Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft
File: Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft (raw, json)
Hash identifier: OU3rOKRKYej1djEx3NJ1mloFlfHVmTa2eK8EITGtvSE=
Subject key identifier: 11:39:7B:7D:E0:BE:07:50:67:90:FF:AC:A0:DD:66:C5:4A:EB:92:7C
Authority key identifier: 2E:2F:B4:44:6B:97:F4:E0:C2:A9:55:8D:D9:9D:AC:CB:F2:9E:38:06
Certificate issuer: /CN=2e2fb4446b97f4e0c2a9558dd99daccbf29e3806
Certificate serial: 019CACEB883D30B5E457D3E8D83BD7306243
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft
Manifest number: 0298
Signing time: Mon 02 Mar 2026 05:00:42 +0000
Manifest this update: Mon 02 Mar 2026 05:00:42 +0000
Manifest next update: Tue 03 Mar 2026 05:00:42 +0000
Files and hashes: 1: Li-0RGuX9ODCqVWN2Z2sy_KeOAY.crl (hash: 6UY5WHFetfCW/OdcVu/5YwpTQvBG7gU8WnRkrrh06ys=)
2: aeKNaD6uMJiw1mInBrVnH3hu2rM.roa (hash: 2dAhInK00WGRR5RlwdxiRxeThK0keHj6GNSl0+Y8Gsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:88:3d:30:b5:e4:57:d3:e8:d8:3b:d7:30:62:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e2fb4446b97f4e0c2a9558dd99daccbf29e3806
Validity
Not Before: Mar 2 05:00:42 2026 GMT
Not After : Mar 3 05:00:42 2026 GMT
Subject: CN=11397b7de0be07506790ffaca0dd66c54aeb927c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:88:d6:50:05:47:71:c4:da:39:de:c6:50:9e:
c3:b6:98:c7:c9:d3:30:76:44:49:9e:a5:58:97:7a:
c2:37:a3:66:2c:d8:fb:f5:6a:75:92:dc:ce:fb:73:
6f:24:53:9a:c9:2e:fe:5d:3b:27:2f:01:7d:30:16:
66:47:e8:a2:38:b0:88:bd:b7:1e:a4:69:2f:6a:b4:
fa:07:f9:3a:7a:7f:ea:85:4d:67:7c:81:6b:8e:bb:
3c:77:d2:5f:21:69:c2:d5:2c:e0:48:fb:c2:7d:45:
54:5e:05:98:e0:a7:bb:83:da:39:06:3a:34:90:e6:
0c:11:30:af:10:5c:41:6d:2b:2a:a2:d6:8a:c3:f5:
a3:a5:5f:2b:88:a3:1b:5a:49:05:4b:7d:9f:59:45:
97:9b:2f:7d:ed:73:aa:f8:39:40:f2:a7:ce:08:c4:
92:ee:bd:20:22:07:95:09:19:df:ea:e7:a9:d7:af:
d0:69:c9:bc:e5:eb:30:cc:ed:02:00:9f:4d:88:34:
d9:e7:16:63:1f:b2:92:0a:c8:57:ca:9d:cd:a3:37:
9c:7f:94:66:42:45:de:0a:e8:03:8e:97:2b:04:a4:
bb:fc:9d:7d:92:f6:34:ff:ff:e4:11:b5:9c:9c:66:
0d:a2:e1:90:d3:67:42:c2:cf:2a:1b:00:70:72:f9:
ca:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:39:7B:7D:E0:BE:07:50:67:90:FF:AC:A0:DD:66:C5:4A:EB:92:7C
X509v3 Authority Key Identifier:
keyid:2E:2F:B4:44:6B:97:F4:E0:C2:A9:55:8D:D9:9D:AC:CB:F2:9E:38:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:fd:33:a3:23:bc:03:6b:80:09:fb:7e:ad:4f:2e:52:2f:0e:
d5:e2:a5:ed:f6:f3:f0:75:d0:c1:00:45:52:e3:b7:8e:45:b9:
a8:a7:8b:a0:46:91:b4:a2:10:68:64:ed:31:4b:68:09:1a:d0:
4c:95:05:36:24:e8:ba:2b:66:82:b2:98:5e:b5:84:54:d9:bc:
dd:9e:90:49:d3:39:d8:18:53:05:c7:e0:70:1a:71:4c:4b:cb:
4f:81:09:1e:0f:f7:3a:69:be:83:7e:53:97:47:e0:f8:07:07:
89:d4:ea:c6:65:6f:5e:7e:2f:2c:db:58:ae:25:94:e3:c1:15:
cd:94:bb:41:2e:b2:f4:ee:78:0b:7e:5d:6d:51:f8:68:9b:29:
3d:65:9a:7f:a2:13:46:b0:bf:a8:bf:70:23:11:8e:be:78:17:
44:26:76:39:80:78:23:9a:1d:97:c0:f2:90:fa:77:ff:b9:ed:
ad:bf:17:09:ee:e4:8a:a0:14:53:3e:58:af:f2:58:70:ac:d4:
95:9a:86:cd:6a:02:75:a2:74:fc:ad:19:3e:04:b3:f2:ca:ad:
cc:53:71:8c:81:69:14:3d:a0:7f:03:a2:80:c7:26:e7:5c:0e:
c5:a0:4c:5e:de:e7:e1:7b:ec:af:e4:e8:0b:c6:3c:1b:ef:78:
c8:6a:09:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:02:51 2026 by rpki-client