Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft
File: Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft (raw, json)
Hash identifier: h8Euuk9zdCT7CSXLfpq4lpFTWPaFO0rtpJx5nJVy+EY=
Subject key identifier: EF:90:E3:32:D3:7F:0B:1E:03:34:08:5D:1D:57:00:79:18:E7:DB:53
Authority key identifier: 2E:2F:B4:44:6B:97:F4:E0:C2:A9:55:8D:D9:9D:AC:CB:F2:9E:38:06
Certificate issuer: /CN=2e2fb4446b97f4e0c2a9558dd99daccbf29e3806
Certificate serial: 01A0E474F5C2A066F52764798122948C632E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft
Manifest number: 04C7
Signing time: Sun 27 Sep 2026 20:01:05 +0000
Manifest this update: Sun 27 Sep 2026 20:01:05 +0000
Manifest next update: Mon 28 Sep 2026 20:01:05 +0000
Files and hashes: 1: Li-0RGuX9ODCqVWN2Z2sy_KeOAY.crl (hash: RgTkkKBjt882bDOulkvGho6eIccBakbtnro0/nMTuBI=)
2: aeKNaD6uMJiw1mInBrVnH3hu2rM.roa (hash: 2dAhInK00WGRR5RlwdxiRxeThK0keHj6GNSl0+Y8Gsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e4:74:f5:c2:a0:66:f5:27:64:79:81:22:94:8c:63:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e2fb4446b97f4e0c2a9558dd99daccbf29e3806
Validity
Not Before: Sep 27 20:01:05 2026 GMT
Not After : Sep 28 20:01:05 2026 GMT
Subject: CN=ef90e332d37f0b1e0334085d1d57007918e7db53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3d:da:fc:0f:81:79:1e:5a:3a:63:c8:65:5a:
5e:09:61:54:42:c3:a7:05:5d:04:77:3d:25:e0:e8:
24:bf:31:fc:91:8e:74:0f:ae:9d:de:0f:d5:b3:06:
d0:ca:14:4b:c6:b5:c8:21:fc:2e:cb:6f:55:87:e9:
c2:15:4f:ae:c0:fd:a0:f8:b9:c7:ee:fd:9c:08:7a:
d4:98:97:3c:d2:73:23:6b:e5:02:bd:04:3e:69:db:
78:2f:47:2a:f7:b7:4b:6d:31:96:33:5a:bc:3d:c2:
94:d5:7a:7c:d0:95:19:ac:11:6c:79:48:da:74:49:
96:53:c4:fd:7c:f7:23:f1:2f:b2:f2:87:63:a6:22:
32:dd:e1:d5:3a:a5:30:a6:b7:97:7b:ae:84:a9:94:
24:77:15:f0:86:6a:a2:e7:fc:78:a0:79:55:cc:48:
9c:fa:e9:e2:36:5f:bb:ae:28:44:de:6c:b9:2d:4b:
6b:c0:30:cf:12:9d:36:36:4b:02:93:35:fe:51:68:
f3:2a:a0:5a:bf:30:2d:81:13:a5:70:5c:a8:b6:f6:
7f:f5:7c:8a:29:6d:1b:20:be:79:84:0c:29:53:83:
7c:7a:d9:9b:ed:89:da:9b:1f:d2:97:20:9f:fb:34:
8f:3a:f1:18:2d:24:7e:87:48:44:6c:79:b7:c2:36:
de:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:90:E3:32:D3:7F:0B:1E:03:34:08:5D:1D:57:00:79:18:E7:DB:53
X509v3 Authority Key Identifier:
keyid:2E:2F:B4:44:6B:97:F4:E0:C2:A9:55:8D:D9:9D:AC:CB:F2:9E:38:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:92:55:bb:24:97:53:4c:02:aa:21:f9:8d:ef:f9:19:59:1d:
b1:cc:43:1e:0e:bb:08:be:16:31:25:f0:bb:4b:96:fe:83:69:
11:a6:88:d2:16:e6:09:bb:64:21:a0:bf:a1:f0:9c:12:39:96:
90:ef:ca:94:de:ac:33:00:c8:87:48:9b:77:43:cd:a5:11:b0:
f4:26:f7:b9:1c:1b:78:c6:12:89:fd:a7:d9:ca:40:ec:73:dd:
31:8d:ed:d3:6d:25:91:07:54:56:2f:35:d4:61:b2:bb:3c:58:
47:56:72:de:33:c7:f0:b7:cb:93:8f:5b:da:57:65:80:83:e7:
bd:33:3a:9a:7e:64:ab:d7:1f:3c:90:4f:d8:80:1c:80:0a:f0:
19:a2:ae:b4:f9:59:69:1e:5f:0c:5a:b8:f2:88:17:be:c8:55:
97:26:d4:8a:9a:09:9a:c3:7c:df:a9:7a:29:b6:9b:01:ff:f4:
7e:89:14:23:15:b7:c8:80:c6:66:0d:d6:13:5f:b5:a9:1e:d3:
55:a7:29:19:ac:5a:5f:55:3b:fa:51:07:27:30:57:b3:23:9f:
83:93:5a:f9:7f:43:72:49:e4:9d:67:ba:3f:9c:ea:63:81:e7:
f0:c0:b8:d5:af:a9:64:f2:ad:ad:ef:8c:c1:b2:33:d9:66:55:
de:27:e8:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 02:18:53 2026 by rpki-client