Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.mft
File: rLICUNTN02Zxm5adb0EjAcE-uQE.mft (raw, json)
Hash identifier: hvUy+ORa8iCOAkzeD62KQZpOxrucYPs1X401a3fYmUM=
Subject key identifier: A2:5B:E2:2B:0C:00:6D:A3:CF:AE:63:06:21:78:B1:20:6C:90:A1:3D
Authority key identifier: AC:B2:02:50:D4:CD:D3:66:71:9B:96:9D:6F:41:23:01:C1:3E:B9:01
Certificate issuer: /CN=acb20250d4cdd366719b969d6f412301c13eb901
Certificate serial: 01A0CBC7DEB679346F029CA290675915C833
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rLICUNTN02Zxm5adb0EjAcE-uQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.mft
Manifest number: 1A69
Signing time: Wed 23 Sep 2026 01:01:08 +0000
Manifest this update: Wed 23 Sep 2026 01:01:08 +0000
Manifest next update: Thu 24 Sep 2026 01:01:08 +0000
Files and hashes: 1: 6Y7UUUXvw-PaME2ae-Db8-eLow4.roa (hash: 93NzqW0eaEjLpzAyzS+ITs+WJkp6mSQ9IPQy/xcIc0U=)
2: rLICUNTN02Zxm5adb0EjAcE-uQE.crl (hash: LbDU7zm8cYj0Yoi33YogHD0zDdPy1F+hmShsQzOjhGY=)
3: wIsRMt1AQYQt1hkB3_aZVy4D4IA.asa (hash: 2nNxGFYRpzs2cD2pN3ubkFQUQFxmUQR0ElqdiMQLgeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/rLICUNTN02Zxm5adb0EjAcE-uQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:c7:de:b6:79:34:6f:02:9c:a2:90:67:59:15:c8:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acb20250d4cdd366719b969d6f412301c13eb901
Validity
Not Before: Sep 23 01:01:08 2026 GMT
Not After : Sep 24 01:01:08 2026 GMT
Subject: CN=a25be22b0c006da3cfae63062178b1206c90a13d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b7:c6:22:0a:83:7f:84:2e:a5:56:fd:63:d3:
06:4d:9f:76:cb:f2:68:ec:24:48:c1:47:ea:93:a0:
f7:ea:76:6d:cb:dd:12:19:8e:7c:75:69:d3:a9:0f:
a1:64:fc:c9:b0:fc:af:6b:6f:5a:c2:8b:26:ad:e7:
fd:1a:f6:e2:da:68:6d:c2:17:03:3d:53:bf:bf:33:
9a:0c:a1:45:1c:ef:3b:c4:93:44:70:a2:5e:90:3a:
0b:bd:61:54:90:c0:97:84:c7:e6:10:f3:87:13:e8:
22:fd:74:f9:da:cf:05:3a:0f:c6:c7:d2:ba:ad:5b:
ba:2e:19:af:26:97:bc:00:c1:ed:33:79:58:61:cf:
9f:23:75:ea:7d:0e:6e:5c:51:fa:a3:5e:b4:fb:0b:
98:32:43:00:9e:b7:d0:4b:fd:10:d9:be:f7:2d:ca:
1a:ed:e7:3a:26:e5:b9:be:58:a8:39:61:b7:8f:b3:
eb:f8:23:e6:b2:e6:91:bb:54:3f:86:82:69:2c:5e:
0d:2b:1b:19:cd:b8:ee:21:b8:d7:a7:48:8c:5a:1d:
21:c1:8f:9b:ca:f8:18:d9:23:96:3c:f8:04:34:fb:
23:36:d6:71:e6:c5:e7:44:73:86:16:f8:54:56:ed:
c5:ac:70:14:a3:9e:29:c7:65:02:42:0f:06:5b:db:
3e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:5B:E2:2B:0C:00:6D:A3:CF:AE:63:06:21:78:B1:20:6C:90:A1:3D
X509v3 Authority Key Identifier:
keyid:AC:B2:02:50:D4:CD:D3:66:71:9B:96:9D:6F:41:23:01:C1:3E:B9:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLICUNTN02Zxm5adb0EjAcE-uQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:45:37:d5:5f:f7:97:26:b2:f3:ce:33:14:12:07:7a:69:b3:
86:52:cb:b2:0e:e0:2d:4c:6c:44:02:81:c4:c4:a3:d1:68:cd:
7e:09:0f:cb:83:70:c6:d0:b4:a4:21:cc:37:c8:4f:e6:3d:6c:
55:f4:25:4e:73:f1:6b:de:9a:e8:5d:b2:50:6c:bc:cf:f9:d8:
dd:7f:45:31:a9:44:ef:d9:9e:1c:f0:4c:97:ef:72:da:fb:c9:
33:a0:e8:45:b8:e6:b2:8f:0d:d6:54:53:f0:c2:c1:1c:63:3b:
f3:d7:ab:34:42:a0:cf:a2:38:f4:e1:60:a2:14:7a:d6:c4:58:
6d:05:93:2b:88:bf:c3:b5:01:23:7c:6c:74:f5:39:44:58:b4:
59:2c:43:0f:da:f7:f6:90:a5:27:36:95:50:c8:08:35:a1:26:
41:54:07:d9:eb:64:1a:94:e0:ee:b4:80:ed:f1:c0:19:fb:6f:
0c:3a:76:c1:01:06:a1:0d:99:82:e9:5f:58:b6:76:e0:e0:26:
fe:6c:83:63:d0:4f:5d:9a:1c:d7:a9:d3:e5:77:22:09:85:ed:
b3:61:6a:19:9d:50:d2:64:4d:3e:43:6a:a5:9b:40:a1:9a:e6:
e2:c0:25:e7:e6:34:0f:7a:97:83:2f:48:f2:94:46:0d:a5:42:
a8:9c:88:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:02:13 2026 by rpki-client