Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/32024d-d3e7-4ad0-8a91-3318504c7750/1/LI_zYU_QyKi36WPM8gw68IXius4.mft
File: LI_zYU_QyKi36WPM8gw68IXius4.mft (raw, json)
Hash identifier: SDKGM3dX14Ylq6wWBOP60gKNgzCgpwI+lGN37xvrncI=
Subject key identifier: 18:B8:23:49:B2:29:F4:7B:B2:64:C8:D8:37:B8:3E:DC:32:5B:62:E9
Authority key identifier: 2C:8F:F3:61:4F:D0:C8:A8:B7:E9:63:CC:F2:0C:3A:F0:85:E2:BA:CE
Certificate issuer: /CN=2c8ff3614fd0c8a8b7e963ccf20c3af085e2bace
Certificate serial: 01A0EF668398D10DB0125140ABDF98B59EB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LI_zYU_QyKi36WPM8gw68IXius4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/32024d-d3e7-4ad0-8a91-3318504c7750/1/LI_zYU_QyKi36WPM8gw68IXius4.mft
Manifest number: 01BF
Signing time: Tue 29 Sep 2026 23:01:07 +0000
Manifest this update: Tue 29 Sep 2026 23:01:07 +0000
Manifest next update: Wed 30 Sep 2026 23:01:07 +0000
Files and hashes: 1: 10MlIdaB7FNbLaMDGR2pTyUhDNM.roa (hash: uJVs0I5nGDm0fMwDeKlKvP2NDCYTHKgILZ0u68qw/qM=)
2: LI_zYU_QyKi36WPM8gw68IXius4.crl (hash: 91fbgsw0aqxIFzBlPs9Ot4+gD3l5UUFVRfukDGFrkiQ=)
3: MhcXZnTtDfYiJDVELcnkCFBBkXs.roa (hash: MmN60FYZ1eRqdDs1XAaIfFW9D0B2EiB8PeXLjNIcdRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/32024d-d3e7-4ad0-8a91-3318504c7750/1/LI_zYU_QyKi36WPM8gw68IXius4.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/32024d-d3e7-4ad0-8a91-3318504c7750/1/LI_zYU_QyKi36WPM8gw68IXius4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LI_zYU_QyKi36WPM8gw68IXius4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 20:14:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ef:66:83:98:d1:0d:b0:12:51:40:ab:df:98:b5:9e:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c8ff3614fd0c8a8b7e963ccf20c3af085e2bace
Validity
Not Before: Sep 29 23:01:07 2026 GMT
Not After : Sep 30 23:01:07 2026 GMT
Subject: CN=18b82349b229f47bb264c8d837b83edc325b62e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6e:93:11:62:e1:0c:d2:ed:3c:06:87:a5:5c:
35:94:7e:3a:6d:41:b5:12:6b:50:01:d9:83:8b:3d:
9a:dd:8d:44:c1:13:69:44:d3:e7:89:f7:5e:33:bf:
ce:4f:f6:13:26:d0:67:4e:79:d9:a4:64:b5:7a:f4:
ef:0c:f0:86:c1:6a:ae:8c:a7:a0:3f:3d:32:09:36:
ff:0b:7f:5c:14:3f:59:fa:12:7b:72:26:78:95:12:
68:d4:f6:55:28:c3:94:51:89:76:73:b1:c7:4c:ed:
55:c1:a5:73:ac:23:67:58:fc:5b:7e:76:df:10:5c:
91:cf:12:ce:61:fd:ba:b2:ff:fb:1d:f4:e3:10:87:
17:c7:99:b1:ce:87:2d:6a:e2:47:81:9f:2c:a7:a2:
ea:0a:e1:8a:45:07:a2:21:57:e2:68:60:8a:f4:a8:
48:fa:5a:d0:e4:09:70:4b:ff:ec:b6:06:14:69:2f:
8e:39:28:6c:ec:e8:90:2f:a9:ed:84:f4:e7:c4:73:
b0:c9:1b:ee:17:fe:db:ec:ee:b1:ec:8a:75:dd:07:
5c:c4:ab:ed:df:bd:42:c1:00:3b:59:a5:b6:9b:a2:
79:a7:e5:19:f5:0b:dc:3d:39:4e:19:b8:89:dc:e7:
4b:3c:75:99:04:7e:20:45:54:d1:c4:4d:03:84:53:
46:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:B8:23:49:B2:29:F4:7B:B2:64:C8:D8:37:B8:3E:DC:32:5B:62:E9
X509v3 Authority Key Identifier:
keyid:2C:8F:F3:61:4F:D0:C8:A8:B7:E9:63:CC:F2:0C:3A:F0:85:E2:BA:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LI_zYU_QyKi36WPM8gw68IXius4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/32024d-d3e7-4ad0-8a91-3318504c7750/1/LI_zYU_QyKi36WPM8gw68IXius4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/32024d-d3e7-4ad0-8a91-3318504c7750/1/LI_zYU_QyKi36WPM8gw68IXius4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:8e:05:9a:85:87:11:60:93:39:46:69:34:26:cc:fe:95:a0:
40:21:db:96:e7:58:b9:de:a5:37:6d:c3:8b:8a:dc:a2:9f:22:
ae:73:f2:fa:55:ad:2e:50:6c:e0:dd:12:5c:c2:de:4e:b0:d2:
1b:82:d5:9b:7f:5e:91:0b:cf:b2:18:7b:e8:20:2b:2a:11:4f:
f2:0b:4a:b6:6f:55:f0:18:f9:7d:79:db:37:53:35:64:27:54:
42:b8:28:0e:63:cc:7a:fe:8d:6c:92:cf:51:0d:f6:ab:25:55:
cd:53:6d:5c:b2:8e:e1:7f:85:18:d0:e5:d1:07:1d:b5:60:9c:
0c:ed:2c:c9:46:ff:da:2d:63:b5:3e:23:0d:c5:6b:36:36:54:
cb:56:d0:3b:81:a8:b1:b0:d7:d3:a0:a6:e7:35:47:43:b5:f8:
04:16:3a:c0:53:29:f7:5e:18:a6:71:a0:0d:9e:03:17:88:89:
ca:10:e7:0a:45:ef:08:0f:cc:45:3d:96:d6:35:ec:30:fd:d0:
f0:1d:75:6f:10:51:f6:f0:8b:f5:60:84:73:0a:16:12:f0:ad:
39:6f:6e:af:63:da:d7:82:6a:09:a1:47:11:10:54:6f:ae:3d:
c3:17:1b:74:05:78:9f:49:38:0e:27:02:24:a8:1b:d3:ec:20:
99:bb:62:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 07:01:39 2026 by rpki-client