Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.mft
File: rLICUNTN02Zxm5adb0EjAcE-uQE.mft (raw, json)
Hash identifier: PQsxO4AFGGZyYgSzDhIUJrdyaPasfX0R8+AOVcK+oZk=
Subject key identifier: 3A:A1:20:93:26:7D:6C:19:0E:DD:74:49:FA:59:63:C8:F4:7B:A6:77
Authority key identifier: AC:B2:02:50:D4:CD:D3:66:71:9B:96:9D:6F:41:23:01:C1:3E:B9:01
Certificate issuer: /CN=acb20250d4cdd366719b969d6f412301c13eb901
Certificate serial: 019FA9ABCD98F636F39664747C9CC9D1E1FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rLICUNTN02Zxm5adb0EjAcE-uQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.mft
Manifest number: 19D2
Signing time: Tue 28 Jul 2026 17:00:36 +0000
Manifest this update: Tue 28 Jul 2026 17:00:36 +0000
Manifest next update: Wed 29 Jul 2026 17:00:36 +0000
Files and hashes: 1: 6Y7UUUXvw-PaME2ae-Db8-eLow4.roa (hash: 93NzqW0eaEjLpzAyzS+ITs+WJkp6mSQ9IPQy/xcIc0U=)
2: P_OEgBIxI3DX0MKf-FEYJo6eyFo.asa (hash: q3HMOpiMlGD6CiLi2aa2cOInUQEEKOMnBwYT7MSrkP8=)
3: rLICUNTN02Zxm5adb0EjAcE-uQE.crl (hash: XGGdoELV0tN5KdopvWts+h0kELJfCLARRFBya+bG1DI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/rLICUNTN02Zxm5adb0EjAcE-uQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ab:cd:98:f6:36:f3:96:64:74:7c:9c:c9:d1:e1:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acb20250d4cdd366719b969d6f412301c13eb901
Validity
Not Before: Jul 28 17:00:36 2026 GMT
Not After : Jul 29 17:00:36 2026 GMT
Subject: CN=3aa12093267d6c190edd7449fa5963c8f47ba677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e4:0c:41:a4:f5:2e:51:d5:92:08:3a:89:f3:
5c:81:d5:e6:8c:7e:f5:94:20:b7:eb:6f:00:0d:72:
0a:3c:d4:52:2e:c3:fc:e5:1b:78:8d:77:6a:f2:8b:
a7:05:34:27:f1:b8:f4:6a:53:0e:dd:47:2e:1f:c1:
0a:0e:7d:b4:63:71:cb:01:e5:de:e1:db:8b:de:2f:
f6:88:d4:f6:dc:85:a3:58:c4:a0:b1:e1:4d:c8:95:
4e:dd:43:e2:bf:15:8d:7e:ed:fc:24:65:7e:ac:b9:
49:7f:a4:58:3f:55:49:6d:11:3f:4d:e3:21:b5:d4:
34:ac:00:33:05:0d:65:f4:37:d1:9a:55:27:7b:25:
38:2f:67:94:9e:de:e3:d7:1b:1d:2b:79:20:2a:91:
2d:2a:db:14:7d:90:75:0b:c9:dc:ef:dc:6c:dd:5a:
ef:3d:37:3c:66:00:71:4c:62:81:d4:15:1f:09:4a:
ff:85:e5:4d:e6:c7:b0:b5:22:f9:a4:c7:d0:d4:4a:
04:d7:1c:bf:ca:9f:76:51:a4:6c:f8:28:bd:d9:2a:
d8:34:3c:92:d5:ad:ba:db:17:f9:ff:f0:47:52:8e:
d5:c7:aa:f6:30:71:08:a8:31:8e:93:49:ff:98:5c:
f6:c6:40:9d:b5:8f:01:39:b9:66:a1:13:7b:61:fd:
ff:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:A1:20:93:26:7D:6C:19:0E:DD:74:49:FA:59:63:C8:F4:7B:A6:77
X509v3 Authority Key Identifier:
keyid:AC:B2:02:50:D4:CD:D3:66:71:9B:96:9D:6F:41:23:01:C1:3E:B9:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLICUNTN02Zxm5adb0EjAcE-uQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:05:bd:af:ba:45:2f:1a:27:da:f1:c2:be:f6:b1:af:90:5e:
7f:25:f7:85:ae:36:0f:15:8a:46:61:5e:50:0f:27:31:bf:d1:
e1:f7:f7:9c:e4:a9:bb:ec:9c:06:d6:38:81:b2:51:f0:7b:2f:
9d:98:f0:b7:49:88:2c:c0:e0:42:35:9d:00:52:bc:67:4a:8d:
67:57:c4:92:c0:3c:29:4a:3c:69:89:64:f0:14:74:ac:3c:2d:
6b:b9:9c:75:0e:28:08:5c:93:a9:9c:86:6a:eb:73:61:73:25:
12:4e:23:49:78:69:60:7d:2c:af:ea:dd:53:85:43:29:2c:b2:
89:39:63:64:00:2a:2e:a7:6f:e7:00:21:9c:c0:d3:b3:fe:fa:
f7:e0:17:81:08:26:54:39:e9:27:03:16:d6:64:44:bd:c6:f0:
ee:e5:a1:a5:4b:6d:10:72:ed:50:e9:04:8f:2f:54:e3:85:34:
ad:55:7f:f9:1a:c0:fe:4c:3f:d6:35:c3:35:62:d3:76:4e:83:
2e:8b:0f:dc:95:10:5f:4e:e5:31:2d:7f:dd:9d:07:ed:cc:0e:
06:af:a4:e2:f0:1a:84:2f:fc:35:84:dd:8b:be:fd:b0:08:c0:
81:7a:5f:02:82:fc:d8:50:b0:67:2f:9e:73:70:76:35:43:92:
fb:64:e9:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:54:04 2026 by rpki-client