Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.mft
File: li68oqtiGOHxrgaHwxREVP1dmWs.mft (raw, json)
Hash identifier: OQHXLrIMpiObHd0mFc2PeGIkJRZkfovEIlksaom5FYI=
Subject key identifier: B4:23:7B:EE:34:B0:0D:73:BF:DB:B8:8C:48:12:C0:80:E1:11:0B:ED
Authority key identifier: 96:2E:BC:A2:AB:62:18:E1:F1:AE:06:87:C3:14:44:54:FD:5D:99:6B
Certificate issuer: /CN=962ebca2ab6218e1f1ae0687c3144454fd5d996b
Certificate serial: 019ED5757026E79EE957979F2CAB7BBE925E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/li68oqtiGOHxrgaHwxREVP1dmWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.mft
Manifest number: 18F6
Signing time: Wed 17 Jun 2026 12:01:43 +0000
Manifest this update: Wed 17 Jun 2026 12:01:43 +0000
Manifest next update: Thu 18 Jun 2026 12:01:43 +0000
Files and hashes: 1: li68oqtiGOHxrgaHwxREVP1dmWs.crl (hash: FbKQ4l4EGBBAIoN99wUQ8gznumFtLfcGIUpluF05KL4=)
2: oHMS8ZGj-fNJgkWpYzSGR7WlyE0.roa (hash: iagyKqdH+vp6N5HOrboxhsVEDIapiFjNbJ5/XngCFtY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/li68oqtiGOHxrgaHwxREVP1dmWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 08:33:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d5:75:70:26:e7:9e:e9:57:97:9f:2c:ab:7b:be:92:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962ebca2ab6218e1f1ae0687c3144454fd5d996b
Validity
Not Before: Jun 17 12:01:43 2026 GMT
Not After : Jun 18 12:01:43 2026 GMT
Subject: CN=b4237bee34b00d73bfdbb88c4812c080e1110bed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:f8:99:30:6a:d4:d7:ad:47:34:2d:de:54:85:
41:c4:ec:cd:1d:e3:7d:9b:e5:b3:a1:51:21:2e:c6:
73:b2:f6:84:4a:e9:52:6c:ae:1a:05:89:e7:7f:ed:
07:1e:84:84:99:0b:0e:03:1e:60:09:93:43:28:a1:
80:7f:cd:46:b5:0b:71:93:fc:9f:b9:bd:46:f2:d8:
69:81:f3:7a:b0:b1:b4:95:c7:82:ef:8b:57:83:8c:
72:7e:10:a5:62:be:46:0f:a1:30:79:19:01:6a:cd:
c6:b7:ee:d3:b2:fe:aa:8d:21:04:28:6c:48:ef:7e:
e4:f7:8f:40:86:32:ba:60:c9:8f:d4:7e:b8:6e:84:
e0:e9:a2:9b:9b:4b:59:0f:55:b3:a3:50:e2:01:16:
b2:24:60:13:d7:77:c4:58:63:37:74:34:26:7e:a6:
25:51:d1:67:c1:a5:4f:f4:7b:ba:62:96:95:a0:08:
1d:b7:b6:e3:9c:a3:6a:43:df:ce:93:9f:ec:f6:82:
5e:8f:75:1c:d4:c8:a8:41:dd:e7:35:6c:c4:9e:6c:
b7:c5:3c:b7:7c:a3:b7:b0:b9:a5:56:fd:da:5e:86:
c6:46:cf:11:33:9c:2e:e6:66:5a:bd:19:e3:84:a9:
bc:d2:dd:d2:e9:71:b1:13:96:0d:45:49:f6:75:0e:
1e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:23:7B:EE:34:B0:0D:73:BF:DB:B8:8C:48:12:C0:80:E1:11:0B:ED
X509v3 Authority Key Identifier:
keyid:96:2E:BC:A2:AB:62:18:E1:F1:AE:06:87:C3:14:44:54:FD:5D:99:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/li68oqtiGOHxrgaHwxREVP1dmWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:c5:b7:9a:ae:f9:d7:db:ac:6a:68:66:e7:18:d8:26:b4:d7:
e5:0d:c3:03:ce:ac:a2:3c:95:ff:e9:28:85:d3:fe:f2:8c:26:
d8:a0:88:93:10:c1:64:96:04:66:13:40:b7:3c:36:60:c7:3d:
31:2f:2d:29:ed:68:3e:f1:8c:4f:d2:ef:cc:a9:77:2e:37:e5:
3c:a1:03:58:6f:61:16:51:2e:db:38:9e:b4:b3:6e:08:15:e2:
29:f8:28:14:cf:78:22:d9:d5:4b:11:12:d5:31:e7:a8:40:64:
69:bc:80:5f:a4:64:9a:38:29:e1:9b:19:df:c0:6c:0e:ce:02:
12:ad:29:12:b2:1a:62:7a:59:3c:fa:94:32:aa:cb:a4:8e:d6:
8e:40:08:33:bc:de:2f:35:be:65:12:55:04:c4:d2:89:9b:6c:
45:3b:5f:ef:d9:a6:97:9e:c5:ce:6d:55:84:30:39:8c:e4:37:
ff:0d:c5:06:bf:88:05:64:66:8a:7b:be:d8:a4:74:14:9f:78:
63:c3:b7:ad:7a:c1:be:cc:e7:f5:37:41:c0:7c:45:e8:13:9e:
3a:99:bd:17:2b:f3:9c:4f:8a:9a:97:43:a5:f2:b9:65:86:23:
18:b7:46:fc:b9:0d:95:ab:e2:bc:66:e0:0b:80:74:f1:9f:35:
90:f6:2d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 14:11:17 2026 by rpki-client