Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.mft
File: licbYtGOSsd8YQlpDqrkzDTQ6bY.mft (raw, json)
Hash identifier: /ZXtxpU5pCuZklyC36gc4OADTrdUEx0elJyhJsLe3oI=
Subject key identifier: E5:3A:4A:E2:B5:98:39:96:BA:1F:FE:84:FB:D2:DA:BF:B4:8E:39:C4
Authority key identifier: 96:27:1B:62:D1:8E:4A:C7:7C:61:09:69:0E:AA:E4:CC:34:D0:E9:B6
Certificate issuer: /CN=96271b62d18e4ac77c6109690eaae4cc34d0e9b6
Certificate serial: 01A1DF837F1070644AE2A24303287383F46D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/licbYtGOSsd8YQlpDqrkzDTQ6bY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.mft
Manifest number: 0FAE
Signing time: Sun 15 Nov 2026 14:01:39 +0000
Manifest this update: Sun 15 Nov 2026 14:01:39 +0000
Manifest next update: Mon 16 Nov 2026 14:01:39 +0000
Files and hashes: 1: KUOqjCxyAKEhTbAupzFiFaYvtyw.roa (hash: os3TCsMwZbVNQhnConL+JRAfWiuBh8Xi7SXGh1W8p5c=)
2: aZ8AkYbZDzLWgutOqU36IbLeq9I.roa (hash: cnNNZQp5lYYOI91A8raXO1cOrkw9J8G5tTC55Sx7Npk=)
3: licbYtGOSsd8YQlpDqrkzDTQ6bY.crl (hash: HZPTIpsIUEgSZPDuhtXo5+eRvDolKwv/fZyO6efs1j8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.mft
rsync://rpki.ripe.net/repository/DEFAULT/licbYtGOSsd8YQlpDqrkzDTQ6bY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:83:7f:10:70:64:4a:e2:a2:43:03:28:73:83:f4:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96271b62d18e4ac77c6109690eaae4cc34d0e9b6
Validity
Not Before: Nov 15 14:01:39 2026 GMT
Not After : Nov 16 14:01:39 2026 GMT
Subject: CN=e53a4ae2b5983996ba1ffe84fbd2dabfb48e39c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7c:27:cc:25:ba:aa:5f:29:88:d7:43:c9:43:
e7:bb:1b:da:1f:40:fa:cf:0b:d5:21:5f:7f:ed:4e:
bd:73:5e:64:77:48:ae:24:b8:e6:1b:72:a4:2c:8a:
9c:8b:6b:78:9d:f0:5d:1c:97:0c:69:17:4d:d3:6c:
11:dd:dc:a3:4d:14:bb:f4:47:ab:f3:99:73:00:d1:
f8:14:0e:43:ca:c9:8f:db:ef:45:c7:88:40:41:9f:
02:62:9d:b7:58:15:3f:de:aa:03:a7:f7:13:ec:ff:
d9:3b:29:ff:32:94:2f:98:ab:b2:b4:8a:27:87:48:
fc:ec:c3:68:2c:94:08:14:7d:f3:94:65:8b:88:c7:
90:b2:2e:55:8c:95:d5:bb:65:a6:43:26:55:fd:36:
cb:0c:c2:fc:70:7c:32:e0:2e:58:26:86:20:ea:48:
ac:c1:5a:eb:4a:31:5e:49:79:06:69:00:a9:21:c9:
7e:8a:09:80:59:33:d5:01:42:2f:fa:61:ac:54:98:
98:ab:13:c0:3a:e6:43:fb:e7:64:5e:91:cf:f8:3f:
ba:a0:12:b4:bf:2a:e0:44:c6:35:28:21:79:2d:50:
34:dd:b4:bb:1e:44:fd:68:94:dd:a9:91:dc:4f:85:
89:ae:3d:4f:34:ec:15:60:6d:5a:bf:38:fd:9b:eb:
92:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:3A:4A:E2:B5:98:39:96:BA:1F:FE:84:FB:D2:DA:BF:B4:8E:39:C4
X509v3 Authority Key Identifier:
keyid:96:27:1B:62:D1:8E:4A:C7:7C:61:09:69:0E:AA:E4:CC:34:D0:E9:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/licbYtGOSsd8YQlpDqrkzDTQ6bY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:44:06:68:5d:0d:f1:99:57:9c:f3:f4:da:4c:47:d1:99:d7:
36:ac:51:cb:8b:7c:59:32:2f:5b:74:36:1f:5c:4e:19:3c:53:
d9:51:8e:a5:75:c6:fc:03:f8:85:59:49:8b:5e:46:ae:b0:82:
1d:2d:02:7b:a3:2b:9b:cd:9d:6c:71:a9:90:47:b9:17:31:e8:
b5:43:d8:e1:09:39:67:70:bc:08:d7:17:33:19:7e:e3:41:f1:
10:4a:c9:75:1e:a9:a4:40:5b:8c:9a:dc:dd:13:17:33:6f:66:
32:6f:d1:35:fe:4f:21:b8:37:d3:1b:a4:57:25:19:1e:72:8e:
d9:e7:93:70:3e:70:e3:2f:9b:87:26:10:32:76:c2:3c:65:df:
1a:3c:5d:a8:50:f9:19:a3:8a:73:ea:e0:e0:0c:e9:dd:13:4d:
62:67:4c:49:cb:d4:69:6d:49:1a:47:95:ff:8f:2d:f3:34:1c:
1d:d5:0d:fe:99:64:11:d3:d7:93:b3:1d:76:72:53:47:e1:a1:
b0:ed:c2:9e:5f:98:94:d2:80:a0:3f:df:0b:f7:60:ad:8e:c4:
d7:b0:2c:84:a7:b8:fc:34:35:5d:63:ca:c4:97:a7:30:53:f8:
86:9d:3d:b4:8f:c9:7b:d1:e5:b5:eb:42:09:ab:a1:ce:9b:c5:
62:85:7b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:26:09 2026 by rpki-client