Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.mft
File: rLICUNTN02Zxm5adb0EjAcE-uQE.mft (raw, json)
Hash identifier: HRCZvOq+6QW+0r5W652p4NckksGP9L0EvZ4ODP3hHs8=
Subject key identifier: 00:7C:20:8D:3C:EA:CF:19:CA:1B:C0:0B:D9:CA:58:93:30:27:C2:3C
Authority key identifier: AC:B2:02:50:D4:CD:D3:66:71:9B:96:9D:6F:41:23:01:C1:3E:B9:01
Certificate issuer: /CN=acb20250d4cdd366719b969d6f412301c13eb901
Certificate serial: 019CA90EF6E4D54B3260108428D16A905E77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rLICUNTN02Zxm5adb0EjAcE-uQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.mft
Manifest number: 1843
Signing time: Sun 01 Mar 2026 11:00:56 +0000
Manifest this update: Sun 01 Mar 2026 11:00:56 +0000
Manifest next update: Mon 02 Mar 2026 11:00:56 +0000
Files and hashes: 1: 6Y7UUUXvw-PaME2ae-Db8-eLow4.roa (hash: 93NzqW0eaEjLpzAyzS+ITs+WJkp6mSQ9IPQy/xcIc0U=)
2: _ONnyoGJy4BONjnQqy_VIZR_lsQ.asa (hash: fg8lcyp5xk0Ls5QPpNy6ZcES0R4cZ7H66Wj2T/SkgFA=)
3: rLICUNTN02Zxm5adb0EjAcE-uQE.crl (hash: ENMzpaxidLxlyntTD1MgeIzRzPentKVjrRAL1oEZCpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/rLICUNTN02Zxm5adb0EjAcE-uQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:0e:f6:e4:d5:4b:32:60:10:84:28:d1:6a:90:5e:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acb20250d4cdd366719b969d6f412301c13eb901
Validity
Not Before: Mar 1 11:00:56 2026 GMT
Not After : Mar 2 11:00:56 2026 GMT
Subject: CN=007c208d3ceacf19ca1bc00bd9ca58933027c23c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:3c:d7:2a:e2:22:25:5d:20:10:26:38:b2:4c:
9d:6e:f9:48:7f:e9:f7:91:30:54:cc:28:b2:c3:0e:
ff:a5:b2:23:53:9a:b5:8c:71:1c:ee:3e:47:3a:98:
ea:cf:d3:f9:a9:d1:1a:51:8d:a9:13:55:5d:cf:41:
29:94:a7:9d:68:8a:9c:91:16:fd:33:f3:76:65:bc:
5c:a7:dd:f3:d4:5a:b7:10:34:58:13:e0:2e:63:65:
3e:cf:4b:b1:26:3d:ec:f9:1a:0f:9e:5a:5e:bd:a7:
58:fc:51:d0:0f:21:b6:e0:6a:70:95:65:47:e3:d3:
75:83:ad:cd:b7:81:40:61:87:a2:7e:24:b3:19:06:
e8:72:ff:fc:60:53:0e:fe:a7:1d:6a:18:c6:18:e3:
ca:60:24:c1:04:e3:4c:36:a7:53:b6:e2:f5:6f:6b:
8e:53:11:3f:2a:f9:c0:e6:f3:80:00:a6:c1:cd:07:
1e:d3:c0:fc:9a:a4:91:f3:cf:59:23:d5:d2:46:2f:
0d:56:37:b1:c0:51:be:60:38:04:8d:be:9e:f4:24:
67:eb:af:33:8b:dd:15:65:45:a4:e6:bb:bc:e3:a3:
a9:b9:d8:94:92:f7:3d:bd:c7:20:b5:93:49:14:6a:
94:7a:07:db:7a:e5:dd:f0:9e:7f:08:65:ec:a7:6d:
01:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:7C:20:8D:3C:EA:CF:19:CA:1B:C0:0B:D9:CA:58:93:30:27:C2:3C
X509v3 Authority Key Identifier:
keyid:AC:B2:02:50:D4:CD:D3:66:71:9B:96:9D:6F:41:23:01:C1:3E:B9:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLICUNTN02Zxm5adb0EjAcE-uQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:c9:c0:3e:10:30:4b:81:2d:b4:93:9a:3a:21:25:51:b8:ea:
ee:25:9c:8f:2b:e4:3c:80:ef:af:8a:a9:50:a4:7e:86:cb:3f:
92:ba:4b:fe:1a:de:a5:e2:83:61:3f:dc:62:d1:43:bd:57:2e:
f0:b4:4e:c9:f2:7d:6b:e4:bd:0e:3b:23:c8:80:93:a1:ce:c4:
36:03:10:aa:96:51:b1:aa:e5:44:0d:11:50:f3:b2:60:6c:23:
dd:da:5f:98:b4:2e:c1:cc:36:8d:9b:1b:17:07:b2:09:cc:b1:
82:82:99:8b:4e:41:b0:c0:b0:b7:05:cd:8c:d9:e1:5e:f6:fc:
e2:f2:a0:21:47:76:0d:ab:ad:ae:e5:0c:26:ff:9d:30:6b:f7:
ac:ee:b7:2f:4a:8a:6c:eb:51:35:cd:49:53:ba:d2:b6:94:07:
9b:78:a1:d5:96:37:6f:63:6a:1a:c9:86:18:ae:fe:7c:13:3f:
c4:b2:8b:53:9c:07:ec:66:9c:aa:08:e1:94:ae:49:2c:87:d6:
f6:45:01:4f:fa:19:22:75:26:d1:72:88:04:2b:72:4b:90:c9:
89:7b:dc:fc:31:b8:91:61:69:3d:4f:32:31:29:1c:9f:f2:46:
7a:66:23:68:ba:4e:9b:65:2f:bc:e0:85:82:ec:47:2d:8e:96:
fe:7e:3c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:29:18 2026 by rpki-client