsd8YQlpDqrkzDTQ6bY.mft (raw, json)
Hash identifier: R8vfY1l8O0QPL1plUEfkbe6wlB4k4gVYHd92Q/lp4jA=
Subject key identifier: 20:7F:8E:A8:64:0F:F1:47:33:9A:E3:02:1C:19:D8:72:E3:77:8C:B8
Authority key identifier: 96:27:1B:62:D1:8E:4A:C7:7C:61:09:69:0E:AA:E4:CC:34:D0:E9:B6
Certificate issuer: /CN=96271b62d18e4ac77c6109690eaae4cc34d0e9b6
Certificate serial: 019D2695F3C47E67D929FE512EB34D2036AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/licbYtGOSsd8YQlpDqrkzDTQ6bY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.mft
Manifest number: 0D3C
Signing time: Wed 25 Mar 2026 20:00:54 +0000
Manifest this update: Wed 25 Mar 2026 20:00:54 +0000
Manifest next update: Thu 26 Mar 2026 20:00:54 +0000
Files and hashes: 1: KUOqjCxyAKEhTbAupzFiFaYvtyw.roa (hash: os3TCsMwZbVNQhnConL+JRAfWiuBh8Xi7SXGh1W8p5c=)
2: aZ8AkYbZDzLWgutOqU36IbLeq9I.roa (hash: cnNNZQp5lYYOI91A8raXO1cOrkw9J8G5tTC55Sx7Npk=)
3: licbYtGOSsd8YQlpDqrkzDTQ6bY.crl (hash: H1ncYuvXWqS7FyPveO2/5JPZckvkDKy16iaIsg1d40Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.mft
rsync://rpki.ripe.net/repository/DEFAULT/licbYtGOSsd8YQlpDqrkzDTQ6bY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:f3:c4:7e:67:d9:29:fe:51:2e:b3:4d:20:36:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96271b62d18e4ac77c6109690eaae4cc34d0e9b6
Validity
Not Before: Mar 25 20:00:54 2026 GMT
Not After : Mar 26 20:00:54 2026 GMT
Subject: CN=207f8ea8640ff147339ae3021c19d872e3778cb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:7c:55:63:52:19:1e:ea:95:98:41:ef:43:ba:
7d:21:44:ad:85:7b:42:1e:ae:d6:e3:9b:ba:4d:76:
4d:eb:0f:c4:b2:a8:66:6f:25:6c:b7:19:37:45:92:
d2:fd:e1:b2:9e:a4:e1:f9:60:d8:74:c4:b3:4d:64:
44:af:b2:80:ca:81:5d:14:1c:4a:fb:6c:fe:41:17:
0a:b9:f2:ac:e6:b4:6f:85:18:b7:a6:8e:2d:30:80:
79:74:0e:22:4f:7d:9e:93:1f:69:09:83:91:a1:fa:
38:f7:66:b6:f5:5a:ee:81:9b:de:55:cb:88:46:42:
60:06:ed:c5:59:5e:1e:13:bf:43:03:21:84:4e:3f:
a5:3a:92:35:43:a5:28:5f:16:0c:0d:86:fd:48:bf:
82:e2:5d:62:9e:0e:f1:bd:62:be:80:3a:9f:1e:92:
98:55:f9:b0:cf:0d:de:66:fd:24:11:72:3f:69:99:
9e:83:22:f2:8f:a7:cd:b0:c0:84:43:92:4e:8f:6f:
18:4f:7a:64:49:f8:5d:02:5f:f1:7b:19:95:48:7c:
69:38:4e:5d:43:71:ee:d6:3b:4b:ac:95:c6:c8:cd:
f0:7e:38:61:d9:a1:c7:3f:15:c6:c7:86:9d:ab:1a:
11:10:14:ea:d7:7f:92:a9:df:ce:be:26:fc:99:53:
ff:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:7F:8E:A8:64:0F:F1:47:33:9A:E3:02:1C:19:D8:72:E3:77:8C:B8
X509v3 Authority Key Identifier:
keyid:96:27:1B:62:D1:8E:4A:C7:7C:61:09:69:0E:AA:E4:CC:34:D0:E9:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/licbYtGOSsd8YQlpDqrkzDTQ6bY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:5d:0d:1a:27:f6:ef:f1:c5:51:a8:95:7b:12:79:69:1f:0b:
ce:3e:ed:d0:c1:d8:04:7e:2a:0c:3d:b1:4e:b6:09:b3:58:30:
92:a4:50:18:27:02:63:17:c9:37:21:3b:f0:e2:66:11:b8:e3:
86:42:12:94:6a:b5:78:fb:8b:d5:1e:3e:4f:80:07:ea:6e:8d:
d2:20:20:06:1d:25:58:2f:3e:07:d6:b3:d9:a9:e8:74:3c:e8:
7a:12:81:a2:f1:42:c5:a5:59:a9:a9:bb:3c:3f:a1:a3:9f:94:
67:39:ab:23:3a:1a:a7:49:4c:aa:bb:68:da:51:36:3c:58:93:
cb:c2:ca:ce:80:9b:ae:b9:ee:c8:89:2c:89:31:fa:90:2b:27:
6a:a0:f2:9a:5f:80:72:65:09:ef:65:c1:08:93:8e:c7:80:c6:
99:aa:b1:ea:56:d9:03:5f:3a:77:d5:e2:68:06:bb:26:37:93:
4a:b1:ff:71:e5:ae:62:99:19:f2:47:8d:24:b2:42:0a:03:bb:
8f:93:89:5d:bd:4e:00:fb:a7:59:60:d0:61:ca:df:b8:52:44:
35:f0:e6:52:a7:bd:c1:f0:63:c8:32:cb:63:ca:86:b8:5c:32:
66:fd:63:db:e7:53:ce:a1:15:f5:63:5a:7e:d8:46:5c:87:68:
1f:84:79:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:10:32 2026 by rpki-client