Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.mft
File: Li-E9VWmZqoMBKj759wZEAdfVlg.mft (raw, json)
Hash identifier: 7yngLHApAy6QsY3UBoFydPHZRQxc8O5GZRVj1RM6SYQ=
Subject key identifier: 60:73:24:79:B9:E0:A6:A5:26:3E:53:EC:48:A9:2F:22:F2:74:0E:90
Authority key identifier: 2E:2F:84:F5:55:A6:66:AA:0C:04:A8:FB:E7:DC:19:10:07:5F:56:58
Certificate issuer: /CN=2e2f84f555a666aa0c04a8fbe7dc1910075f5658
Certificate serial: 019D98BD8EE61F4391D2F6833B4C7DAE9C92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Li-E9VWmZqoMBKj759wZEAdfVlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 00:00:52 +0000
Manifest this update: Fri 17 Apr 2026 00:00:52 +0000
Manifest next update: Sat 18 Apr 2026 00:00:52 +0000
Files and hashes: 1: Li-E9VWmZqoMBKj759wZEAdfVlg.crl (hash: JLeaoI73xB4pqi4vbWmt1N8q0CaPPCbNW68Nj+eUdAI=)
2: vTU8eDNVEo3qFy_xToMGPXkw-Zo.roa (hash: /OpEMA+vjnSrbNhb5S52wsTvUT1f0OuMQ9Pxy+EXh7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Li-E9VWmZqoMBKj759wZEAdfVlg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:8e:e6:1f:43:91:d2:f6:83:3b:4c:7d:ae:9c:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e2f84f555a666aa0c04a8fbe7dc1910075f5658
Validity
Not Before: Apr 17 00:00:52 2026 GMT
Not After : Apr 18 00:00:52 2026 GMT
Subject: CN=60732479b9e0a6a5263e53ec48a92f22f2740e90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f0:c1:8c:26:ab:3e:41:2b:8f:af:9f:ac:12:
18:d6:cd:a5:df:c2:e1:7d:31:ba:ff:a0:c5:9b:51:
1e:56:ce:be:c1:0b:68:12:80:28:b0:07:ea:65:ee:
9e:af:32:43:d9:b0:bc:a9:04:ed:e4:a7:95:22:d2:
6a:77:18:13:67:fc:a4:85:98:b1:ae:85:80:8d:58:
30:72:45:39:08:ef:45:1d:f5:51:9e:fc:d6:3b:ee:
75:cd:21:a8:1d:fb:44:f8:42:48:1d:ec:f3:25:31:
95:8e:ba:3c:ab:9d:36:d1:62:7c:66:44:dd:91:56:
5b:03:0a:c7:2a:28:81:f8:8c:dd:e0:c5:bb:a9:6a:
d6:e7:d7:9f:20:6f:1d:8a:e6:fc:61:32:d3:32:8d:
65:d7:d0:60:cb:30:f7:e4:39:84:66:ed:34:e1:dd:
98:85:7a:2a:06:35:4c:ef:7f:1e:60:cc:0d:b2:86:
a5:7e:a3:85:19:cf:02:d3:62:5f:7e:c6:44:db:0e:
43:4b:b7:6e:5b:d0:6b:0b:05:c3:61:8d:6b:49:29:
22:d2:0a:d5:48:79:a5:7c:db:74:d2:9d:da:41:0f:
0d:67:13:e1:63:64:4a:34:e3:71:a9:4f:40:12:a1:
2c:38:0e:14:58:54:0f:b1:5e:3e:6c:7f:a2:33:66:
60:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:73:24:79:B9:E0:A6:A5:26:3E:53:EC:48:A9:2F:22:F2:74:0E:90
X509v3 Authority Key Identifier:
keyid:2E:2F:84:F5:55:A6:66:AA:0C:04:A8:FB:E7:DC:19:10:07:5F:56:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Li-E9VWmZqoMBKj759wZEAdfVlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:f9:bc:ff:44:1d:4a:e2:cf:04:c1:18:bf:7b:c5:01:56:aa:
f6:79:20:4d:2c:ec:94:a6:d3:85:37:d7:d4:59:88:db:0f:29:
e9:71:76:c4:b0:c1:45:97:e3:4e:a4:1b:0c:89:c2:69:94:54:
51:e5:39:2f:98:71:db:97:11:bb:cd:9f:2e:da:e9:f1:6d:fd:
df:e3:a5:2e:49:96:87:2a:0e:13:94:24:60:7c:1c:e6:5c:d3:
c0:2e:be:92:72:c2:d0:bb:b9:84:85:71:d4:dc:bd:6c:78:82:
62:c5:bb:b3:1a:e9:fa:91:e3:27:0b:c3:5b:5a:5a:7f:ca:52:
2d:cd:72:d4:73:d9:3f:67:f9:a9:a1:ef:be:d5:97:64:64:a3:
bd:1d:24:85:1a:4f:48:ed:8b:d8:1d:b0:f4:ac:26:16:92:d4:
98:ee:5f:41:2e:5c:54:99:41:69:80:87:89:63:cf:71:0b:72:
94:bb:93:82:3a:38:e4:6d:b4:9d:c2:cf:5b:aa:12:4d:76:ec:
1e:38:3f:ff:a8:ed:22:e5:39:eb:ea:0e:cd:7f:64:b6:e4:c4:
1d:3f:98:d9:2d:ca:2f:0b:b6:1c:fc:c7:80:25:b3:5d:63:83:
ed:dd:a9:ba:63:20:0c:29:97:8c:6d:ad:76:e5:92:8c:02:be:
e8:92:2f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:28:26 2026 by rpki-client