Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.mft
File: rLICUNTN02Zxm5adb0EjAcE-uQE.mft (raw, json)
Hash identifier: 7l/w77SGPArr4qt3fc7s/Oubpj88B87lqmIFjdqShG4=
Subject key identifier: 20:00:44:1B:F1:A4:45:E3:E0:E7:71:9F:7B:F5:EC:A9:83:20:62:97
Authority key identifier: AC:B2:02:50:D4:CD:D3:66:71:9B:96:9D:6F:41:23:01:C1:3E:B9:01
Certificate issuer: /CN=acb20250d4cdd366719b969d6f412301c13eb901
Certificate serial: 019D269663C9AE051B784443B2BD1B150034
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rLICUNTN02Zxm5adb0EjAcE-uQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.mft
Manifest number: 1884
Signing time: Wed 25 Mar 2026 20:01:23 +0000
Manifest this update: Wed 25 Mar 2026 20:01:23 +0000
Manifest next update: Thu 26 Mar 2026 20:01:23 +0000
Files and hashes: 1: 6Y7UUUXvw-PaME2ae-Db8-eLow4.roa (hash: 93NzqW0eaEjLpzAyzS+ITs+WJkp6mSQ9IPQy/xcIc0U=)
2: _ONnyoGJy4BONjnQqy_VIZR_lsQ.asa (hash: fg8lcyp5xk0Ls5QPpNy6ZcES0R4cZ7H66Wj2T/SkgFA=)
3: rLICUNTN02Zxm5adb0EjAcE-uQE.crl (hash: iPvIFnrUlNRnS7ko8E08NKSWjwiWOfUAnOgVZrDplvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/rLICUNTN02Zxm5adb0EjAcE-uQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:63:c9:ae:05:1b:78:44:43:b2:bd:1b:15:00:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acb20250d4cdd366719b969d6f412301c13eb901
Validity
Not Before: Mar 25 20:01:23 2026 GMT
Not After : Mar 26 20:01:23 2026 GMT
Subject: CN=2000441bf1a445e3e0e7719f7bf5eca983206297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:11:b7:a7:dd:9e:4a:57:40:f9:5e:73:6f:c6:
da:b2:b9:ce:78:b5:a9:d9:ba:21:fb:e8:60:a5:90:
28:11:ac:bf:f9:7e:5c:9f:93:f0:7c:3e:5e:0e:2a:
69:a3:2d:e0:64:8a:42:38:93:53:a8:d1:e0:4f:43:
89:9b:dd:c4:69:d4:37:c2:64:a3:f3:87:8e:25:75:
7f:96:b8:e1:72:8c:e6:7a:62:31:b2:70:9f:a6:52:
d3:78:4b:50:f5:5b:a4:6d:7f:82:4f:25:e3:04:8b:
69:99:51:9b:65:a6:ad:31:6e:9d:26:2c:4c:87:30:
2d:c4:84:aa:ab:c7:ec:8b:de:5a:4a:27:8d:49:57:
6e:3e:23:40:72:e4:ff:4e:c4:12:53:21:48:df:a9:
0c:85:05:28:66:a1:f8:ff:90:08:98:0c:08:19:6c:
14:28:73:17:5f:1b:f3:35:aa:6e:ce:23:62:f3:10:
db:fa:48:20:66:2d:ca:bf:03:37:f9:d0:59:5d:e4:
bd:b0:d6:9b:c5:83:61:d3:2d:a0:48:69:ab:ae:dc:
1f:0c:db:ab:6a:60:3e:38:fc:8b:3b:aa:52:50:b0:
57:81:09:91:43:44:84:76:d6:eb:b3:f8:3b:f7:5a:
68:4e:86:1a:74:32:96:13:99:e6:f1:f5:eb:95:1f:
c3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:00:44:1B:F1:A4:45:E3:E0:E7:71:9F:7B:F5:EC:A9:83:20:62:97
X509v3 Authority Key Identifier:
keyid:AC:B2:02:50:D4:CD:D3:66:71:9B:96:9D:6F:41:23:01:C1:3E:B9:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLICUNTN02Zxm5adb0EjAcE-uQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:90:29:25:5f:e3:8c:6c:87:38:a5:70:4c:0f:1a:0d:22:f8:
0f:a6:69:ea:03:43:6b:a7:83:61:61:0f:6c:f4:cf:c5:54:82:
a7:99:3e:42:e1:2b:c7:22:6f:ac:d5:60:fd:b0:69:78:90:21:
5b:60:3e:44:e0:f5:4a:70:fe:17:1f:5e:43:4d:d4:49:17:77:
c6:8c:b0:f8:b3:e9:d6:23:4e:cc:05:16:ca:73:22:94:7e:c3:
dd:3e:49:77:a1:98:f4:9f:ca:36:a0:ca:88:ec:db:55:73:1e:
97:55:6c:69:b7:23:f5:9a:8e:66:e9:b9:7d:fa:f5:20:33:dd:
ee:55:bd:f6:e9:4e:45:a1:15:10:2d:06:ce:5e:0d:e4:0a:42:
d9:6f:8d:d1:85:ba:77:10:6a:f2:9b:40:1d:a9:85:7e:11:49:
0e:f6:f6:12:ed:6a:90:53:fb:6b:cf:6f:0c:83:0c:74:67:91:
56:d4:52:99:30:d6:e7:cc:c0:ee:93:8c:c5:6f:43:c1:f8:4a:
3a:96:6c:c5:7c:fe:31:8d:77:6e:49:c5:b4:0d:9c:cc:ea:3e:
45:b9:4a:38:21:57:8c:33:dd:92:06:b7:18:fc:c6:de:45:c9:
12:50:52:fb:5a:66:6c:9a:93:30:62:56:1e:4b:70:24:05:6f:
20:ee:37:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:12:53 2026 by rpki-client