Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft
File: Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft (raw, json)
Hash identifier: SgLXtwW0OKt20QsvdFDZH2e+ptCsi4ER7X/y6UCMLr8=
Subject key identifier: 33:A9:E0:E7:27:68:D2:A1:C1:2B:44:B3:1A:C2:F8:FA:49:D1:C8:B2
Authority key identifier: 2E:2F:B4:44:6B:97:F4:E0:C2:A9:55:8D:D9:9D:AC:CB:F2:9E:38:06
Certificate issuer: /CN=2e2fb4446b97f4e0c2a9558dd99daccbf29e3806
Certificate serial: 019FA9ABD6946E4FF9F8EF9B050344420323
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft
Manifest number: 0424
Signing time: Tue 28 Jul 2026 17:00:38 +0000
Manifest this update: Tue 28 Jul 2026 17:00:38 +0000
Manifest next update: Wed 29 Jul 2026 17:00:38 +0000
Files and hashes: 1: Li-0RGuX9ODCqVWN2Z2sy_KeOAY.crl (hash: EEmA3rS7vivusmkjK1lFWD5KDGzALCRlbLsmLCe4miQ=)
2: aeKNaD6uMJiw1mInBrVnH3hu2rM.roa (hash: 2dAhInK00WGRR5RlwdxiRxeThK0keHj6GNSl0+Y8Gsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 17:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ab:d6:94:6e:4f:f9:f8:ef:9b:05:03:44:42:03:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e2fb4446b97f4e0c2a9558dd99daccbf29e3806
Validity
Not Before: Jul 28 17:00:38 2026 GMT
Not After : Jul 29 17:00:38 2026 GMT
Subject: CN=33a9e0e72768d2a1c12b44b31ac2f8fa49d1c8b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ef:d5:46:84:51:ee:cd:c1:cc:23:e3:1b:62:
4f:5d:5a:15:be:a5:22:d4:e5:72:b2:8e:39:80:ee:
7a:c1:2e:a7:d5:15:05:a7:bb:26:5a:66:ed:d7:83:
aa:dc:7c:57:69:c0:c0:2d:81:0a:3b:7a:9f:7c:35:
12:dd:b2:e9:1f:89:e1:bc:a8:f5:74:4a:0c:5c:ce:
d3:67:04:f4:7d:8c:db:a8:cb:47:85:25:85:34:19:
2b:2d:bd:5d:19:7a:9c:5f:ad:d2:7f:0a:b9:2d:2b:
11:36:3e:16:e2:14:f5:45:8a:0d:6e:78:d7:d5:6b:
c3:47:d5:10:f5:01:e5:9e:cb:97:d9:b2:55:10:64:
18:68:ae:2c:ac:63:d9:08:04:3e:3e:d3:b8:f2:3c:
be:4a:b9:e6:1e:15:17:4d:a5:37:71:33:27:03:a3:
d4:2b:fe:fa:f1:44:4e:2a:c6:48:c9:a6:1c:57:73:
96:f9:c0:48:5b:30:12:8c:ab:03:e8:f6:5a:6f:c3:
3c:8c:8c:ac:74:43:d8:2e:85:a0:99:7e:c0:b4:1f:
53:4b:16:15:d1:84:52:34:73:38:10:49:d7:66:df:
f7:dc:09:f2:b0:b9:e8:49:ad:9d:52:25:86:88:18:
3a:2c:74:01:01:9b:b2:92:bd:2b:65:bb:84:8e:2d:
28:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:A9:E0:E7:27:68:D2:A1:C1:2B:44:B3:1A:C2:F8:FA:49:D1:C8:B2
X509v3 Authority Key Identifier:
keyid:2E:2F:B4:44:6B:97:F4:E0:C2:A9:55:8D:D9:9D:AC:CB:F2:9E:38:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:f2:61:e3:de:90:3d:27:87:67:4c:4a:54:59:60:6d:a7:b3:
f5:11:0b:70:7e:f3:aa:d7:6e:35:97:db:5c:49:3b:17:49:b2:
9e:7e:71:20:f9:69:37:71:34:92:53:bb:3d:b0:68:36:d8:f7:
59:47:3f:10:c9:ce:ab:0c:cb:5c:94:a4:0d:92:dc:82:0f:55:
d2:fd:13:00:16:42:d1:74:ac:fd:1a:56:a8:6e:e4:fb:98:79:
2e:9a:6c:a1:31:d9:0a:34:2f:0a:d7:20:28:90:df:38:3c:d8:
c4:b5:0b:60:74:09:63:e0:e1:eb:9f:63:85:b5:d9:5f:b5:23:
84:7d:bc:e3:70:8a:09:6d:0c:0e:37:e4:a4:0c:90:34:83:07:
74:48:eb:72:07:b7:65:9c:f4:cb:57:31:e7:e9:cb:f4:e4:68:
9f:f2:0a:a3:07:04:fa:5b:f7:0c:0f:59:3e:cc:ab:7f:cb:da:
28:5b:98:7b:9e:d5:94:4a:2d:a0:2b:8f:73:2e:1d:46:55:04:
13:f3:79:08:b4:bc:40:55:43:7c:81:8f:9c:c3:f1:67:b3:dd:
b8:b0:87:e0:80:dd:ff:29:45:b7:62:4a:ca:3f:34:8c:02:c4:
c5:1a:c8:59:ce:a0:8a:64:f3:78:78:b3:a8:0c:28:fb:53:70:
47:ed:8d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:00:23 2026 by rpki-client