Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.mft
File: Li9t2XmfpOoIT9VJ1xDGiW364pE.mft (raw, json)
Hash identifier: pxEzMDrWCrRATMUkKAu5dIUE+out89YBH5B/CtEs1D4=
Subject key identifier: 61:F4:EA:BE:32:FA:C8:6E:19:15:CE:07:20:16:14:15:1F:C8:FD:2C
Authority key identifier: 2E:2F:6D:D9:79:9F:A4:EA:08:4F:D5:49:D7:10:C6:89:6D:FA:E2:91
Certificate issuer: /CN=2e2f6dd9799fa4ea084fd549d710c6896dfae291
Certificate serial: 019F83B0F51DD1F9872E3EE4485967A51B6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Li9t2XmfpOoIT9VJ1xDGiW364pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.mft
Manifest number: 0C0C
Signing time: Tue 21 Jul 2026 08:00:40 +0000
Manifest this update: Tue 21 Jul 2026 08:00:40 +0000
Manifest next update: Wed 22 Jul 2026 08:00:40 +0000
Files and hashes: 1: Li9t2XmfpOoIT9VJ1xDGiW364pE.crl (hash: h9Av+Xr6qkWyrVZo7QLvzopX7lPlDbQDdDpSBbyrBqQ=)
2: tOuyhld-AUyG32ylyMah8UxZ7mE.roa (hash: YUhhR6mZGZf9IfQta0epFj+lmVDPTWRRkPjuKNf8QT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Li9t2XmfpOoIT9VJ1xDGiW364pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:83:b0:f5:1d:d1:f9:87:2e:3e:e4:48:59:67:a5:1b:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e2f6dd9799fa4ea084fd549d710c6896dfae291
Validity
Not Before: Jul 21 08:00:40 2026 GMT
Not After : Jul 22 08:00:40 2026 GMT
Subject: CN=61f4eabe32fac86e1915ce07201614151fc8fd2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:62:fe:be:62:8d:77:4f:21:b3:41:3f:cc:e1:
a4:ff:e0:6a:3e:c3:a0:cf:12:4d:86:ea:dd:13:b5:
f3:65:ef:89:db:64:fd:03:48:39:12:f1:e6:bb:c2:
8f:d8:dd:6a:ca:6d:ca:bf:f8:9b:a6:fa:77:4d:7e:
31:de:76:66:2a:3b:5b:51:0c:53:bc:39:06:b8:a1:
8e:63:ec:21:8b:a0:5f:a8:83:44:7b:36:db:07:40:
3a:f5:76:3a:3a:f1:ec:c5:d5:98:2e:64:ef:7f:1d:
a0:bb:d8:6c:79:67:45:d9:16:97:e9:b6:2b:31:d6:
7a:63:2a:9f:25:9d:53:bf:54:aa:9a:8b:07:e9:9c:
cc:00:bf:76:6d:fe:43:eb:26:3a:3a:f4:59:9d:aa:
2d:94:2d:23:24:1d:64:f1:36:3b:61:dc:ba:80:4b:
de:f2:fe:dc:75:5f:c7:b2:c6:73:d2:2f:5f:44:47:
8b:b4:35:fa:73:5c:9a:8b:5a:60:cf:03:82:b4:69:
4e:92:e9:07:5b:a1:5d:25:98:cc:17:9b:9e:1c:cf:
54:0c:76:6b:75:a8:b4:7a:a3:a1:28:5a:46:99:b3:
9c:fd:d3:64:70:27:9a:ac:4a:93:a1:c6:fb:4a:19:
11:0a:c3:e6:31:4c:6c:d1:c7:ed:e8:55:11:33:58:
ff:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:F4:EA:BE:32:FA:C8:6E:19:15:CE:07:20:16:14:15:1F:C8:FD:2C
X509v3 Authority Key Identifier:
keyid:2E:2F:6D:D9:79:9F:A4:EA:08:4F:D5:49:D7:10:C6:89:6D:FA:E2:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Li9t2XmfpOoIT9VJ1xDGiW364pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:7b:5d:ee:ce:04:90:4c:d1:5a:2a:68:b0:37:42:7f:6e:75:
e7:f3:e2:b5:4b:82:69:d7:31:66:a1:53:28:b4:ac:9f:87:22:
05:30:98:5d:e2:ae:af:8e:f6:05:b1:d1:d5:bb:a1:bf:03:e9:
31:f9:ac:cc:b1:68:78:bb:70:dc:c1:c2:51:8a:8b:c3:93:7b:
d0:ba:7c:9e:2f:cb:89:92:12:cb:de:45:59:ea:18:7d:16:35:
67:64:d5:14:a3:24:c2:c9:15:46:3d:b7:7a:39:3d:06:92:36:
71:84:f4:f0:e3:7b:b8:52:ab:2b:7b:b6:13:ca:4e:68:64:0d:
1c:d4:62:4d:42:08:b0:fc:fe:3b:49:6c:a8:8e:8b:ca:41:69:
c1:bd:76:cb:7d:f7:70:c8:08:78:5b:62:e4:e3:27:04:0b:3f:
5b:2c:e9:db:a9:93:81:d5:54:da:ba:f9:30:8e:ad:44:7d:5b:
91:8b:5c:74:83:ea:0d:bc:b8:b6:a2:ef:75:0f:6c:ff:5f:ce:
04:16:4d:9a:a4:17:7a:d4:4e:6a:4f:ea:f2:c0:66:98:ee:45:
de:c3:94:bb:11:dd:93:a9:e4:ea:65:82:72:5f:af:cd:db:b3:
20:86:78:72:cd:c2:a1:95:e0:3a:d1:49:d2:9d:9c:1e:49:2d:
c5:45:db:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+DsPUd0fmHLj7kSFlnpRtsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlMmY2ZGQ5Nzk5ZmE0ZWEwODRmZDU0OWQ3MTBjNjg5NmRm
YWUyOTEwHhcNMjYwNzIxMDgwMDQwWhcNMjYwNzIyMDgwMDQwWjAzMTEwLwYDVQQD
Eyg2MWY0ZWFiZTMyZmFjODZlMTkxNWNlMDcyMDE2MTQxNTFmYzhmZDJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2L+vmKNd08hs0E/zOGk/+BqPsOg
zxJNhurdE7XzZe+J22T9A0g5EvHmu8KP2N1qym3Kv/ibpvp3TX4x3nZmKjtbUQxT
vDkGuKGOY+whi6BfqINEezbbB0A69XY6OvHsxdWYLmTvfx2gu9hseWdF2RaX6bYr
MdZ6YyqfJZ1Tv1SqmosH6ZzMAL92bf5D6yY6OvRZnaotlC0jJB1k8TY7Ydy6gEve
8v7cdV/HssZz0i9fREeLtDX6c1yai1pgzwOCtGlOkukHW6FdJZjMF5ueHM9UDHZr
dai0eqOhKFpGmbOc/dNkcCearEqTocb7ShkRCsPmMUxs0cft6FURM1j/8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGH06r4y+shuGRXOByAWFBUfyP0sMB8GA1UdIwQY
MBaAFC4vbdl5n6TqCE/VSdcQxolt+uKRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGk5dDJYbWZwT29JVDlWSjF4REdpVzM2NHBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy8xYTRjYzAtZGE5Mi00NTk2LWIxMjMt
NTYxY2VkNWJiZjkyLzEvTGk5dDJYbWZwT29JVDlWSjF4REdpVzM2NHBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy8xYTRjYzAtZGE5Mi00NTk2LWIxMjMtNTYxY2VkNWJiZjky
LzEvTGk5dDJYbWZwT29JVDlWSjF4REdpVzM2NHBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAntd7s4E
kEzRWiposDdCf2515/PitUuCadcxZqFTKLSsn4ciBTCYXeKur472BbHR1buhvwPp
MfmszLFoeLtw3MHCUYqLw5N70Lp8ni/LiZISy95FWeoYfRY1Z2TVFKMkwskVRj23
ejk9BpI2cYT08ON7uFKrK3u2E8pOaGQNHNRiTUIIsPz+O0lsqI6LykFpwb12y333
cMgIeFti5OMnBAs/Wyzp26mTgdVU2rr5MI6tRH1bkYtcdIPqDby4tqLvdQ9s/1/O
BBZNmqQXetROak/q8sBmmO5F3sOUuxHdk6nk6mWCcl+vzduzIIZ4cs3CoZXgOtFJ
0p2cHkktxUXbJg==
-----END CERTIFICATE-----
Generated at Tue Jul 21 16:34:10 2026 by rpki-client