Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
File: LI-oUz3MgguhrW-ysvAWEBBTHbk.mft (raw, json)
Hash identifier: 90K7VrPQ+6yoYYR1kehVg4huCAD5g/Db/gc/9esBhqc=
Subject key identifier: CC:80:49:8F:9E:CE:93:AE:64:85:0A:D5:34:3D:1D:E9:B9:28:FE:19
Authority key identifier: 2C:8F:A8:53:3D:CC:82:0B:A1:AD:6F:B2:B2:F0:16:10:10:53:1D:B9
Certificate issuer: /CN=2c8fa8533dcc820ba1ad6fb2b2f0161010531db9
Certificate serial: 019F834377838A6A64B17B11E9684019EDFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
Manifest number: 0BC0
Signing time: Tue 21 Jul 2026 06:01:04 +0000
Manifest this update: Tue 21 Jul 2026 06:01:04 +0000
Manifest next update: Wed 22 Jul 2026 06:01:04 +0000
Files and hashes: 1: CMpz6Z0ZjbzrsumthPk2h0kU714.roa (hash: A3lBqvLRLb63Z2zkD/QiutUnKW5oZQPl9laeX3xcP64=)
2: LI-oUz3MgguhrW-ysvAWEBBTHbk.crl (hash: gqIn4rToTInYfazOOJDNAD8BjC1vH1OxHZ/ePFsboHQ=)
3: PRW-hNh_LQ1tYJtEgFeANrexr4g.roa (hash: EtDY3iCkv6z8EfmjFrXYO7Uslfyf9DYjVpRw+acf/tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 06:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:83:43:77:83:8a:6a:64:b1:7b:11:e9:68:40:19:ed:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c8fa8533dcc820ba1ad6fb2b2f0161010531db9
Validity
Not Before: Jul 21 06:01:04 2026 GMT
Not After : Jul 22 06:01:04 2026 GMT
Subject: CN=cc80498f9ece93ae64850ad5343d1de9b928fe19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:4c:b8:91:46:32:c9:f6:7f:1f:8a:16:d2:65:
38:39:f7:30:9f:c8:7e:da:f7:74:88:90:36:55:a7:
3a:1b:95:fe:b0:67:95:bf:5b:1a:12:cb:39:9a:7d:
0e:eb:b3:6d:9d:64:63:32:b3:c9:46:f4:15:91:46:
df:d5:43:ad:dc:f0:f7:72:f8:ed:6c:a7:08:91:fb:
1a:63:5a:4f:97:73:b2:b2:4b:bb:bd:62:bc:5b:f8:
d6:94:01:1e:87:0a:94:7f:03:cb:ba:7c:d6:95:39:
b3:8d:ff:27:5f:b8:01:8c:92:21:b5:1c:5b:e3:ec:
ec:90:9b:99:df:c8:20:27:33:3c:43:3c:8f:f0:61:
95:aa:72:a3:08:6f:ee:64:6b:b6:e9:0c:9a:0b:64:
40:a1:5b:6e:b6:27:08:9d:91:19:2f:e1:91:c4:58:
c6:2c:74:82:62:ef:ca:50:db:8a:b3:5d:68:b8:c3:
23:8f:52:af:2d:15:01:7d:5d:8a:7a:24:6a:ca:1d:
c2:9b:ec:c3:e4:7b:27:92:81:dd:75:a7:a9:5e:27:
3f:d2:5d:65:ca:83:4e:df:bc:26:d7:ed:47:20:6a:
7b:34:b1:7d:93:f4:90:43:8e:57:27:ce:c2:39:9a:
5d:6c:21:ed:3e:f0:06:68:96:3e:58:d6:4e:a3:94:
38:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:80:49:8F:9E:CE:93:AE:64:85:0A:D5:34:3D:1D:E9:B9:28:FE:19
X509v3 Authority Key Identifier:
keyid:2C:8F:A8:53:3D:CC:82:0B:A1:AD:6F:B2:B2:F0:16:10:10:53:1D:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:92:8c:a4:21:38:1e:0c:60:66:0d:2c:ed:a9:6b:c0:b3:2d:
2b:b5:5c:9d:83:e5:99:f1:54:b2:5e:8a:63:e8:1b:b5:78:4e:
66:bb:38:6b:44:8c:48:83:94:16:b3:d3:1f:e4:85:1c:b9:eb:
6e:36:0b:9b:d6:d1:55:98:b7:aa:01:c2:9e:0a:86:cc:8c:15:
7d:19:79:f9:ab:5a:6a:8d:90:53:14:40:ed:28:fe:43:74:a1:
c3:b0:bd:2d:67:e4:95:a6:39:63:18:51:7e:e5:bd:4f:ef:c2:
6d:8a:94:80:e2:e8:6f:4d:dd:4f:c8:3b:63:03:72:1e:3f:ad:
7b:e3:c7:5b:d8:ed:6d:00:5d:0f:cd:10:f8:a3:22:98:80:34:
d8:9a:65:3d:9f:3c:ab:03:c0:b0:4a:a0:12:3a:5d:4d:30:7a:
cb:d4:82:ef:00:a6:b0:5b:a6:f0:87:15:e6:59:51:34:30:ca:
4b:85:0f:e1:73:5c:e0:b5:08:de:2a:20:8a:6e:22:14:47:d7:
a1:c1:de:97:a0:91:9f:1b:03:bb:76:08:d1:69:af:89:6f:0a:
c1:39:ef:aa:83:77:73:12:dc:cc:d8:e7:3a:77:10:f3:84:90:
94:91:b9:2b:1f:b1:af:cf:b7:4e:a5:c8:ea:b3:06:b0:b9:76:
e9:e1:ec:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:41:29 2026 by rpki-client