Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.mft
File: li68oqtiGOHxrgaHwxREVP1dmWs.mft (raw, json)
Hash identifier: A5Sk9osyJ1Wwf1AF3jNY/jV8Za4k7rVN2zrcnlgeUcU=
Subject key identifier: 30:1B:7D:ED:0B:D6:47:29:5A:17:76:11:BD:BB:32:9C:65:50:5E:FD
Authority key identifier: 96:2E:BC:A2:AB:62:18:E1:F1:AE:06:87:C3:14:44:54:FD:5D:99:6B
Certificate issuer: /CN=962ebca2ab6218e1f1ae0687c3144454fd5d996b
Certificate serial: 019CAF1177FC3C24E516B7EAAA3BB45C9D65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/li68oqtiGOHxrgaHwxREVP1dmWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.mft
Manifest number: 17D9
Signing time: Mon 02 Mar 2026 15:01:23 +0000
Manifest this update: Mon 02 Mar 2026 15:01:23 +0000
Manifest next update: Tue 03 Mar 2026 15:01:23 +0000
Files and hashes: 1: li68oqtiGOHxrgaHwxREVP1dmWs.crl (hash: E8BN7jYci9YzRUbN5W1EGtIhuBal2BuSCPHSHIywRYA=)
2: oHMS8ZGj-fNJgkWpYzSGR7WlyE0.roa (hash: iagyKqdH+vp6N5HOrboxhsVEDIapiFjNbJ5/XngCFtY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/li68oqtiGOHxrgaHwxREVP1dmWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:11:77:fc:3c:24:e5:16:b7:ea:aa:3b:b4:5c:9d:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962ebca2ab6218e1f1ae0687c3144454fd5d996b
Validity
Not Before: Mar 2 15:01:23 2026 GMT
Not After : Mar 3 15:01:23 2026 GMT
Subject: CN=301b7ded0bd647295a177611bdbb329c65505efd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:d6:07:68:d5:61:0f:d6:5d:0a:5e:bf:a3:22:
f1:6a:32:bc:25:fb:ba:27:e4:3f:7f:f3:49:20:25:
a1:bc:5f:1d:f6:88:ed:c5:55:65:3f:cc:95:b3:53:
76:28:33:b4:49:51:0a:e4:4a:f9:1e:51:ff:5c:16:
ea:75:fd:cf:99:db:3b:a3:1d:b9:37:be:49:b5:a3:
26:92:2c:fa:e3:ca:96:87:bd:4d:47:44:52:10:6c:
3f:91:0e:57:9a:29:5e:25:f2:3d:0c:90:f8:12:76:
10:3f:ac:e1:f3:d3:f1:ac:e1:18:72:3c:37:7b:1b:
e9:63:5f:00:e9:b7:25:ce:e5:49:d0:36:79:82:10:
12:22:13:3e:ee:08:9a:1a:8f:04:2d:79:f6:21:2d:
26:9d:78:5e:7c:de:33:65:97:f4:2a:36:e5:e5:8e:
4e:6a:3a:88:4e:eb:76:1f:52:66:62:67:8c:c0:19:
79:d7:5d:99:69:08:f8:75:3b:3e:35:de:95:f5:78:
c9:af:f9:e9:43:0a:0e:0d:d8:aa:02:f3:8e:6a:2e:
7e:57:10:5c:12:8c:6a:ba:c9:a0:f4:e5:a5:17:26:
92:22:f2:fb:af:bc:b7:cd:3e:d0:26:05:27:23:6b:
51:2b:d2:6c:c0:c6:f6:ff:a0:88:43:83:a4:32:7e:
71:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:1B:7D:ED:0B:D6:47:29:5A:17:76:11:BD:BB:32:9C:65:50:5E:FD
X509v3 Authority Key Identifier:
keyid:96:2E:BC:A2:AB:62:18:E1:F1:AE:06:87:C3:14:44:54:FD:5D:99:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/li68oqtiGOHxrgaHwxREVP1dmWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:c9:73:ad:5d:f9:e1:a1:fe:79:f5:19:2c:e1:81:d5:df:98:
7c:17:b0:b6:96:68:fa:9c:32:dd:12:3b:0c:00:34:7b:e3:3d:
64:db:24:ae:e3:0a:9d:8b:ce:9f:97:aa:e9:fa:c3:13:a6:f4:
85:d9:8c:63:05:00:d7:f4:9c:29:0c:a6:94:e0:66:15:96:fa:
b7:2b:d4:73:26:fa:fc:5d:50:57:55:18:46:d1:76:53:8a:9f:
95:e3:10:50:23:b9:d3:9f:1f:4e:d0:ec:7d:69:61:86:ac:44:
01:49:87:d4:23:92:4a:b8:58:d3:65:88:0d:89:fc:d8:58:69:
aa:f3:ca:88:d0:b7:cf:5c:15:40:99:f7:3c:b7:84:25:9c:ad:
0a:4f:02:b5:67:4e:7b:66:e0:13:33:3d:af:7a:f4:bf:e0:45:
c3:70:51:97:af:4c:cf:f0:d6:eb:ee:fe:ea:4d:35:20:8c:40:
e8:70:a9:a6:22:52:13:b8:1b:7b:76:54:a9:e0:9a:d5:4e:91:
5a:e3:1a:d5:b1:63:9c:bc:33:b4:23:13:82:49:75:5a:4c:f2:
9b:0f:fb:c1:92:4a:41:77:a6:4b:74:db:3b:24:bf:c4:32:d2:
9a:de:c7:ab:ac:ee:f6:d6:6e:7e:57:11:c0:c7:96:6a:b3:9e:
5f:bc:4c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:09:26 2026 by rpki-client