Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.mft
File: rLICUNTN02Zxm5adb0EjAcE-uQE.mft (raw, json)
Hash identifier: Yk2T935cjwRr+QXqBye9X9Wocg/R3/NYi96EkaOUof8=
Subject key identifier: 27:3C:68:B5:AE:48:73:40:A5:A7:7C:68:8D:DC:04:BF:6D:AB:E8:FA
Authority key identifier: AC:B2:02:50:D4:CD:D3:66:71:9B:96:9D:6F:41:23:01:C1:3E:B9:01
Certificate issuer: /CN=acb20250d4cdd366719b969d6f412301c13eb901
Certificate serial: 019DA41C854BC93E0352F8E6FF18C7E09582
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rLICUNTN02Zxm5adb0EjAcE-uQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.mft
Manifest number: 18C5
Signing time: Sun 19 Apr 2026 05:00:25 +0000
Manifest this update: Sun 19 Apr 2026 05:00:25 +0000
Manifest next update: Mon 20 Apr 2026 05:00:25 +0000
Files and hashes: 1: 6Y7UUUXvw-PaME2ae-Db8-eLow4.roa (hash: 93NzqW0eaEjLpzAyzS+ITs+WJkp6mSQ9IPQy/xcIc0U=)
2: _ONnyoGJy4BONjnQqy_VIZR_lsQ.asa (hash: fg8lcyp5xk0Ls5QPpNy6ZcES0R4cZ7H66Wj2T/SkgFA=)
3: rLICUNTN02Zxm5adb0EjAcE-uQE.crl (hash: TnQkmIXKy+KO8wFmpvnoCr5UqdstMJeown7fo+Mtrro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/rLICUNTN02Zxm5adb0EjAcE-uQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1c:85:4b:c9:3e:03:52:f8:e6:ff:18:c7:e0:95:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acb20250d4cdd366719b969d6f412301c13eb901
Validity
Not Before: Apr 19 05:00:25 2026 GMT
Not After : Apr 20 05:00:25 2026 GMT
Subject: CN=273c68b5ae487340a5a77c688ddc04bf6dabe8fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:68:4d:1f:a2:3f:c4:26:dc:f1:a1:22:89:cf:
ee:d4:c5:d0:37:74:59:86:80:38:77:cb:82:a6:a7:
7b:d2:f1:84:25:8c:35:de:2d:5c:21:a3:f4:cd:50:
d0:9b:7d:86:05:13:01:aa:8a:15:f8:a0:a4:32:28:
75:77:33:c8:09:33:86:7f:89:1e:ca:79:ac:9d:51:
37:9c:e3:86:6d:24:5c:c2:70:9c:e1:c7:4a:a4:52:
49:c7:67:21:ed:ab:84:20:9a:1e:e6:e8:4f:50:c6:
ce:79:9a:5c:b1:82:0c:01:cf:8b:65:a7:5f:85:64:
17:99:01:8a:64:7d:18:df:6b:35:94:ef:e1:52:f9:
90:8f:7f:a9:21:ad:32:85:d7:1a:b3:cd:b1:0c:da:
79:25:9b:38:f1:f1:f6:49:81:8a:2d:c6:bf:46:ea:
96:ef:4b:d1:ce:82:b6:42:30:18:4a:fc:63:e9:b8:
49:37:e7:61:52:dc:d4:ea:39:b7:ad:b6:3a:52:66:
d0:4c:99:86:b4:6c:b7:81:3f:72:83:a3:23:32:2d:
cc:8f:93:c2:3e:fc:52:e6:10:a7:06:7e:92:f6:31:
40:3a:64:54:ae:db:a5:75:01:bb:23:68:4e:28:09:
b2:fb:05:5f:52:16:7a:d9:ba:f8:ad:f5:a9:d2:a3:
1e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:3C:68:B5:AE:48:73:40:A5:A7:7C:68:8D:DC:04:BF:6D:AB:E8:FA
X509v3 Authority Key Identifier:
keyid:AC:B2:02:50:D4:CD:D3:66:71:9B:96:9D:6F:41:23:01:C1:3E:B9:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLICUNTN02Zxm5adb0EjAcE-uQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:d9:73:d2:56:d0:1c:23:97:0a:a0:fa:35:53:6e:1a:46:37:
f7:60:d1:3f:98:e7:78:a2:ae:74:8b:c0:88:61:ce:f1:92:94:
0b:3a:d4:24:82:74:74:48:82:06:3c:4d:7c:00:e8:7d:fe:28:
9a:54:29:27:95:92:1a:12:4b:77:2e:7c:1e:bf:00:06:49:d3:
cb:a3:42:36:19:63:eb:af:2e:93:ee:46:6f:5c:6c:4c:2f:ac:
aa:a6:2c:c8:c2:90:10:e6:3c:41:61:6b:17:8e:6e:ae:92:c9:
e7:44:cd:b1:7e:63:2c:79:79:a8:8b:0f:69:11:68:c6:67:40:
dc:3c:7c:13:55:e9:5a:f9:fa:af:85:ac:fd:a7:65:cf:66:e2:
9d:99:b3:4f:54:70:34:d2:38:bf:c7:93:de:aa:f7:3e:4d:46:
d5:fc:75:3e:00:de:03:d3:08:04:f8:cd:ce:98:1c:81:06:60:
fd:15:3b:d0:80:e8:9e:54:bb:c3:38:cb:6d:03:e1:38:25:c2:
7f:67:69:b4:95:ce:fc:2f:5e:d2:c8:fd:27:d7:5e:44:88:d8:
52:15:03:0e:ed:b5:41:95:27:4b:e3:bf:78:59:84:ba:2a:d1:
40:27:37:a2:95:2e:b8:23:48:e5:e0:5f:de:76:71:fb:89:0b:
bf:81:95:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:16:44 2026 by rpki-client