
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.mft
File: licbYtGOSsd8YQlpDqrkzDTQ6bY.mft (raw, json)
Hash identifier: aE2jLBmwL3+yRR65TtwgbgiaW6X701jW9H4Mdcr6ud0=
Subject key identifier: A8:AE:AE:24:38:36:35:35:24:CB:0D:80:00:8A:3B:C5:17:CB:A9:18
Authority key identifier: 96:27:1B:62:D1:8E:4A:C7:7C:61:09:69:0E:AA:E4:CC:34:D0:E9:B6
Certificate issuer: /CN=96271b62d18e4ac77c6109690eaae4cc34d0e9b6
Certificate serial: 019EBFFF550AE36EE84B1527CA844BE4E193
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/licbYtGOSsd8YQlpDqrkzDTQ6bY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.mft
Manifest number: 0E10
Signing time: Sat 13 Jun 2026 08:00:42 +0000
Manifest this update: Sat 13 Jun 2026 08:00:42 +0000
Manifest next update: Sun 14 Jun 2026 08:00:42 +0000
Files and hashes: 1: KUOqjCxyAKEhTbAupzFiFaYvtyw.roa (hash: os3TCsMwZbVNQhnConL+JRAfWiuBh8Xi7SXGh1W8p5c=)
2: aZ8AkYbZDzLWgutOqU36IbLeq9I.roa (hash: cnNNZQp5lYYOI91A8raXO1cOrkw9J8G5tTC55Sx7Npk=)
3: licbYtGOSsd8YQlpDqrkzDTQ6bY.crl (hash: uf8VKJLWEK5C6LB7GEZz+B68v2tFo+CYRJt6l35/Ywc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.mft
rsync://rpki.ripe.net/repository/DEFAULT/licbYtGOSsd8YQlpDqrkzDTQ6bY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:ff:55:0a:e3:6e:e8:4b:15:27:ca:84:4b:e4:e1:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96271b62d18e4ac77c6109690eaae4cc34d0e9b6
Validity
Not Before: Jun 13 08:00:42 2026 GMT
Not After : Jun 14 08:00:42 2026 GMT
Subject: CN=a8aeae243836353524cb0d80008a3bc517cba918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:72:ae:f2:e8:32:5b:08:4a:5e:92:a8:3f:cc:
7f:1c:e0:a9:48:06:3d:56:19:12:54:e0:93:0d:d9:
b5:82:66:69:b5:43:ce:78:70:65:c6:3e:57:b3:16:
0d:88:97:cc:4b:0d:ef:7b:93:2b:73:54:eb:f7:d3:
ca:bc:7c:30:7f:54:1a:e9:ff:d8:45:2c:a8:c5:e4:
08:ef:3d:52:37:d2:4d:23:69:5a:8f:85:92:57:07:
2c:64:f4:45:09:4b:f7:93:cc:5c:0d:e0:27:16:1b:
0a:52:7c:c8:83:e5:20:e4:b5:23:e6:54:78:3a:e1:
19:2e:66:0e:62:ae:2e:13:80:90:82:77:0c:f1:2b:
85:04:48:a9:2b:57:9c:25:81:12:cb:87:c4:89:85:
59:98:06:40:12:b3:e1:31:a0:a2:3b:20:66:ca:a6:
31:ec:e5:78:0f:06:21:2c:a5:34:47:39:ff:21:6b:
d4:91:58:e0:c7:cd:ca:86:66:33:5f:fa:4f:5f:fa:
be:37:b0:4e:f6:a7:0c:e2:0a:dc:41:49:29:dc:01:
53:0a:d2:ce:c4:33:3e:b9:b0:90:ae:a9:3b:84:09:
c7:f8:3a:f2:15:7a:59:0c:19:21:bc:89:9a:81:56:
ec:21:19:cf:24:11:c0:4e:24:98:68:f7:7e:2f:78:
b6:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:AE:AE:24:38:36:35:35:24:CB:0D:80:00:8A:3B:C5:17:CB:A9:18
X509v3 Authority Key Identifier:
keyid:96:27:1B:62:D1:8E:4A:C7:7C:61:09:69:0E:AA:E4:CC:34:D0:E9:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/licbYtGOSsd8YQlpDqrkzDTQ6bY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:45:ad:ad:99:da:67:7e:22:a3:86:35:92:b4:38:6e:c2:80:
fb:c1:6d:bc:c6:f1:04:b4:14:a5:ca:20:35:36:f8:9b:b6:aa:
75:44:f0:e4:51:1a:df:11:e4:ec:58:ef:ae:68:39:f6:59:b4:
42:6b:22:98:c6:a3:3e:5f:54:76:bb:a2:04:88:ee:87:d0:ef:
b1:0b:e6:69:9f:6c:a8:74:e1:c1:b8:28:5d:87:2d:4b:81:a5:
c6:44:98:ca:e5:23:a4:50:72:70:90:c1:d4:5a:cf:88:3c:a2:
31:d1:78:e3:ed:4f:ec:e7:7c:b6:dd:70:55:4b:fc:6a:65:ce:
19:46:ce:56:d7:47:43:7a:74:d6:7a:59:8a:76:6b:54:92:c0:
1f:ee:e7:de:94:db:fe:c8:08:c6:de:98:22:c2:1c:0f:38:be:
5e:dd:21:e2:aa:65:f1:8d:a3:9b:44:96:bf:ca:c5:ad:a5:a0:
2d:11:88:89:f9:b6:99:20:7e:07:3a:85:63:3b:fe:37:ef:08:
ad:ec:f0:51:0a:b4:ac:c3:59:b6:57:81:04:52:55:18:91:8b:
b1:85:4c:8d:ec:1b:05:1c:3e:b9:f1:69:35:9d:fd:04:b0:58:
2c:ff:ee:b1:d2:94:29:b5:5a:8d:16:98:c8:e7:2a:9e:d1:5c:
cf:1a:70:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:33:14 2026 by rpki-client