Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.mft
File: licbYtGOSsd8YQlpDqrkzDTQ6bY.mft (raw, json)
Hash identifier: pARODkprtCQ5kM3FK890V9XYkaccTHgzT+ouEY2mvNc=
Subject key identifier: 60:FD:88:7D:E3:AF:B7:01:9C:32:3E:C8:DA:40:19:4C:C1:8F:27:CF
Authority key identifier: 96:27:1B:62:D1:8E:4A:C7:7C:61:09:69:0E:AA:E4:CC:34:D0:E9:B6
Certificate issuer: /CN=96271b62d18e4ac77c6109690eaae4cc34d0e9b6
Certificate serial: 01A0D501DD2809F4E6ABF4373D5E192A298B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/licbYtGOSsd8YQlpDqrkzDTQ6bY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.mft
Manifest number: 0F24
Signing time: Thu 24 Sep 2026 20:01:04 +0000
Manifest this update: Thu 24 Sep 2026 20:01:04 +0000
Manifest next update: Fri 25 Sep 2026 20:01:04 +0000
Files and hashes: 1: KUOqjCxyAKEhTbAupzFiFaYvtyw.roa (hash: os3TCsMwZbVNQhnConL+JRAfWiuBh8Xi7SXGh1W8p5c=)
2: aZ8AkYbZDzLWgutOqU36IbLeq9I.roa (hash: cnNNZQp5lYYOI91A8raXO1cOrkw9J8G5tTC55Sx7Npk=)
3: licbYtGOSsd8YQlpDqrkzDTQ6bY.crl (hash: TjcXe8I9MW8eQYg1/NlAJyIKYok9RsEdlowwYRtMeDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.mft
rsync://rpki.ripe.net/repository/DEFAULT/licbYtGOSsd8YQlpDqrkzDTQ6bY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 20:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:01:dd:28:09:f4:e6:ab:f4:37:3d:5e:19:2a:29:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96271b62d18e4ac77c6109690eaae4cc34d0e9b6
Validity
Not Before: Sep 24 20:01:04 2026 GMT
Not After : Sep 25 20:01:04 2026 GMT
Subject: CN=60fd887de3afb7019c323ec8da40194cc18f27cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d1:dc:3f:24:e8:10:5c:96:a2:a0:39:54:f5:
31:16:c6:49:af:c5:34:4f:04:43:83:2e:57:8e:77:
23:8f:dc:cc:5d:cc:9a:8f:66:03:e2:5e:63:50:aa:
89:3d:b3:12:0c:22:d9:7a:8e:be:12:4f:8e:b0:26:
f9:ab:9d:57:03:a3:50:f7:7d:7d:74:3a:18:fd:5e:
17:af:b4:16:b8:1c:c8:2f:c7:0e:95:de:83:16:e5:
06:a7:79:ad:57:59:6c:4a:c7:22:93:37:75:41:86:
c3:a4:11:58:ba:0b:1c:64:e5:47:e1:86:ce:d1:d7:
0e:42:69:0b:25:ee:b4:77:39:24:ef:7d:b0:cb:7b:
f7:b2:ad:fa:5b:d5:a7:9f:ab:43:77:45:3c:3d:2c:
6a:12:19:8b:3a:ac:93:37:f2:1e:05:17:cf:a5:77:
46:d4:0b:e2:58:ea:bc:31:9a:60:1e:a1:63:dd:de:
74:af:52:5d:d2:1c:a7:5e:a5:0f:62:95:d8:8c:28:
d7:f4:61:b3:e4:f8:ca:33:5f:cf:88:37:2e:a6:f0:
67:46:3f:ce:f5:46:d1:fc:00:bc:3c:fa:0e:68:a3:
32:2d:b8:5b:a7:04:b2:1d:74:99:7c:4b:e7:43:cc:
f0:82:d6:dd:7e:d6:5a:fd:70:56:1d:86:7c:de:2d:
78:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:FD:88:7D:E3:AF:B7:01:9C:32:3E:C8:DA:40:19:4C:C1:8F:27:CF
X509v3 Authority Key Identifier:
keyid:96:27:1B:62:D1:8E:4A:C7:7C:61:09:69:0E:AA:E4:CC:34:D0:E9:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/licbYtGOSsd8YQlpDqrkzDTQ6bY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:c1:07:3e:00:73:e7:c9:e1:46:1b:3d:70:f1:04:69:52:8d:
23:3b:c1:b5:55:f4:1a:c9:fc:00:9c:54:02:f0:e9:b3:65:e5:
6c:86:1a:b8:21:ec:dd:71:de:7e:18:72:7d:46:76:7b:83:c5:
79:26:7a:96:85:bd:ab:dc:6c:8f:f9:f9:e2:7e:58:d6:79:88:
a0:28:9c:60:f5:8f:47:d3:8b:9e:73:8f:17:ab:01:a4:16:70:
76:70:1a:7f:80:03:68:01:00:29:14:aa:6a:75:8e:93:a2:9f:
9b:f9:ae:c1:94:c7:6d:07:15:31:97:17:03:ae:e6:b3:c4:a7:
a1:ab:5b:b4:c4:d9:0c:a8:c9:a9:28:39:9b:bf:37:3a:97:4e:
23:36:23:08:67:56:5f:39:f5:16:bc:7a:99:10:02:24:a8:32:
57:24:62:68:9b:4e:3b:0e:be:3f:70:8d:f4:cd:62:ac:55:1e:
a4:29:d3:43:44:22:17:6c:52:34:db:38:f1:9a:84:aa:c2:25:
7a:b4:5e:65:af:90:7f:08:35:b4:77:b3:6b:83:e9:91:8e:49:
19:28:1d:3e:62:a5:83:33:06:63:21:ec:a1:79:3f:f0:ae:c0:
92:ad:42:5e:68:b3:d3:b1:b2:27:a2:12:10:ee:70:57:da:0f:
ab:4a:71:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:05:15 2026 by rpki-client