Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.mft
File: LI5SR1LthVF1oBQSyzfEqeTbYXA.mft (raw, json)
Hash identifier: uJGhlpaMITsMqt+5yWIhDodaq/PdvCC1x1NrJZIkQs8=
Subject key identifier: 8A:05:5A:C6:FD:96:01:9B:01:16:98:24:C6:67:32:6D:A0:61:65:F7
Authority key identifier: 2C:8E:52:47:52:ED:85:51:75:A0:14:12:CB:37:C4:A9:E4:DB:61:70
Certificate issuer: /CN=2c8e524752ed855175a01412cb37c4a9e4db6170
Certificate serial: 019D99D0EA570653D1BD65F961823F9748F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LI5SR1LthVF1oBQSyzfEqeTbYXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.mft
Manifest number: 18BF
Signing time: Fri 17 Apr 2026 05:01:38 +0000
Manifest this update: Fri 17 Apr 2026 05:01:38 +0000
Manifest next update: Sat 18 Apr 2026 05:01:38 +0000
Files and hashes: 1: LI5SR1LthVF1oBQSyzfEqeTbYXA.crl (hash: 8Va9OEyd6WKzPKT0/Sy7UAfzAJIrdtaMiee2/UdL4OY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LI5SR1LthVF1oBQSyzfEqeTbYXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:ea:57:06:53:d1:bd:65:f9:61:82:3f:97:48:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c8e524752ed855175a01412cb37c4a9e4db6170
Validity
Not Before: Apr 17 05:01:38 2026 GMT
Not After : Apr 18 05:01:38 2026 GMT
Subject: CN=8a055ac6fd96019b01169824c667326da06165f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:20:e2:e5:07:27:7d:33:e4:73:2d:25:a9:a7:
8c:32:73:f8:66:93:05:08:58:15:6c:f6:fe:37:1e:
3b:06:60:59:c8:db:a4:19:a1:8f:8e:59:f9:9a:11:
38:d8:2c:ff:a8:9d:52:38:8f:4e:ea:16:00:3b:25:
bf:d2:2b:40:6c:12:2c:51:b3:d8:bf:75:48:af:04:
36:fa:8a:72:a8:0d:9c:39:9d:0f:8b:87:b4:9d:5d:
ea:20:b4:bc:d0:62:53:dd:46:26:61:b6:ac:c8:6c:
57:9f:1b:e2:35:af:c3:d1:ca:3e:c8:48:8e:0b:ff:
57:f8:c8:b6:1f:3d:64:c4:ba:e2:f6:19:9d:e7:a9:
77:07:a1:8e:60:74:86:1e:c6:10:a5:72:9a:5a:6b:
4f:d8:ec:3e:5c:26:c6:51:0b:6e:ab:13:09:9c:d4:
fd:6a:de:e3:6e:21:9d:8a:5f:32:d4:15:5e:00:5d:
17:7c:f1:67:25:45:66:a6:8a:b4:2c:fc:ee:db:f2:
3d:c7:d4:9e:39:2a:83:cc:f7:53:99:8e:78:af:09:
fc:ae:42:15:ee:c9:00:3a:1b:00:ef:13:df:2e:b0:
73:86:81:26:e8:e0:0f:17:62:06:29:aa:0f:53:e5:
7c:93:88:5a:07:96:ce:35:58:be:9f:50:1d:7d:3d:
ff:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:05:5A:C6:FD:96:01:9B:01:16:98:24:C6:67:32:6D:A0:61:65:F7
X509v3 Authority Key Identifier:
keyid:2C:8E:52:47:52:ED:85:51:75:A0:14:12:CB:37:C4:A9:E4:DB:61:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LI5SR1LthVF1oBQSyzfEqeTbYXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:a3:99:06:60:41:51:60:b3:05:e0:0a:4b:5b:f3:54:dc:93:
07:22:e3:3b:58:3b:6a:02:4b:26:cd:30:4e:d1:6a:28:4c:17:
a5:39:07:63:1b:77:d8:58:2d:6d:82:a6:e7:1f:74:8b:74:75:
1c:be:0e:f2:6f:1d:3b:f5:ac:ac:94:96:fe:7e:b5:70:28:5e:
db:1c:22:06:8f:02:44:1f:f7:e3:d1:d3:f2:90:cb:b8:86:c2:
93:1b:d7:07:bd:1d:40:82:ba:64:d2:b6:10:3d:52:b2:42:fb:
9b:ba:16:35:c8:ba:6a:07:2c:d6:0f:7e:50:b6:bc:55:f4:82:
c4:ed:e0:38:55:29:f1:06:a4:85:9f:33:0d:fd:d6:b7:05:14:
0e:ae:ac:58:29:60:7d:15:54:b8:c5:57:78:32:86:99:81:b4:
d5:b7:8e:ac:3d:bb:54:43:f0:61:07:a4:fe:16:7d:a6:5c:be:
8b:84:0d:42:3d:ae:ad:f2:72:1f:e1:05:97:53:94:30:be:a9:
bb:8a:4e:7f:23:55:84:96:0d:e9:5b:e3:33:ad:ea:fe:ec:65:
2a:32:04:5f:8b:0a:0f:e0:20:ae:3f:3e:0b:6a:e0:fc:de:69:
11:48:76:8c:3b:33:0a:33:47:b7:5c:ae:7f:31:03:cf:9c:da:
4e:0b:11:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:59:50 2026 by rpki-client