Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
File: LI-oUz3MgguhrW-ysvAWEBBTHbk.mft (raw, json)
Hash identifier: lm+ICcSaBVKSRZsvQevV9U9hnHIPwj7xlUprAQSTos0=
Subject key identifier: F9:B1:F4:11:70:62:96:7F:EB:C1:3E:25:AD:23:5B:47:A4:9F:BF:21
Authority key identifier: 2C:8F:A8:53:3D:CC:82:0B:A1:AD:6F:B2:B2:F0:16:10:10:53:1D:B9
Certificate issuer: /CN=2c8fa8533dcc820ba1ad6fb2b2f0161010531db9
Certificate serial: 019FA9E3427D05794F7AFAAA0429D52F0546
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
Manifest number: 0BD4
Signing time: Tue 28 Jul 2026 18:01:10 +0000
Manifest this update: Tue 28 Jul 2026 18:01:10 +0000
Manifest next update: Wed 29 Jul 2026 18:01:10 +0000
Files and hashes: 1: CMpz6Z0ZjbzrsumthPk2h0kU714.roa (hash: A3lBqvLRLb63Z2zkD/QiutUnKW5oZQPl9laeX3xcP64=)
2: LI-oUz3MgguhrW-ysvAWEBBTHbk.crl (hash: lt1ggRjmKPoRkbdAD8woVIHkdDKgAjCWq4/Rokz55i8=)
3: PRW-hNh_LQ1tYJtEgFeANrexr4g.roa (hash: EtDY3iCkv6z8EfmjFrXYO7Uslfyf9DYjVpRw+acf/tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e3:42:7d:05:79:4f:7a:fa:aa:04:29:d5:2f:05:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c8fa8533dcc820ba1ad6fb2b2f0161010531db9
Validity
Not Before: Jul 28 18:01:10 2026 GMT
Not After : Jul 29 18:01:10 2026 GMT
Subject: CN=f9b1f4117062967febc13e25ad235b47a49fbf21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ee:cc:e5:bb:30:05:2d:b3:16:ad:c8:22:06:
45:74:34:9b:bf:28:5c:f1:5a:a4:68:a4:f4:9d:6a:
a6:5b:a5:dc:86:c5:25:c8:54:88:cc:40:c7:48:7c:
82:17:40:ed:13:c1:18:c9:b7:35:af:b8:d2:a3:55:
c9:2c:88:cb:a1:77:91:77:72:cf:b4:50:be:ea:d7:
25:0a:16:77:2d:9a:e4:47:0f:08:0f:73:d9:3e:fc:
e7:40:af:e9:97:13:5e:b4:59:41:ea:08:f0:e1:50:
b4:75:97:db:e4:cd:f2:b0:83:ee:32:c3:f4:4d:7f:
8b:1c:e3:2e:32:4a:e2:82:49:5b:82:b6:ef:3e:07:
b7:52:78:08:4e:44:47:e3:5c:0a:6d:bf:75:93:c5:
aa:72:2a:14:10:b2:f5:00:cf:08:cf:79:b6:b3:aa:
12:2d:a3:17:3c:b2:a4:63:4a:58:97:e9:2d:ae:f6:
96:2c:00:4e:8b:2b:96:ff:7d:dd:45:d3:96:16:63:
41:27:5e:30:32:a0:e7:fb:b8:7e:60:24:6e:07:94:
bc:98:f1:b5:c4:b5:99:63:ff:bf:8b:fb:89:77:a7:
62:b6:fb:80:f2:3d:86:2a:ff:8f:72:82:f2:15:cc:
10:b2:cd:53:a4:92:27:81:ba:e3:0d:b4:26:63:42:
b0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:B1:F4:11:70:62:96:7F:EB:C1:3E:25:AD:23:5B:47:A4:9F:BF:21
X509v3 Authority Key Identifier:
keyid:2C:8F:A8:53:3D:CC:82:0B:A1:AD:6F:B2:B2:F0:16:10:10:53:1D:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:82:6b:0d:cc:6c:69:02:1c:c9:39:41:34:0c:c3:1d:54:a2:
e7:bd:07:c2:76:82:8d:e6:5b:11:e9:e5:a5:7b:14:20:03:26:
a4:5a:6b:a4:9a:71:76:1f:b6:45:cc:d7:8f:af:d8:fb:0b:63:
1e:f1:d7:2c:23:5c:5c:82:b8:df:c5:68:b0:8f:89:dc:84:7e:
34:3e:10:e6:c6:0b:ae:71:a0:a9:9e:94:4a:ef:25:26:fb:20:
01:03:6a:92:c2:45:2a:ca:fa:05:42:7c:df:dc:a5:a2:b6:42:
90:1e:f6:ee:ab:2e:e6:eb:cb:f2:55:89:ae:da:e9:48:02:3f:
9d:60:38:73:84:4e:39:d7:f1:a0:c0:fa:fc:5e:83:58:cc:c3:
b3:0d:34:96:6d:86:c1:47:5c:0e:41:01:df:72:0a:4f:6c:59:
13:32:52:0e:d8:22:20:e2:46:aa:97:d8:08:ba:04:d8:2d:a1:
a6:29:e1:b3:65:25:75:a3:01:36:ae:fe:34:37:0c:d0:83:a8:
3e:a4:e6:f7:af:91:d4:7a:2b:2d:42:70:5e:95:1b:85:b5:4f:
bd:c6:01:49:32:bc:9f:10:be:54:50:95:09:9d:96:02:48:03:
7b:81:52:99:ee:4c:72:c8:dc:7c:18:ac:66:5a:5b:19:97:77:
9e:a6:dc:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:04:39 2026 by rpki-client