Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/32024d-d3e7-4ad0-8a91-3318504c7750/1/LI_zYU_QyKi36WPM8gw68IXius4.mft
File: LI_zYU_QyKi36WPM8gw68IXius4.mft (raw, json)
Hash identifier: jca1GEvBCruLe3XW62ffojeneKUi1iWPCszviIlGGkU=
Subject key identifier: 71:9A:2F:2D:59:91:E9:B4:ED:26:A5:3C:9A:ED:CE:9A:DF:79:0B:99
Authority key identifier: 2C:8F:F3:61:4F:D0:C8:A8:B7:E9:63:CC:F2:0C:3A:F0:85:E2:BA:CE
Certificate issuer: /CN=2c8ff3614fd0c8a8b7e963ccf20c3af085e2bace
Certificate serial: 019D9C2D3CDA2C2EBE16A70C084C1C9C91D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LI_zYU_QyKi36WPM8gw68IXius4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/32024d-d3e7-4ad0-8a91-3318504c7750/1/LI_zYU_QyKi36WPM8gw68IXius4.mft
Manifest number: 06
Signing time: Fri 17 Apr 2026 16:01:43 +0000
Manifest this update: Fri 17 Apr 2026 16:01:43 +0000
Manifest next update: Sat 18 Apr 2026 16:01:43 +0000
Files and hashes: 1: 10MlIdaB7FNbLaMDGR2pTyUhDNM.roa (hash: uJVs0I5nGDm0fMwDeKlKvP2NDCYTHKgILZ0u68qw/qM=)
2: AqfiHRSMPIcbIVkiIdixaRazNn0.roa (hash: UDIOUMnhU9VicSJL71PeZpDe6IjDOXbKWWhQadSznoc=)
3: LI_zYU_QyKi36WPM8gw68IXius4.crl (hash: sPDVLSepS17z+U4wlBusPlFUfy2tzDQFQGqppNLQOQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/32024d-d3e7-4ad0-8a91-3318504c7750/1/LI_zYU_QyKi36WPM8gw68IXius4.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/32024d-d3e7-4ad0-8a91-3318504c7750/1/LI_zYU_QyKi36WPM8gw68IXius4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LI_zYU_QyKi36WPM8gw68IXius4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2d:3c:da:2c:2e:be:16:a7:0c:08:4c:1c:9c:91:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c8ff3614fd0c8a8b7e963ccf20c3af085e2bace
Validity
Not Before: Apr 17 16:01:43 2026 GMT
Not After : Apr 18 16:01:43 2026 GMT
Subject: CN=719a2f2d5991e9b4ed26a53c9aedce9adf790b99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:12:e8:08:40:45:33:7a:db:52:2c:ad:2f:db:
48:89:74:28:87:84:8d:8f:59:e5:55:7b:30:67:db:
02:5f:e0:21:8a:1e:b6:4d:9f:02:24:1f:d4:87:b9:
a4:c5:0f:9c:fb:f6:25:1f:5d:fc:37:89:88:92:36:
20:81:60:e8:74:82:0f:d7:c1:b9:31:25:d4:38:d0:
23:17:e0:25:2f:0b:a4:28:af:ca:4c:25:88:9a:2b:
39:b2:c5:a1:42:cb:3e:65:fc:b6:9c:c8:4f:9f:cf:
41:0d:dc:f9:bf:49:8e:a6:b9:73:dd:8c:a0:96:8f:
65:37:e9:d4:10:3b:c2:7e:d1:b7:bd:17:aa:be:d4:
ec:25:8f:ff:ff:88:fc:05:c3:fb:cf:4e:75:a0:73:
ab:93:07:13:40:d8:7f:26:1b:0e:35:d6:41:82:d5:
c1:29:c4:22:cd:d2:66:c9:9c:1a:d3:0e:a8:ba:5e:
b9:ec:66:5b:83:b1:d2:36:22:7e:97:d0:61:72:24:
3e:32:b2:60:1b:e9:f0:5c:ce:e9:1c:de:65:08:e2:
95:bc:2a:5c:93:ee:1e:c3:56:27:3e:31:a7:30:12:
43:83:7a:19:d5:2f:13:15:bc:2a:fb:cc:46:82:f4:
59:c8:8c:27:b5:9e:5b:ea:26:e9:c8:b5:19:be:d7:
34:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:9A:2F:2D:59:91:E9:B4:ED:26:A5:3C:9A:ED:CE:9A:DF:79:0B:99
X509v3 Authority Key Identifier:
keyid:2C:8F:F3:61:4F:D0:C8:A8:B7:E9:63:CC:F2:0C:3A:F0:85:E2:BA:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LI_zYU_QyKi36WPM8gw68IXius4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/32024d-d3e7-4ad0-8a91-3318504c7750/1/LI_zYU_QyKi36WPM8gw68IXius4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/32024d-d3e7-4ad0-8a91-3318504c7750/1/LI_zYU_QyKi36WPM8gw68IXius4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:22:57:a4:27:e3:e0:6d:18:50:2b:f2:0c:d9:30:73:eb:d9:
55:c2:66:01:6e:bc:7e:dd:99:a5:70:e6:e8:f6:78:6e:ca:60:
35:b3:ce:65:a6:c2:6d:b1:e2:51:56:27:00:33:80:e1:e9:b5:
39:1d:b4:85:35:03:25:9e:8e:7d:98:42:b5:38:2d:90:a4:8a:
77:02:53:fc:74:c9:2a:74:27:b2:27:6b:7b:06:f1:c1:1a:1b:
5d:dc:ef:97:e7:ad:71:0e:e8:ed:9f:70:43:0c:92:73:6d:50:
3a:4e:fc:86:f8:41:7e:37:90:a3:13:e0:ac:52:ff:ee:ef:25:
ff:30:ea:8d:b5:5d:b7:c4:ab:f9:f5:a3:9a:cc:86:0b:d5:b4:
46:93:d4:b5:75:ea:48:2d:eb:29:a4:c5:5a:f7:38:94:e9:46:
33:9e:a9:ef:c7:00:34:54:91:32:ce:2f:6b:57:ff:ec:41:53:
7c:62:c8:a4:93:fa:78:a6:4e:dd:31:c4:ba:c8:b8:55:e1:13:
c6:c4:97:5a:d1:ef:d6:59:24:53:28:fa:5e:2b:60:5e:f9:7e:
94:0e:64:73:c4:87:7a:ee:96:e8:f5:4b:38:af:67:cd:fe:3c:
69:88:72:81:1f:8e:1a:a0:bb:78:c3:13:4e:f8:f6:d4:68:87:
ce:16:56:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:24:55 2026 by rpki-client