Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
File: LI-oUz3MgguhrW-ysvAWEBBTHbk.mft (raw, json)
Hash identifier: BsurgqdHpxcEJwDK5n6HbEssvFQvGWuVK1OOHVGWqfU=
Subject key identifier: 0D:5B:B7:5E:22:7D:56:A9:93:B6:25:AF:4B:3C:28:00:C6:68:60:CE
Authority key identifier: 2C:8F:A8:53:3D:CC:82:0B:A1:AD:6F:B2:B2:F0:16:10:10:53:1D:B9
Certificate issuer: /CN=2c8fa8533dcc820ba1ad6fb2b2f0161010531db9
Certificate serial: 019DA453DE6C620B657B80C2D46F0F4D7111
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
Manifest number: 0AC8
Signing time: Sun 19 Apr 2026 06:00:52 +0000
Manifest this update: Sun 19 Apr 2026 06:00:52 +0000
Manifest next update: Mon 20 Apr 2026 06:00:52 +0000
Files and hashes: 1: CMpz6Z0ZjbzrsumthPk2h0kU714.roa (hash: A3lBqvLRLb63Z2zkD/QiutUnKW5oZQPl9laeX3xcP64=)
2: LI-oUz3MgguhrW-ysvAWEBBTHbk.crl (hash: hTYWJm9tJWuqUky8w/nICogY8OTLpaL3qZ4YW5UY6oE=)
3: PRW-hNh_LQ1tYJtEgFeANrexr4g.roa (hash: EtDY3iCkv6z8EfmjFrXYO7Uslfyf9DYjVpRw+acf/tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:de:6c:62:0b:65:7b:80:c2:d4:6f:0f:4d:71:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c8fa8533dcc820ba1ad6fb2b2f0161010531db9
Validity
Not Before: Apr 19 06:00:52 2026 GMT
Not After : Apr 20 06:00:52 2026 GMT
Subject: CN=0d5bb75e227d56a993b625af4b3c2800c66860ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2f:33:48:d0:a0:f6:b9:ae:b8:90:84:4a:f5:
50:85:1e:58:4e:d8:f8:ed:3c:d7:74:29:c9:f3:54:
15:57:de:3e:89:48:e1:38:96:71:66:3a:99:10:1a:
20:7c:13:9e:e5:ac:f4:d2:4d:f4:ad:37:2c:06:5b:
03:ee:5c:2c:7e:5c:fc:43:8e:e6:f2:70:86:56:54:
96:f2:1f:d2:60:8d:48:0c:65:b5:20:34:4e:9e:bb:
06:fb:e8:b5:15:1c:85:d1:e7:90:a9:ba:5b:4f:30:
75:f0:7f:9d:53:d2:fd:9d:82:3b:22:c1:d7:8c:c3:
03:fc:06:32:fc:c0:ab:da:8b:a6:4c:38:4c:14:65:
b8:24:c1:f7:3d:36:60:b1:6d:c3:1b:5f:7d:90:d4:
d9:c8:11:99:32:71:19:e3:52:5b:11:10:c3:d6:df:
07:2b:cf:77:30:aa:cb:0d:75:ae:cc:1c:c8:f9:32:
2f:c2:30:f0:a2:e5:87:86:f8:b5:2d:65:e6:b9:0f:
67:98:3a:af:3a:f2:d8:a7:5e:56:32:28:bd:83:76:
fa:9e:ff:c5:41:ae:a2:47:bd:04:76:6d:f6:b9:dd:
83:98:df:66:52:a6:fa:36:a2:28:be:f9:7c:5e:f1:
b6:61:13:a6:ad:d3:c7:15:02:9e:fb:d4:19:c0:15:
d8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:5B:B7:5E:22:7D:56:A9:93:B6:25:AF:4B:3C:28:00:C6:68:60:CE
X509v3 Authority Key Identifier:
keyid:2C:8F:A8:53:3D:CC:82:0B:A1:AD:6F:B2:B2:F0:16:10:10:53:1D:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:7f:6f:71:c2:eb:f1:f1:03:9b:a6:17:61:ab:e3:78:df:34:
fb:2c:7e:a2:30:7c:9f:79:ef:47:f0:f2:05:81:ac:af:f6:65:
6c:7b:fe:36:ad:51:24:bf:56:bd:2b:0e:95:b8:72:89:0d:43:
a4:86:6f:45:72:e7:97:42:b4:4d:9a:39:59:04:2e:23:8b:98:
8c:f3:54:84:60:95:36:80:d5:fb:5f:ed:7c:ac:7b:19:fc:c8:
64:3e:2e:d3:e6:c8:5d:25:40:c5:75:a4:86:a4:b6:5a:a1:f7:
c6:3d:48:6e:b4:1e:7d:d8:ab:93:73:51:1e:3e:6b:60:b2:38:
49:57:66:ea:9c:46:8f:43:64:ad:7c:13:f7:ed:1a:70:04:74:
05:07:e1:9f:bb:0f:6b:15:1b:5a:37:fc:04:54:ec:81:b1:d3:
3e:ba:41:c1:ec:0d:55:54:5a:31:e8:3e:c1:0b:ce:56:68:d3:
4d:0f:bc:18:8a:8f:9e:87:9f:65:5e:c3:d3:b0:ad:62:23:7c:
04:d6:35:8e:fc:3f:64:ca:6e:59:c6:ac:4d:a3:ec:e6:5f:c6:
a9:9d:69:88:f0:6c:bb:7e:ba:9a:60:8a:de:3c:11:ed:48:4e:
b9:80:93:00:f2:af:d6:ae:8b:dd:76:4a:bf:36:d5:3b:7c:ec:
2f:1d:78:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kU95sYgtle4DC1G8PTXERMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjOGZhODUzM2RjYzgyMGJhMWFkNmZiMmIyZjAxNjEwMTA1
MzFkYjkwHhcNMjYwNDE5MDYwMDUyWhcNMjYwNDIwMDYwMDUyWjAzMTEwLwYDVQQD
EygwZDViYjc1ZTIyN2Q1NmE5OTNiNjI1YWY0YjNjMjgwMGM2Njg2MGNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtS8zSNCg9rmuuJCESvVQhR5YTtj4
7TzXdCnJ81QVV94+iUjhOJZxZjqZEBogfBOe5az00k30rTcsBlsD7lwsflz8Q47m
8nCGVlSW8h/SYI1IDGW1IDROnrsG++i1FRyF0eeQqbpbTzB18H+dU9L9nYI7IsHX
jMMD/AYy/MCr2oumTDhMFGW4JMH3PTZgsW3DG199kNTZyBGZMnEZ41JbERDD1t8H
K893MKrLDXWuzBzI+TIvwjDwouWHhvi1LWXmuQ9nmDqvOvLYp15WMii9g3b6nv/F
Qa6iR70Edm32ud2DmN9mUqb6NqIovvl8XvG2YROmrdPHFQKe+9QZwBXYrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA1bt14ifVapk7Ylr0s8KADGaGDOMB8GA1UdIwQY
MBaAFCyPqFM9zIILoa1vsrLwFhAQUx25MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEktb1V6M01nZ3VoclcteXN2QVdFQkJUSGJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9lN2QzZGUtMTg0NS00MWYzLTkwN2Et
OWU5NmFmNmQ2YThmLzEvTEktb1V6M01nZ3VoclcteXN2QVdFQkJUSGJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9lN2QzZGUtMTg0NS00MWYzLTkwN2EtOWU5NmFmNmQ2YThm
LzEvTEktb1V6M01nZ3VoclcteXN2QVdFQkJUSGJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR39vccLr
8fEDm6YXYavjeN80+yx+ojB8n3nvR/DyBYGsr/ZlbHv+Nq1RJL9WvSsOlbhyiQ1D
pIZvRXLnl0K0TZo5WQQuI4uYjPNUhGCVNoDV+1/tfKx7GfzIZD4u0+bIXSVAxXWk
hqS2WqH3xj1IbrQefdirk3NRHj5rYLI4SVdm6pxGj0NkrXwT9+0acAR0BQfhn7sP
axUbWjf8BFTsgbHTPrpBwewNVVRaMeg+wQvOVmjTTQ+8GIqPnoefZV7D07CtYiN8
BNY1jvw/ZMpuWcasTaPs5l/GqZ1piPBsu366mmCK3jwR7UhOuYCTAPKv1q6L3XZK
vzbVO3zsLx14vA==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:57:22 2026 by rpki-client