Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/ed5452-39e2-43bb-9644-222baf953b44/1/Li8BGtqu7EZbGCrucJw2fIfljzg.mft
File: Li8BGtqu7EZbGCrucJw2fIfljzg.mft (raw, json)
Hash identifier: eELhCq9gny8Ofip7gEnl9RIWduwka2s18RsQnAVMLzI=
Subject key identifier: D9:AA:B4:8F:13:60:BD:32:39:C0:96:A0:89:14:F1:8E:5F:95:D9:6A
Authority key identifier: 2E:2F:01:1A:DA:AE:EC:46:5B:18:2A:EE:70:9C:36:7C:87:E5:8F:38
Certificate issuer: /CN=2e2f011adaaeec465b182aee709c367c87e58f38
Certificate serial: 019D9A3E4F1E9D21FA8D8554191207B3E869
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Li8BGtqu7EZbGCrucJw2fIfljzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/ed5452-39e2-43bb-9644-222baf953b44/1/Li8BGtqu7EZbGCrucJw2fIfljzg.mft
Manifest number: 0CCE
Signing time: Fri 17 Apr 2026 07:01:07 +0000
Manifest this update: Fri 17 Apr 2026 07:01:07 +0000
Manifest next update: Sat 18 Apr 2026 07:01:07 +0000
Files and hashes: 1: Li8BGtqu7EZbGCrucJw2fIfljzg.crl (hash: Xma+wZfA+BVFvZwwIJMznxzykYBV2O9575bvYOLOy+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/ed5452-39e2-43bb-9644-222baf953b44/1/Li8BGtqu7EZbGCrucJw2fIfljzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/ed5452-39e2-43bb-9644-222baf953b44/1/Li8BGtqu7EZbGCrucJw2fIfljzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Li8BGtqu7EZbGCrucJw2fIfljzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:4f:1e:9d:21:fa:8d:85:54:19:12:07:b3:e8:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e2f011adaaeec465b182aee709c367c87e58f38
Validity
Not Before: Apr 17 07:01:07 2026 GMT
Not After : Apr 18 07:01:07 2026 GMT
Subject: CN=d9aab48f1360bd3239c096a08914f18e5f95d96a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f7:81:fb:d6:55:06:60:78:01:bb:cd:b4:19:
ec:db:62:8c:96:0e:6d:5e:8c:a8:58:8e:a6:a8:aa:
69:93:fc:d4:98:89:11:ac:e1:f4:42:6c:83:d5:d6:
e0:16:78:e9:24:68:cd:bb:9f:40:c8:96:9f:49:85:
34:63:20:c5:d0:0b:3a:9a:f8:75:d2:77:c8:54:06:
83:32:ed:41:ef:d5:02:6e:cf:32:d9:bc:95:33:4c:
8a:4b:6f:c5:2d:74:be:7c:44:c7:02:21:ac:5e:25:
ba:fe:be:51:82:6c:b4:77:4b:21:13:e6:6b:f6:d7:
cc:5f:be:94:4c:fe:84:37:ab:a5:64:c1:d8:cc:62:
30:08:dd:b6:0d:42:14:29:dd:4a:94:0f:38:2c:a5:
5d:35:3b:bc:47:7a:a7:dc:fe:99:ff:6a:cf:b5:6c:
5f:58:e9:23:3a:19:b9:8a:dd:24:d1:53:7c:d3:d6:
85:16:0d:35:36:22:8d:f1:ab:75:f1:e5:ab:cf:5f:
f8:2c:71:27:92:d5:7c:1b:71:57:56:fc:2c:c0:95:
54:e1:75:89:58:5e:89:38:0c:52:36:3d:90:0b:50:
55:19:5a:c9:33:9b:01:1a:8a:e1:09:c5:a4:b0:4c:
d8:3a:b7:c4:f2:63:79:95:9c:e2:13:e4:09:70:73:
22:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:AA:B4:8F:13:60:BD:32:39:C0:96:A0:89:14:F1:8E:5F:95:D9:6A
X509v3 Authority Key Identifier:
keyid:2E:2F:01:1A:DA:AE:EC:46:5B:18:2A:EE:70:9C:36:7C:87:E5:8F:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Li8BGtqu7EZbGCrucJw2fIfljzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ed5452-39e2-43bb-9644-222baf953b44/1/Li8BGtqu7EZbGCrucJw2fIfljzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ed5452-39e2-43bb-9644-222baf953b44/1/Li8BGtqu7EZbGCrucJw2fIfljzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:8d:43:64:1e:dc:27:12:2a:31:ea:12:5d:87:41:37:e5:1e:
76:3d:a9:92:19:d1:eb:cb:af:52:4d:48:6e:61:54:c6:73:e4:
63:09:6a:c6:8c:1b:fb:d5:84:b6:4c:f9:22:0c:ab:98:f3:44:
5c:70:bd:62:99:2c:79:fc:a7:95:f6:75:16:e8:a8:8d:4a:bb:
be:9a:9a:28:23:aa:b8:7c:aa:43:71:09:25:0d:da:a1:1d:3c:
d6:4f:ef:66:e0:77:3d:74:e3:19:33:16:ad:fc:0d:0b:01:88:
c7:64:b2:ab:47:44:a6:d0:80:29:8d:69:75:ac:43:80:79:93:
d7:cd:b6:c3:55:4c:ee:32:97:18:ef:19:a8:b5:1c:bc:8d:ad:
0b:7e:bf:03:9f:c0:3f:c5:d0:da:3f:f6:08:1d:bc:1a:d0:26:
ea:04:19:65:37:b0:8e:6e:a6:bb:ed:aa:d4:41:42:ec:50:c4:
08:44:65:47:02:93:01:28:b9:e0:65:f9:c0:e4:0f:91:f3:f7:
22:f9:d2:c2:0c:c6:1e:93:60:2b:c1:90:e3:4b:d9:d3:4e:6e:
ac:ba:f5:14:fe:b2:c4:84:46:a9:71:3b:ea:4c:d5:d5:29:82:
49:47:81:d6:e3:6f:43:18:55:d1:c6:f9:35:d1:19:82:3a:b8:
d0:98:ed:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:19:30 2026 by rpki-client