Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
File: LI-oUz3MgguhrW-ysvAWEBBTHbk.mft (raw, json)
Hash identifier: 43lhWRUP/dQ5G/oWgdWWUpWVdVLzzN2gJVR79VxwOHU=
Subject key identifier: A3:18:86:16:A4:9D:4E:AB:35:0B:72:10:78:13:16:1E:12:FF:CD:01
Authority key identifier: 2C:8F:A8:53:3D:CC:82:0B:A1:AD:6F:B2:B2:F0:16:10:10:53:1D:B9
Certificate issuer: /CN=2c8fa8533dcc820ba1ad6fb2b2f0161010531db9
Certificate serial: 019CAB348285400E8833B48983AE7C3A4A66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
Manifest number: 0A47
Signing time: Sun 01 Mar 2026 21:01:10 +0000
Manifest this update: Sun 01 Mar 2026 21:01:10 +0000
Manifest next update: Mon 02 Mar 2026 21:01:10 +0000
Files and hashes: 1: CMpz6Z0ZjbzrsumthPk2h0kU714.roa (hash: A3lBqvLRLb63Z2zkD/QiutUnKW5oZQPl9laeX3xcP64=)
2: LI-oUz3MgguhrW-ysvAWEBBTHbk.crl (hash: sOG1ZtmRXFUdGhMj8n2y8ihipeY9HIEcxCJ6/Df6CrY=)
3: PRW-hNh_LQ1tYJtEgFeANrexr4g.roa (hash: EtDY3iCkv6z8EfmjFrXYO7Uslfyf9DYjVpRw+acf/tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:82:85:40:0e:88:33:b4:89:83:ae:7c:3a:4a:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c8fa8533dcc820ba1ad6fb2b2f0161010531db9
Validity
Not Before: Mar 1 21:01:10 2026 GMT
Not After : Mar 2 21:01:10 2026 GMT
Subject: CN=a3188616a49d4eab350b72107813161e12ffcd01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2e:5f:76:40:59:73:78:48:c1:ce:dd:94:8e:
a2:71:00:c2:a5:fa:f9:fd:63:b7:09:e3:78:d5:f8:
08:ad:5a:ff:10:da:51:aa:94:fe:1e:35:8f:16:00:
83:15:72:ca:87:bf:b3:5f:f7:3b:4b:65:4b:c6:33:
ca:9f:91:76:2f:4b:1e:3f:55:d1:39:2a:fb:e9:13:
46:6f:a6:2b:6d:f5:41:81:55:08:ec:0a:6d:ae:6e:
b4:8c:a8:05:f8:f8:86:5b:03:ef:12:fd:82:bb:4d:
7b:6d:1b:23:69:c1:46:a5:0c:03:8c:37:ce:19:97:
7b:b9:5a:da:31:04:e1:30:2f:c1:a9:af:64:0d:53:
0d:58:42:22:a8:62:5a:df:22:9c:62:f9:f1:0c:cd:
b6:0f:aa:54:ed:21:41:d7:0e:5e:3c:0a:14:9b:17:
c0:88:3e:4c:03:f5:df:cf:c7:ef:d8:aa:39:83:95:
c5:1a:2e:d1:a4:a3:4b:bd:f1:c0:f6:75:7a:dd:95:
ad:65:1c:db:bb:c3:bc:cc:00:9f:ae:5f:c7:a0:bb:
e7:71:fc:28:35:11:d7:e8:15:89:0a:dd:95:6d:98:
57:db:c7:9a:75:42:f1:38:0d:ab:0e:0a:ef:61:10:
7e:69:9f:02:8f:e5:4a:bf:77:95:47:cb:24:66:ae:
f3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:18:86:16:A4:9D:4E:AB:35:0B:72:10:78:13:16:1E:12:FF:CD:01
X509v3 Authority Key Identifier:
keyid:2C:8F:A8:53:3D:CC:82:0B:A1:AD:6F:B2:B2:F0:16:10:10:53:1D:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:01:9e:ea:77:8e:5b:c3:49:34:7e:c4:40:f1:e1:5b:ed:17:
20:d0:db:1f:45:79:c1:77:f3:50:a7:e8:50:7c:5a:2e:b2:8f:
bf:72:02:06:e6:ca:28:d3:4d:58:95:76:36:d2:84:b8:43:c9:
b3:10:af:38:8e:36:8e:42:6f:ce:f5:65:8a:d6:78:88:78:46:
6b:f8:61:fd:7b:23:8a:16:de:8f:76:06:9c:a1:59:3c:bc:24:
25:7f:a9:b5:78:10:94:26:20:e0:90:4f:77:18:28:44:e9:21:
4a:a1:c5:8e:39:7e:26:39:64:8a:74:55:d8:06:10:77:5a:22:
0f:03:07:2f:13:62:65:35:31:7c:01:b5:b6:93:f0:85:aa:02:
8f:90:bc:71:31:6d:ba:b8:d5:08:de:52:5d:2e:da:51:e1:66:
81:c9:e8:81:a7:f2:93:77:0c:a8:93:a0:f3:7f:15:58:9f:b5:
9b:2e:40:b2:ee:12:61:d0:6c:32:bf:ec:50:60:b0:d2:b7:91:
06:a8:2c:6f:f8:59:db:8b:f5:a3:fe:ee:55:13:e4:cd:92:c5:
2b:aa:c9:81:9d:73:b1:e3:4e:ad:ea:a8:cc:db:27:93:4a:f7:
54:39:26:b1:d8:78:94:2a:3f:92:8f:d7:b4:f2:ff:b2:13:3d:
a8:2d:38:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:33:04 2026 by rpki-client