Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/32024d-d3e7-4ad0-8a91-3318504c7750/1/LI_zYU_QyKi36WPM8gw68IXius4.mft
File: LI_zYU_QyKi36WPM8gw68IXius4.mft (raw, json)
Hash identifier: WycCVMmdG7ZkpkvHCvczEdFT9W0E1cmm13Ze3b9dQho=
Subject key identifier: B3:E9:EC:27:01:A0:14:B6:A8:62:54:6A:6F:1D:E1:37:03:25:30:B1
Authority key identifier: 2C:8F:F3:61:4F:D0:C8:A8:B7:E9:63:CC:F2:0C:3A:F0:85:E2:BA:CE
Certificate issuer: /CN=2c8ff3614fd0c8a8b7e963ccf20c3af085e2bace
Certificate serial: 01A1957BFEB3D12B1CC50C5A00111DA1A526
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LI_zYU_QyKi36WPM8gw68IXius4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/32024d-d3e7-4ad0-8a91-3318504c7750/1/LI_zYU_QyKi36WPM8gw68IXius4.mft
Manifest number: 0215
Signing time: Sun 01 Nov 2026 05:01:33 +0000
Manifest this update: Sun 01 Nov 2026 05:01:33 +0000
Manifest next update: Mon 02 Nov 2026 05:01:33 +0000
Files and hashes: 1: 10MlIdaB7FNbLaMDGR2pTyUhDNM.roa (hash: uJVs0I5nGDm0fMwDeKlKvP2NDCYTHKgILZ0u68qw/qM=)
2: LI_zYU_QyKi36WPM8gw68IXius4.crl (hash: HqLvM/pijMGQHSDVmLVJgbnmjckwop5EtMCJg7xChhw=)
3: MhcXZnTtDfYiJDVELcnkCFBBkXs.roa (hash: MmN60FYZ1eRqdDs1XAaIfFW9D0B2EiB8PeXLjNIcdRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/32024d-d3e7-4ad0-8a91-3318504c7750/1/LI_zYU_QyKi36WPM8gw68IXius4.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/32024d-d3e7-4ad0-8a91-3318504c7750/1/LI_zYU_QyKi36WPM8gw68IXius4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LI_zYU_QyKi36WPM8gw68IXius4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:95:7b:fe:b3:d1:2b:1c:c5:0c:5a:00:11:1d:a1:a5:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c8ff3614fd0c8a8b7e963ccf20c3af085e2bace
Validity
Not Before: Nov 1 05:01:33 2026 GMT
Not After : Nov 2 05:01:33 2026 GMT
Subject: CN=b3e9ec2701a014b6a862546a6f1de137032530b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:68:5e:49:b9:46:7b:b2:7e:ed:92:9e:0b:c7:
e8:fd:ef:83:b3:d9:59:60:12:01:cc:1e:d7:a7:71:
2d:8d:db:a5:07:bd:7a:67:42:91:fd:4d:bd:a6:7e:
4e:52:49:0f:f8:f2:bc:84:36:f7:40:02:d6:0d:b2:
9b:42:3b:2e:6c:7e:ad:03:ac:ba:3b:06:ff:43:ab:
dd:c5:6d:dc:00:dc:d7:96:be:2d:ff:a4:4a:a7:19:
cf:c2:37:7d:c8:44:73:f8:ab:7e:c8:88:67:a0:ff:
ad:df:b9:2c:b6:b1:c0:63:ee:26:f4:3b:0e:f3:84:
11:81:81:eb:d1:56:38:82:47:fb:8a:17:f4:83:b0:
23:10:4e:cd:6b:6c:19:7c:2d:f5:e8:97:83:b4:41:
13:ab:d3:e6:7f:4d:fb:e4:58:be:71:c1:f7:01:4b:
fc:f9:41:f9:d0:12:8a:c9:87:a9:aa:b3:c6:d2:2b:
b1:7b:8d:9a:e8:74:13:80:c8:3f:86:3a:22:9f:44:
bf:61:5e:5e:d4:7e:3f:26:b4:be:7e:f5:3d:70:13:
fe:f9:85:1d:26:55:ec:30:72:01:25:68:5b:9d:11:
50:3a:0a:ff:44:1a:e6:5e:37:4b:50:b6:0f:d1:3c:
d4:34:31:43:ef:37:ed:a2:d7:e0:c1:82:a3:05:39:
da:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:E9:EC:27:01:A0:14:B6:A8:62:54:6A:6F:1D:E1:37:03:25:30:B1
X509v3 Authority Key Identifier:
keyid:2C:8F:F3:61:4F:D0:C8:A8:B7:E9:63:CC:F2:0C:3A:F0:85:E2:BA:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LI_zYU_QyKi36WPM8gw68IXius4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/32024d-d3e7-4ad0-8a91-3318504c7750/1/LI_zYU_QyKi36WPM8gw68IXius4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/32024d-d3e7-4ad0-8a91-3318504c7750/1/LI_zYU_QyKi36WPM8gw68IXius4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:55:a7:65:c7:49:9b:ee:a2:cd:fa:d7:f6:e5:e3:b6:43:0e:
ce:18:be:51:54:8b:76:e0:43:16:e1:50:fd:6d:5f:c7:17:f2:
7c:72:b2:85:89:6c:64:1d:2f:43:e1:be:fc:01:71:34:a8:fc:
59:30:a2:e7:19:91:56:a4:8c:5b:1b:ca:ff:41:ee:1b:a6:3f:
2a:8e:70:29:68:d6:98:56:a9:dd:66:f5:8a:34:e6:cc:fb:be:
01:83:9b:04:30:57:c5:6f:2a:a3:7f:5b:49:d1:63:43:f4:56:
fa:75:7e:29:dd:11:47:12:ca:c2:7c:c1:91:9d:d2:f0:c1:06:
57:7d:22:ba:63:53:1d:5c:e1:60:d6:6b:25:55:1a:16:b8:ab:
d6:df:88:b6:00:f3:5a:1f:f3:3e:f8:17:7d:96:2f:24:ce:bc:
24:75:89:a0:e4:ef:24:af:96:ba:a0:29:b6:6a:8e:e5:f6:18:
0e:95:ba:f3:9b:75:56:c4:17:07:dc:c5:70:4a:f0:ae:16:68:
fb:6a:67:99:8c:aa:76:e6:ad:bd:18:2a:45:65:51:75:9d:58:
59:74:18:c1:27:08:c4:59:48:1c:a1:5d:0d:2c:9e:d0:81:1d:
5d:6c:3d:0e:6f:49:6e:5e:bd:d4:39:2d:5b:f3:25:2d:52:d7:
21:e1:b0:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 14:38:49 2026 by rpki-client