Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/ed5452-39e2-43bb-9644-222baf953b44/1/Li8BGtqu7EZbGCrucJw2fIfljzg.mft
File: Li8BGtqu7EZbGCrucJw2fIfljzg.mft (raw, json)
Hash identifier: npdjtUKSIpTjy2i8jv16qEPMlQcbP9mqDWMyxTs3nfU=
Subject key identifier: 22:F8:D9:CA:D9:45:E8:DA:F1:50:8D:97:FE:38:E9:57:18:1B:47:0A
Authority key identifier: 2E:2F:01:1A:DA:AE:EC:46:5B:18:2A:EE:70:9C:36:7C:87:E5:8F:38
Certificate issuer: /CN=2e2f011adaaeec465b182aee709c367c87e58f38
Certificate serial: 019CAAC610292F44EE824DCAD26B646AA5A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Li8BGtqu7EZbGCrucJw2fIfljzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/ed5452-39e2-43bb-9644-222baf953b44/1/Li8BGtqu7EZbGCrucJw2fIfljzg.mft
Manifest number: 0C52
Signing time: Sun 01 Mar 2026 19:00:32 +0000
Manifest this update: Sun 01 Mar 2026 19:00:32 +0000
Manifest next update: Mon 02 Mar 2026 19:00:32 +0000
Files and hashes: 1: Li8BGtqu7EZbGCrucJw2fIfljzg.crl (hash: +r3jdzdr3gFI732//SV5XrA46R87ED6IPMFhm5N/rcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/ed5452-39e2-43bb-9644-222baf953b44/1/Li8BGtqu7EZbGCrucJw2fIfljzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/ed5452-39e2-43bb-9644-222baf953b44/1/Li8BGtqu7EZbGCrucJw2fIfljzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Li8BGtqu7EZbGCrucJw2fIfljzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:10:29:2f:44:ee:82:4d:ca:d2:6b:64:6a:a5:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e2f011adaaeec465b182aee709c367c87e58f38
Validity
Not Before: Mar 1 19:00:32 2026 GMT
Not After : Mar 2 19:00:32 2026 GMT
Subject: CN=22f8d9cad945e8daf1508d97fe38e957181b470a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c7:a9:7f:97:ba:41:05:9b:b7:cc:a9:ae:8a:
72:b0:97:d5:74:c0:3c:d4:38:00:f7:ef:cd:d7:f1:
64:0f:98:fc:6e:2d:49:25:92:f6:c3:1d:13:b1:84:
e5:53:e8:23:3b:d2:d9:22:00:c3:9d:d4:0e:63:fd:
76:d6:50:bf:83:3c:b8:b0:eb:1f:52:68:48:51:85:
90:fe:07:0d:be:d7:09:db:6e:6d:1c:e4:8c:22:10:
1b:4e:34:9d:2d:88:7b:e3:02:a0:6f:9a:0e:e5:09:
b5:97:8b:07:ae:f8:ca:df:3d:75:50:ac:78:62:93:
90:f3:3b:28:fe:bd:0f:2e:6f:b2:8b:31:11:57:0b:
8f:f0:11:6f:0f:51:06:54:ca:78:ec:9c:94:de:d1:
53:e2:f2:97:5d:f0:7e:34:23:6d:d4:00:ee:5e:07:
3e:d0:a6:e9:e6:22:5d:35:cc:c2:3d:ef:7f:da:76:
ca:05:68:c9:c9:c3:f7:fa:63:22:2e:21:6d:0c:e2:
8a:61:71:07:86:cc:ea:98:27:44:a9:9a:19:18:f0:
30:ac:10:4e:df:43:3d:5c:a1:00:39:63:1b:7f:66:
aa:6f:dd:66:8d:40:23:e2:b5:9e:f4:69:9d:e8:9b:
45:39:6b:4e:fd:87:b0:e6:3d:fa:9c:af:ef:cc:a6:
07:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:F8:D9:CA:D9:45:E8:DA:F1:50:8D:97:FE:38:E9:57:18:1B:47:0A
X509v3 Authority Key Identifier:
keyid:2E:2F:01:1A:DA:AE:EC:46:5B:18:2A:EE:70:9C:36:7C:87:E5:8F:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Li8BGtqu7EZbGCrucJw2fIfljzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ed5452-39e2-43bb-9644-222baf953b44/1/Li8BGtqu7EZbGCrucJw2fIfljzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ed5452-39e2-43bb-9644-222baf953b44/1/Li8BGtqu7EZbGCrucJw2fIfljzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:89:4a:2d:87:98:24:4f:ff:1e:a4:27:3e:1c:7c:f9:ac:f6:
17:b1:e7:13:b1:cf:b7:b2:cc:4c:9e:62:fa:74:31:76:4a:79:
45:5b:6a:91:e1:b9:45:db:51:b6:68:9c:e1:61:c8:13:05:54:
47:d1:ce:24:77:6b:54:4f:e0:56:93:99:d2:54:8a:53:06:ab:
c5:d3:83:1b:6b:b8:a2:85:fd:84:f6:37:c8:c3:13:67:8f:b4:
63:de:01:d2:ee:2c:b5:7a:06:25:b0:50:5e:67:21:d6:2c:51:
2f:b7:14:06:bd:c0:66:6a:8a:97:76:b7:4d:6b:3d:43:74:a4:
24:d0:f1:6d:ae:02:a6:6c:29:98:66:92:51:6b:c5:07:00:83:
41:35:59:15:5a:0a:d5:cb:5f:79:b7:a6:3e:e4:db:46:3e:75:
14:36:09:38:8f:b5:b3:89:45:85:2b:59:8d:1c:15:58:55:1e:
0c:d2:5b:27:99:73:c0:8d:20:71:d1:b9:c7:1a:29:1c:1e:05:
a9:b4:ff:db:77:31:7b:a0:70:6d:ea:98:73:3d:88:d3:19:8f:
6e:79:dc:c2:8a:46:7d:b4:1e:b4:2b:8e:a0:dc:4e:99:88:7e:
69:59:61:fb:77:6e:9e:e6:0f:06:cc:83:8a:2a:1d:38:ec:9d:
49:d1:4d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:00:12 2026 by rpki-client