Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.mft
File: Li-E9VWmZqoMBKj759wZEAdfVlg.mft (raw, json)
Hash identifier: mXIXuDMiD9wOO579BGW4Tpjlnsd2oCuQcMgU9f0LgQw=
Subject key identifier: 0C:59:97:32:9D:F5:E5:B4:35:7D:38:0F:56:79:0B:C1:45:9D:31:6C
Authority key identifier: 2E:2F:84:F5:55:A6:66:AA:0C:04:A8:FB:E7:DC:19:10:07:5F:56:58
Certificate issuer: /CN=2e2f84f555a666aa0c04a8fbe7dc1910075f5658
Certificate serial: 019CAB33E824A8A765132BAA9D7DC1F2AC7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Li-E9VWmZqoMBKj759wZEAdfVlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 21:00:31 +0000
Manifest this update: Sun 01 Mar 2026 21:00:31 +0000
Manifest next update: Mon 02 Mar 2026 21:00:31 +0000
Files and hashes: 1: Li-E9VWmZqoMBKj759wZEAdfVlg.crl (hash: IDu+kn8f0e+oekaowvE1kDdd9u+krFLRo5sxYLP384M=)
2: vTU8eDNVEo3qFy_xToMGPXkw-Zo.roa (hash: /OpEMA+vjnSrbNhb5S52wsTvUT1f0OuMQ9Pxy+EXh7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Li-E9VWmZqoMBKj759wZEAdfVlg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:33:e8:24:a8:a7:65:13:2b:aa:9d:7d:c1:f2:ac:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e2f84f555a666aa0c04a8fbe7dc1910075f5658
Validity
Not Before: Mar 1 21:00:31 2026 GMT
Not After : Mar 2 21:00:31 2026 GMT
Subject: CN=0c5997329df5e5b4357d380f56790bc1459d316c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f3:dd:32:e6:07:0f:e1:10:72:a5:61:b7:14:
ff:df:3d:21:39:1e:d9:a0:ee:53:12:04:61:b1:20:
1c:08:38:cb:ff:d9:f3:31:ea:af:dd:b0:06:1f:2d:
59:04:1f:18:f9:01:4e:1c:c7:ca:0a:8a:2e:76:19:
74:bb:73:89:6b:d9:ad:ab:71:39:e8:3e:27:e0:b4:
33:f6:20:8b:9e:9c:cf:6b:ff:65:a9:11:3f:80:c0:
0f:01:d8:ce:8c:6f:8a:ce:42:c4:29:b6:43:1a:ce:
94:9c:50:e6:a9:5d:f2:27:29:6d:08:4f:ed:2f:32:
55:3a:fc:bc:df:77:ef:b9:11:dd:d7:39:60:c5:c4:
09:27:f9:b8:87:0b:77:9e:af:38:77:15:ec:48:09:
d8:fa:95:df:0e:0a:98:51:5f:45:3f:c3:31:5c:33:
a5:60:b6:49:15:fd:92:16:17:99:83:d0:12:83:70:
d2:08:76:ae:f8:ac:e8:d5:f4:3a:86:7f:f3:a9:ef:
3e:30:87:32:c8:04:f6:79:37:7a:7c:06:79:c4:11:
b2:bd:42:67:10:a1:64:25:98:b8:6e:ae:c0:46:c9:
56:63:16:6a:3f:c3:09:43:15:b2:73:e4:18:d3:01:
75:d2:bb:7b:1a:23:93:0b:64:61:a6:e7:91:a6:ac:
06:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:59:97:32:9D:F5:E5:B4:35:7D:38:0F:56:79:0B:C1:45:9D:31:6C
X509v3 Authority Key Identifier:
keyid:2E:2F:84:F5:55:A6:66:AA:0C:04:A8:FB:E7:DC:19:10:07:5F:56:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Li-E9VWmZqoMBKj759wZEAdfVlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:31:8e:cb:91:fa:64:86:dc:b0:09:d7:93:da:1d:33:06:50:
c6:1d:8a:c4:2f:cb:4f:18:21:75:f3:76:94:fe:3b:92:f0:f5:
cf:54:a8:c1:ea:b1:cf:e7:99:53:43:1a:f2:1d:00:b3:fe:4c:
ea:1c:64:c6:e2:29:ad:f5:99:9b:52:7e:cb:f7:26:41:a0:f6:
9b:7f:6f:69:db:f1:86:eb:15:31:0c:2f:dd:4d:5a:06:88:77:
d9:54:02:56:12:c1:bd:27:ef:c7:60:19:19:df:3d:e6:20:65:
5a:e3:ef:c1:96:33:bb:be:e6:1a:11:fb:44:5a:49:25:d6:1a:
3d:12:ce:e9:56:6e:da:5d:96:3a:9e:d6:7b:6d:3d:ad:d3:5d:
7e:fd:de:ec:40:9c:fc:d1:97:b5:16:30:2f:56:0d:38:46:8e:
d7:a4:73:0b:e1:7f:f6:ba:e5:f1:90:3c:c2:de:f8:d4:fe:07:
34:f5:4e:57:ff:96:16:db:43:f0:50:f9:db:32:5d:d6:d6:3b:
33:d6:86:2f:9f:09:12:17:29:c9:b5:9f:05:bb:7b:38:a6:e2:
24:17:2d:9c:f9:b3:16:f3:3f:ff:8d:9d:f8:59:09:b3:98:75:
92:c8:23:a6:fc:0a:43:04:80:2e:d9:4a:6a:45:de:6b:b7:a2:
bf:90:74:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrM+gkqKdlEyuqnX3B8qx6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlMmY4NGY1NTVhNjY2YWEwYzA0YThmYmU3ZGMxOTEwMDc1
ZjU2NTgwHhcNMjYwMzAxMjEwMDMxWhcNMjYwMzAyMjEwMDMxWjAzMTEwLwYDVQQD
EygwYzU5OTczMjlkZjVlNWI0MzU3ZDM4MGY1Njc5MGJjMTQ1OWQzMTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPPdMuYHD+EQcqVhtxT/3z0hOR7Z
oO5TEgRhsSAcCDjL/9nzMeqv3bAGHy1ZBB8Y+QFOHMfKCooudhl0u3OJa9mtq3E5
6D4n4LQz9iCLnpzPa/9lqRE/gMAPAdjOjG+KzkLEKbZDGs6UnFDmqV3yJyltCE/t
LzJVOvy833fvuRHd1zlgxcQJJ/m4hwt3nq84dxXsSAnY+pXfDgqYUV9FP8MxXDOl
YLZJFf2SFheZg9ASg3DSCHau+Kzo1fQ6hn/zqe8+MIcyyAT2eTd6fAZ5xBGyvUJn
EKFkJZi4bq7ARslWYxZqP8MJQxWyc+QY0wF10rt7GiOTC2RhpueRpqwG0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAxZlzKd9eW0NX04D1Z5C8FFnTFsMB8GA1UdIwQY
MBaAFC4vhPVVpmaqDASo++fcGRAHX1ZYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGktRTlWV21acW9NQktqNzU5d1pFQWRmVmxnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8yNDhlNmYtYjFmYi00ZGE3LTk3ZGQt
OTU0MzcyOTY1YzVlLzEvTGktRTlWV21acW9NQktqNzU5d1pFQWRmVmxnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy8yNDhlNmYtYjFmYi00ZGE3LTk3ZGQtOTU0MzcyOTY1YzVl
LzEvTGktRTlWV21acW9NQktqNzU5d1pFQWRmVmxnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIDGOy5H6
ZIbcsAnXk9odMwZQxh2KxC/LTxghdfN2lP47kvD1z1Soweqxz+eZU0Ma8h0As/5M
6hxkxuIprfWZm1J+y/cmQaD2m39vadvxhusVMQwv3U1aBoh32VQCVhLBvSfvx2AZ
Gd895iBlWuPvwZYzu77mGhH7RFpJJdYaPRLO6VZu2l2WOp7We209rdNdfv3e7ECc
/NGXtRYwL1YNOEaO16RzC+F/9rrl8ZA8wt741P4HNPVOV/+WFttD8FD52zJd1tY7
M9aGL58JEhcpybWfBbt7OKbiJBctnPmzFvM//42d+FkJs5h1ksgjpvwKQwSALtlK
akXea7eiv5B0rA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:50:51 2026 by rpki-client