
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.mft
File: li68oqtiGOHxrgaHwxREVP1dmWs.mft (raw, json)
Hash identifier: 2bGdMKbeJbtecO8K9LPGfGHngzaXZQgkjDZidjk48r4=
Subject key identifier: 03:C1:CC:81:84:F3:B9:98:C7:FE:6B:8A:3E:18:F2:CB:39:40:FA:E8
Authority key identifier: 96:2E:BC:A2:AB:62:18:E1:F1:AE:06:87:C3:14:44:54:FD:5D:99:6B
Certificate issuer: /CN=962ebca2ab6218e1f1ae0687c3144454fd5d996b
Certificate serial: 01A135C809CBA7574EC16E6AC46D028FF5FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/li68oqtiGOHxrgaHwxREVP1dmWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.mft
Manifest number: 1A31
Signing time: Tue 13 Oct 2026 15:01:04 +0000
Manifest this update: Tue 13 Oct 2026 15:01:04 +0000
Manifest next update: Wed 14 Oct 2026 15:01:04 +0000
Files and hashes: 1: li68oqtiGOHxrgaHwxREVP1dmWs.crl (hash: zz61O+9wxOTwliq1hgg2LcCN+s63wx8pVP2HTy4/13M=)
2: oHMS8ZGj-fNJgkWpYzSGR7WlyE0.roa (hash: iagyKqdH+vp6N5HOrboxhsVEDIapiFjNbJ5/XngCFtY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/li68oqtiGOHxrgaHwxREVP1dmWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 14:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:c8:09:cb:a7:57:4e:c1:6e:6a:c4:6d:02:8f:f5:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962ebca2ab6218e1f1ae0687c3144454fd5d996b
Validity
Not Before: Oct 13 15:01:04 2026 GMT
Not After : Oct 14 15:01:04 2026 GMT
Subject: CN=03c1cc8184f3b998c7fe6b8a3e18f2cb3940fae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9f:84:9e:e0:34:82:8d:37:bd:fd:f1:a7:69:
b0:99:21:b6:eb:2f:a2:94:22:2c:9d:b4:47:cf:1a:
6f:3a:19:53:6c:99:31:1d:30:ef:6c:f6:0b:2a:d2:
0c:cf:a9:5a:6c:ba:a1:12:0f:90:97:76:64:f3:47:
67:bf:83:1c:f3:22:14:8b:98:e2:07:29:2c:f8:cc:
0d:d8:9f:53:2c:b5:d4:f9:a1:12:20:a6:b8:28:c7:
de:a9:05:df:97:00:63:d4:12:8a:14:fc:16:b5:82:
dc:e8:1d:40:c7:0f:90:24:65:0e:29:b2:25:a5:72:
01:68:a9:fb:53:f7:bd:68:f6:a3:1b:67:5f:09:55:
9e:75:37:ac:d7:d5:c9:25:f7:4c:f6:22:cc:d0:1d:
12:69:f8:4c:f8:1c:a6:e4:98:54:9a:89:d6:aa:55:
80:36:2b:4d:e4:99:59:c7:f4:18:53:b6:6f:54:ad:
19:a2:c7:ec:d9:15:a3:8d:0e:a0:fc:8f:40:99:68:
51:eb:86:f9:fa:dd:13:a2:a3:b5:92:0a:d6:ec:06:
e9:1c:1b:6b:3e:10:77:d1:1f:5f:fb:5a:8d:49:08:
a2:a8:94:7d:35:4a:d4:31:e6:63:dc:df:a1:df:60:
28:4a:8a:7d:a4:f8:c8:10:6b:63:33:5b:45:48:6a:
f2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:C1:CC:81:84:F3:B9:98:C7:FE:6B:8A:3E:18:F2:CB:39:40:FA:E8
X509v3 Authority Key Identifier:
keyid:96:2E:BC:A2:AB:62:18:E1:F1:AE:06:87:C3:14:44:54:FD:5D:99:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/li68oqtiGOHxrgaHwxREVP1dmWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:65:de:98:55:b8:11:12:3f:9b:a7:05:00:62:1e:b0:54:43:
d6:56:e8:2c:76:5e:e4:f7:99:05:23:8a:f5:6a:14:bf:56:9f:
c6:d5:1b:98:81:7e:3f:04:a6:1d:f6:19:d2:a5:31:b9:97:b2:
b2:55:81:c5:cd:67:d0:10:3d:af:7f:6d:02:d4:ed:59:e0:ce:
68:62:bc:6a:31:07:8c:80:b0:6d:0e:c9:a0:d1:c4:a6:ed:84:
df:be:de:3e:f4:62:04:65:f6:66:d0:eb:69:95:97:71:be:b9:
53:82:cf:f1:43:c6:f4:ad:ad:8d:58:5a:ff:2c:39:a1:87:df:
bf:06:46:46:4a:73:da:a4:48:75:13:53:3a:b8:7d:03:1d:8a:
c2:24:e4:57:10:6f:1c:da:53:0d:a4:e2:19:e5:c0:25:34:4a:
dc:98:ce:e4:18:de:d4:1f:64:fe:2a:cf:57:81:01:b5:40:1d:
50:5a:59:cd:44:d0:56:a5:f9:50:78:4e:5a:85:66:6b:d2:5f:
1f:95:05:25:26:cd:4e:97:b7:8e:bd:5f:9c:d7:ae:c1:89:b8:
f2:68:7b:a7:83:e8:61:4f:93:f1:d5:06:18:d0:d9:40:ed:63:
91:c6:bb:68:af:ac:18:d7:3a:7d:74:c6:cb:76:49:f5:7b:e0:
a4:7f:84:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 19:10:24 2026 by rpki-client