Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.mft
File: li68oqtiGOHxrgaHwxREVP1dmWs.mft (raw, json)
Hash identifier: VbyTiSPIPr2Aiwy6Kw3pRKQR985cnR98CeR7P3gysMo=
Subject key identifier: A7:6C:06:3C:6E:C2:DF:DA:D0:15:AA:1E:7F:9B:5C:A3:F0:EB:44:01
Authority key identifier: 96:2E:BC:A2:AB:62:18:E1:F1:AE:06:87:C3:14:44:54:FD:5D:99:6B
Certificate issuer: /CN=962ebca2ab6218e1f1ae0687c3144454fd5d996b
Certificate serial: 019D9AAC1D5141527401DABF58F853E761C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/li68oqtiGOHxrgaHwxREVP1dmWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.mft
Manifest number: 1853
Signing time: Fri 17 Apr 2026 09:01:03 +0000
Manifest this update: Fri 17 Apr 2026 09:01:03 +0000
Manifest next update: Sat 18 Apr 2026 09:01:03 +0000
Files and hashes: 1: li68oqtiGOHxrgaHwxREVP1dmWs.crl (hash: 9jjbUZ4yVHD1YW1e+E6mdhxdX/TyEbi2knXvfv+OZig=)
2: oHMS8ZGj-fNJgkWpYzSGR7WlyE0.roa (hash: iagyKqdH+vp6N5HOrboxhsVEDIapiFjNbJ5/XngCFtY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/li68oqtiGOHxrgaHwxREVP1dmWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:1d:51:41:52:74:01:da:bf:58:f8:53:e7:61:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962ebca2ab6218e1f1ae0687c3144454fd5d996b
Validity
Not Before: Apr 17 09:01:03 2026 GMT
Not After : Apr 18 09:01:03 2026 GMT
Subject: CN=a76c063c6ec2dfdad015aa1e7f9b5ca3f0eb4401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d1:47:f0:20:53:38:b8:e9:7d:31:95:f2:8e:
70:92:a7:eb:8c:0e:d3:5c:6f:37:26:d5:68:dd:47:
f0:37:20:55:af:7c:e3:09:73:b4:6d:a1:76:a6:50:
ca:91:9f:34:ca:75:33:a7:d6:8b:a5:da:e7:4d:a9:
b5:e2:4b:f9:33:9d:35:81:58:1f:6e:b8:9b:5c:27:
83:28:da:04:49:58:f0:48:fa:39:5a:0f:5b:f7:b4:
73:65:15:43:5f:a4:98:4c:45:d5:3e:04:01:fb:86:
5c:41:24:3e:07:71:a0:10:0a:a1:f2:15:fa:6c:6b:
71:0c:db:97:e0:4a:f4:28:dd:78:b5:3e:e4:78:16:
75:71:3e:4f:01:01:f5:6c:f1:30:76:18:40:e4:fb:
13:b9:02:04:6a:04:16:ed:75:24:e0:2c:ce:41:81:
10:1d:d8:08:22:6e:86:d9:86:6b:9f:1f:b0:8d:2d:
fb:03:7f:d3:2d:ec:78:44:d5:2d:99:d0:b7:a5:ea:
49:0b:e6:5d:95:65:c3:aa:af:df:f4:41:3e:d6:cf:
dc:6a:d4:cb:db:b0:f7:0b:1f:19:b6:9e:6e:19:af:
b1:b7:c4:6e:02:a0:20:f1:ed:ec:2b:c1:de:5c:1b:
2a:50:02:dd:41:92:e5:11:98:dc:68:01:25:22:b5:
cb:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:6C:06:3C:6E:C2:DF:DA:D0:15:AA:1E:7F:9B:5C:A3:F0:EB:44:01
X509v3 Authority Key Identifier:
keyid:96:2E:BC:A2:AB:62:18:E1:F1:AE:06:87:C3:14:44:54:FD:5D:99:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/li68oqtiGOHxrgaHwxREVP1dmWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:5c:67:fd:25:ce:1f:f7:76:e2:fa:22:8f:d4:e0:7d:5a:b3:
15:7e:a1:bb:c5:d1:5c:fc:75:79:08:fa:05:7b:6a:d7:1b:5a:
e2:20:e0:2f:5c:15:a3:e8:f1:1f:03:26:9b:12:cb:3a:b8:ed:
3d:10:31:fd:15:4e:17:13:81:99:ee:39:d8:d9:13:0d:4d:75:
58:b8:32:e5:db:ac:ee:85:8f:4e:41:53:bc:b0:5d:2f:57:dd:
f8:ee:e4:97:35:0e:48:da:0f:5c:c5:ca:08:14:88:88:02:5b:
79:1e:28:dc:2f:ac:f0:98:01:f3:ff:6e:be:f9:db:11:ca:0d:
36:87:54:08:aa:84:de:fa:a1:3d:99:a2:ab:cf:a3:79:19:01:
6f:6e:32:b6:2e:47:e9:d4:3d:3d:21:59:f9:f0:58:d0:69:e5:
17:12:19:c6:14:3f:d1:85:99:d1:22:77:14:66:b9:ca:41:c4:
dd:61:a4:b5:0b:d0:c0:d4:f8:65:ed:dd:64:cf:47:30:00:11:
5c:8b:fa:65:a0:8d:b7:15:b4:68:e7:58:ed:e6:71:64:c4:64:
1d:4c:e7:70:70:0f:59:a8:dd:e1:16:7a:47:79:b2:0e:39:fe:
c8:18:97:29:b4:66:c3:dc:91:b5:4d:dd:d9:29:34:33:f6:b3:
3b:ba:f8:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:49:07 2026 by rpki-client