Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.mft
File: licbYtGOSsd8YQlpDqrkzDTQ6bY.mft (raw, json)
Hash identifier: bAfVVoJENYWHAFYrfqp3k/D9Zcc90/BU1nPfccEfJow=
Subject key identifier: F3:9E:9C:12:F6:B9:E3:D1:74:56:C0:BB:95:0C:10:BA:19:65:EA:71
Authority key identifier: 96:27:1B:62:D1:8E:4A:C7:7C:61:09:69:0E:AA:E4:CC:34:D0:E9:B6
Certificate issuer: /CN=96271b62d18e4ac77c6109690eaae4cc34d0e9b6
Certificate serial: 019CACEBDC8569AFFCEFAA120EC8175E4CD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/licbYtGOSsd8YQlpDqrkzDTQ6bY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.mft
Manifest number: 0CFD
Signing time: Mon 02 Mar 2026 05:01:04 +0000
Manifest this update: Mon 02 Mar 2026 05:01:04 +0000
Manifest next update: Tue 03 Mar 2026 05:01:04 +0000
Files and hashes: 1: KUOqjCxyAKEhTbAupzFiFaYvtyw.roa (hash: os3TCsMwZbVNQhnConL+JRAfWiuBh8Xi7SXGh1W8p5c=)
2: aZ8AkYbZDzLWgutOqU36IbLeq9I.roa (hash: cnNNZQp5lYYOI91A8raXO1cOrkw9J8G5tTC55Sx7Npk=)
3: licbYtGOSsd8YQlpDqrkzDTQ6bY.crl (hash: xovehoO2o0pjPMN6GaBpJMC5cQgyyrx6xASQ/dz+aDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.mft
rsync://rpki.ripe.net/repository/DEFAULT/licbYtGOSsd8YQlpDqrkzDTQ6bY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:dc:85:69:af:fc:ef:aa:12:0e:c8:17:5e:4c:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96271b62d18e4ac77c6109690eaae4cc34d0e9b6
Validity
Not Before: Mar 2 05:01:04 2026 GMT
Not After : Mar 3 05:01:04 2026 GMT
Subject: CN=f39e9c12f6b9e3d17456c0bb950c10ba1965ea71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:40:97:bc:04:52:11:3f:f3:4f:ee:a8:92:6b:
97:9e:f2:77:d3:eb:a8:3d:cc:c9:74:69:84:6b:5b:
bb:0f:2b:2f:d7:1e:18:f9:6f:fc:7d:ce:bd:04:9e:
c3:ff:b3:03:7f:df:28:5e:1c:bd:e2:34:2a:df:42:
48:c4:1a:71:ff:30:3e:b3:b1:0d:b4:c9:84:3f:4b:
43:92:a5:b9:5e:ea:a4:b0:34:dd:f8:95:f5:aa:5b:
4e:60:2a:b4:fb:35:c8:c4:f1:07:4f:d2:21:4f:c5:
4b:ba:10:2c:fc:55:b5:ec:55:2f:4e:f8:18:e1:66:
19:3c:89:9f:45:70:25:2e:b5:7e:d8:6b:c1:30:29:
3d:17:9e:7e:75:35:c5:4e:26:96:35:a2:62:cf:67:
a3:b9:43:c8:86:14:d8:e8:10:c6:9f:65:1d:74:77:
80:c9:59:63:61:89:e7:f8:46:05:f7:2b:e2:18:87:
0d:ae:8e:01:2c:d6:97:6d:81:fe:08:d9:a6:eb:ed:
a8:e9:27:ad:5b:58:1a:9a:d7:7f:0e:4e:0b:e3:ee:
fb:2e:33:55:2b:10:c2:45:50:a2:08:25:e7:12:25:
55:0f:2c:7d:a3:17:64:14:97:24:5b:41:65:c0:d8:
d2:dd:6a:55:2e:f2:73:06:75:37:f0:66:9e:52:f7:
3c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:9E:9C:12:F6:B9:E3:D1:74:56:C0:BB:95:0C:10:BA:19:65:EA:71
X509v3 Authority Key Identifier:
keyid:96:27:1B:62:D1:8E:4A:C7:7C:61:09:69:0E:AA:E4:CC:34:D0:E9:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/licbYtGOSsd8YQlpDqrkzDTQ6bY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:24:c0:30:b7:67:c7:d3:dc:91:31:23:e4:69:e9:73:20:4f:
6c:e8:ac:b8:42:71:90:94:08:49:8b:33:5c:d8:f5:c6:d1:94:
7b:a9:fe:80:1f:80:0d:45:1d:92:80:3e:dc:d8:21:a8:2e:1d:
ae:aa:ab:da:3f:93:b3:1e:c1:f1:e3:7d:d4:a8:dd:13:8b:ba:
e7:af:0f:43:ec:80:30:62:60:7e:c2:be:99:ec:11:1e:7e:f8:
ee:a0:a2:1a:db:00:3c:69:66:09:68:c6:92:91:9a:8b:ec:28:
ec:f9:b4:02:28:74:04:e8:a0:e1:9c:fb:ae:f5:f7:33:0b:6a:
77:6e:cf:f4:06:51:d7:0e:4c:72:2f:ed:ad:b7:2e:0d:92:08:
ec:3b:f4:07:51:51:f9:82:d2:7f:3c:87:7f:41:70:69:f8:3b:
a8:53:a2:81:8c:db:52:18:38:82:92:bb:a1:89:72:7b:cf:25:
4a:d6:31:32:15:5b:c9:9c:fc:c1:2d:f8:2a:c0:03:6f:ac:18:
69:0d:f6:8c:f5:4b:2e:e6:45:89:ac:b3:a2:fd:e3:a8:0d:86:
ba:e9:32:f0:8d:ee:6d:89:fc:12:d4:b2:f8:38:1d:dc:20:6d:
16:b4:90:e8:24:2e:e9:06:f3:78:93:18:f6:eb:76:47:0c:30:
c2:45:fe:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZys69yFaa/876oSDsgXXkzXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2MjcxYjYyZDE4ZTRhYzc3YzYxMDk2OTBlYWFlNGNjMzRk
MGU5YjYwHhcNMjYwMzAyMDUwMTA0WhcNMjYwMzAzMDUwMTA0WjAzMTEwLwYDVQQD
EyhmMzllOWMxMmY2YjllM2QxNzQ1NmMwYmI5NTBjMTBiYTE5NjVlYTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUCXvARSET/zT+6okmuXnvJ30+uo
PczJdGmEa1u7Dysv1x4Y+W/8fc69BJ7D/7MDf98oXhy94jQq30JIxBpx/zA+s7EN
tMmEP0tDkqW5XuqksDTd+JX1qltOYCq0+zXIxPEHT9IhT8VLuhAs/FW17FUvTvgY
4WYZPImfRXAlLrV+2GvBMCk9F55+dTXFTiaWNaJiz2ejuUPIhhTY6BDGn2UddHeA
yVljYYnn+EYF9yviGIcNro4BLNaXbYH+CNmm6+2o6SetW1gamtd/Dk4L4+77LjNV
KxDCRVCiCCXnEiVVDyx9oxdkFJckW0FlwNjS3WpVLvJzBnU38GaeUvc8aQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPOenBL2uePRdFbAu5UMELoZZepxMB8GA1UdIwQY
MBaAFJYnG2LRjkrHfGEJaQ6q5Mw00Om2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGljYll0R09Tc2Q4WVFscERxcmt6RFRRNmJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9mNmI2MGItNTgwOC00OGEyLTgyMDMt
MWNhM2ZiYmZiYTNmLzEvbGljYll0R09Tc2Q4WVFscERxcmt6RFRRNmJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9mNmI2MGItNTgwOC00OGEyLTgyMDMtMWNhM2ZiYmZiYTNm
LzEvbGljYll0R09Tc2Q4WVFscERxcmt6RFRRNmJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATCTAMLdn
x9PckTEj5GnpcyBPbOisuEJxkJQISYszXNj1xtGUe6n+gB+ADUUdkoA+3NghqC4d
rqqr2j+Tsx7B8eN91KjdE4u6568PQ+yAMGJgfsK+mewRHn747qCiGtsAPGlmCWjG
kpGai+wo7Pm0Aih0BOig4Zz7rvX3Mwtqd27P9AZR1w5Mci/trbcuDZII7Dv0B1FR
+YLSfzyHf0Fwafg7qFOigYzbUhg4gpK7oYlye88lStYxMhVbyZz8wS34KsADb6wY
aQ32jPVLLuZFiayzov3jqA2Guuky8I3ubYn8EtSy+Dgd3CBtFrSQ6CQu6QbzeJMY
9ut2RwwwwkX+QQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:28:30 2026 by rpki-client