Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
File: LI-oUz3MgguhrW-ysvAWEBBTHbk.mft (raw, json)
Hash identifier: UIwOmWyKh5twj4oxyZ4fOI3fG/S+aBsbem6HKa5JOE0=
Subject key identifier: E6:8F:55:2B:A1:56:B6:93:B0:AE:7E:AD:15:65:AA:0C:02:03:01:F3
Authority key identifier: 2C:8F:A8:53:3D:CC:82:0B:A1:AD:6F:B2:B2:F0:16:10:10:53:1D:B9
Certificate issuer: /CN=2c8fa8533dcc820ba1ad6fb2b2f0161010531db9
Certificate serial: 01A0D15BA2B2F27C84F0521C8384C67E9742
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
Manifest number: 0C6D
Signing time: Thu 24 Sep 2026 03:00:38 +0000
Manifest this update: Thu 24 Sep 2026 03:00:38 +0000
Manifest next update: Fri 25 Sep 2026 03:00:38 +0000
Files and hashes: 1: CMpz6Z0ZjbzrsumthPk2h0kU714.roa (hash: A3lBqvLRLb63Z2zkD/QiutUnKW5oZQPl9laeX3xcP64=)
2: LI-oUz3MgguhrW-ysvAWEBBTHbk.crl (hash: bLmhzIV2uGueCUbpZZpGqnabMyiHmZAm5PmSInnIr5M=)
3: PRW-hNh_LQ1tYJtEgFeANrexr4g.roa (hash: EtDY3iCkv6z8EfmjFrXYO7Uslfyf9DYjVpRw+acf/tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:5b:a2:b2:f2:7c:84:f0:52:1c:83:84:c6:7e:97:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c8fa8533dcc820ba1ad6fb2b2f0161010531db9
Validity
Not Before: Sep 24 03:00:38 2026 GMT
Not After : Sep 25 03:00:38 2026 GMT
Subject: CN=e68f552ba156b693b0ae7ead1565aa0c020301f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:92:b1:e2:27:5d:b2:c7:d7:a8:3a:dd:6b:89:
f2:60:ce:3b:7c:7c:17:e1:e1:84:73:65:84:36:7b:
77:ce:10:8d:13:eb:25:3b:29:43:48:3e:44:7c:61:
39:c5:a4:01:d0:5f:27:da:73:dd:bc:ad:e4:af:f8:
a3:0d:dd:82:84:a1:5a:e1:2e:13:d0:9f:4a:b5:c3:
a2:59:1f:cf:42:b1:96:94:c3:b9:b9:0d:6f:96:fb:
ff:dd:d5:c6:a0:bd:b2:af:f3:1d:8e:c9:21:53:f8:
3f:54:54:a5:6e:c7:ab:34:4e:3d:00:ef:50:c1:77:
a4:e4:b3:9a:cf:89:00:e7:25:36:03:56:91:f7:23:
d4:c5:25:e3:43:b8:c0:59:ea:d0:c2:5b:9f:34:c7:
0a:b7:ae:78:8c:6e:2b:d4:cf:e0:17:93:54:42:92:
d2:7b:42:7a:17:28:11:10:23:5d:79:0a:dd:6d:a4:
4f:6a:e5:e4:9a:6d:7a:d9:84:d3:5f:92:12:d1:d8:
bb:fb:b2:84:40:89:03:59:bb:bd:54:9d:5c:a0:d8:
4d:e3:a5:ec:73:27:52:c6:1e:f9:01:6b:f1:c1:8a:
3f:af:00:99:78:4d:19:cc:9c:25:44:99:5b:04:93:
49:28:57:7c:10:91:4e:12:93:99:92:82:1f:a6:33:
7d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:8F:55:2B:A1:56:B6:93:B0:AE:7E:AD:15:65:AA:0C:02:03:01:F3
X509v3 Authority Key Identifier:
keyid:2C:8F:A8:53:3D:CC:82:0B:A1:AD:6F:B2:B2:F0:16:10:10:53:1D:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:9f:63:62:37:f5:06:54:12:cc:3c:43:d7:41:ff:2c:ae:b3:
aa:1d:bc:6a:b3:83:6c:5d:ac:f4:1e:47:ef:2e:47:88:90:1a:
38:00:1b:79:72:20:ca:e9:21:ef:f7:9e:17:20:fd:f7:5e:bf:
b3:1f:a8:e5:c7:e3:bc:54:c2:a8:67:94:0e:74:71:6d:38:bb:
7a:81:b8:44:a5:c3:72:40:43:80:04:88:ea:d9:8e:1f:38:6f:
99:80:23:28:aa:c0:18:2c:57:27:65:90:a6:6e:41:05:b2:d2:
c9:c1:11:44:e4:75:ec:17:40:25:e2:cb:99:70:16:c9:1f:d6:
86:6c:ea:f4:07:8d:8e:69:61:d4:6b:d5:8b:04:6f:13:3d:8b:
04:1d:73:76:99:c0:39:2b:a8:dc:76:f9:75:ff:57:80:17:ed:
ad:17:77:78:52:8a:a1:ae:f5:1d:70:12:af:db:67:56:ec:80:
49:85:58:22:3d:6b:de:84:42:e2:15:53:08:5f:ea:1e:c5:93:
aa:5f:f8:95:de:71:2a:98:09:42:66:78:83:a3:c0:a1:ab:8d:
59:5f:2f:c0:15:10:50:52:3d:10:4d:fa:ce:01:2b:1e:c1:a9:
b8:75:9f:3f:66:c0:c4:f4:c5:c8:ef:de:f2:42:a9:83:55:ad:
32:0f:30:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDRW6Ky8nyE8FIcg4TGfpdCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjOGZhODUzM2RjYzgyMGJhMWFkNmZiMmIyZjAxNjEwMTA1
MzFkYjkwHhcNMjYwOTI0MDMwMDM4WhcNMjYwOTI1MDMwMDM4WjAzMTEwLwYDVQQD
EyhlNjhmNTUyYmExNTZiNjkzYjBhZTdlYWQxNTY1YWEwYzAyMDMwMWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZKx4iddssfXqDrda4nyYM47fHwX
4eGEc2WENnt3zhCNE+slOylDSD5EfGE5xaQB0F8n2nPdvK3kr/ijDd2ChKFa4S4T
0J9KtcOiWR/PQrGWlMO5uQ1vlvv/3dXGoL2yr/MdjskhU/g/VFSlbserNE49AO9Q
wXek5LOaz4kA5yU2A1aR9yPUxSXjQ7jAWerQwlufNMcKt654jG4r1M/gF5NUQpLS
e0J6FygRECNdeQrdbaRPauXkmm162YTTX5IS0di7+7KEQIkDWbu9VJ1coNhN46Xs
cydSxh75AWvxwYo/rwCZeE0ZzJwlRJlbBJNJKFd8EJFOEpOZkoIfpjN9/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOaPVSuhVraTsK5+rRVlqgwCAwHzMB8GA1UdIwQY
MBaAFCyPqFM9zIILoa1vsrLwFhAQUx25MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEktb1V6M01nZ3VoclcteXN2QVdFQkJUSGJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9lN2QzZGUtMTg0NS00MWYzLTkwN2Et
OWU5NmFmNmQ2YThmLzEvTEktb1V6M01nZ3VoclcteXN2QVdFQkJUSGJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9lN2QzZGUtMTg0NS00MWYzLTkwN2EtOWU5NmFmNmQ2YThm
LzEvTEktb1V6M01nZ3VoclcteXN2QVdFQkJUSGJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfJ9jYjf1
BlQSzDxD10H/LK6zqh28arODbF2s9B5H7y5HiJAaOAAbeXIgyukh7/eeFyD9916/
sx+o5cfjvFTCqGeUDnRxbTi7eoG4RKXDckBDgASI6tmOHzhvmYAjKKrAGCxXJ2WQ
pm5BBbLSycERROR17BdAJeLLmXAWyR/Whmzq9AeNjmlh1GvViwRvEz2LBB1zdpnA
OSuo3Hb5df9XgBftrRd3eFKKoa71HXASr9tnVuyASYVYIj1r3oRC4hVTCF/qHsWT
ql/4ld5xKpgJQmZ4g6PAoauNWV8vwBUQUFI9EE36zgErHsGpuHWfP2bAxPTFyO/e
8kKpg1WtMg8w9g==
-----END CERTIFICATE-----
Generated at Thu Sep 24 06:33:38 2026 by rpki-client