Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/32024d-d3e7-4ad0-8a91-3318504c7750/1/LI_zYU_QyKi36WPM8gw68IXius4.mft
File: LI_zYU_QyKi36WPM8gw68IXius4.mft (raw, json)
Hash identifier: dJhx9oRr7XUU060aHP0s2xxTbvOySP1Mrht91RVmw7Q=
Subject key identifier: AF:4D:A6:CB:3F:A6:42:5E:E1:A3:78:95:A4:FA:B0:D0:5D:18:0A:11
Authority key identifier: 2C:8F:F3:61:4F:D0:C8:A8:B7:E9:63:CC:F2:0C:3A:F0:85:E2:BA:CE
Certificate issuer: /CN=2c8ff3614fd0c8a8b7e963ccf20c3af085e2bace
Certificate serial: 01A0890CA48FF6F0DC4734A2C556AFD8D52D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LI_zYU_QyKi36WPM8gw68IXius4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/32024d-d3e7-4ad0-8a91-3318504c7750/1/LI_zYU_QyKi36WPM8gw68IXius4.mft
Manifest number: 018A
Signing time: Thu 10 Sep 2026 02:01:42 +0000
Manifest this update: Thu 10 Sep 2026 02:01:42 +0000
Manifest next update: Fri 11 Sep 2026 02:01:42 +0000
Files and hashes: 1: 10MlIdaB7FNbLaMDGR2pTyUhDNM.roa (hash: uJVs0I5nGDm0fMwDeKlKvP2NDCYTHKgILZ0u68qw/qM=)
2: LI_zYU_QyKi36WPM8gw68IXius4.crl (hash: m2S+SluDwmN26/9g2kXYLdLnicy/6m4nF0JOPtwWNs8=)
3: MhcXZnTtDfYiJDVELcnkCFBBkXs.roa (hash: MmN60FYZ1eRqdDs1XAaIfFW9D0B2EiB8PeXLjNIcdRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/32024d-d3e7-4ad0-8a91-3318504c7750/1/LI_zYU_QyKi36WPM8gw68IXius4.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/32024d-d3e7-4ad0-8a91-3318504c7750/1/LI_zYU_QyKi36WPM8gw68IXius4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LI_zYU_QyKi36WPM8gw68IXius4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 02:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:0c:a4:8f:f6:f0:dc:47:34:a2:c5:56:af:d8:d5:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c8ff3614fd0c8a8b7e963ccf20c3af085e2bace
Validity
Not Before: Sep 10 02:01:42 2026 GMT
Not After : Sep 11 02:01:42 2026 GMT
Subject: CN=af4da6cb3fa6425ee1a37895a4fab0d05d180a11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:46:69:da:ba:69:2e:6a:81:71:52:0a:7c:67:
5f:5d:71:78:f9:af:72:4d:4b:3b:21:c9:91:66:e2:
18:86:d6:07:3b:4c:4c:dd:e6:d6:2e:3a:de:61:82:
42:bc:c2:06:34:f0:c9:7e:01:1f:5e:aa:39:2d:66:
c2:e1:5b:89:17:fb:1a:44:f7:65:c2:c4:67:5d:97:
c1:66:b4:b2:39:22:d1:99:8e:83:e2:56:a1:38:99:
10:fe:7b:53:40:d9:d9:25:e7:02:be:bb:2c:18:40:
a9:b0:d1:49:c4:2c:e0:f5:a8:5d:c8:f2:8e:69:a5:
e6:59:26:e5:a7:ac:d9:63:08:d3:f1:a3:8e:2d:ef:
a7:43:f2:d4:ee:19:96:78:3b:a7:26:02:d5:f2:39:
2f:c8:cc:ce:7f:ec:ba:ce:a9:31:72:b3:ca:96:bc:
2c:24:cc:ab:9b:9a:c1:4b:39:4a:e7:50:7d:21:f4:
98:6b:8c:ec:36:af:cd:0b:f0:a6:cd:9c:0f:b4:3f:
6c:de:2b:98:8b:47:b5:7e:a5:73:86:78:b0:0d:63:
4e:35:8a:ce:bf:ab:6b:cb:b1:5a:0d:35:f5:00:88:
71:7f:49:71:5a:0c:c7:bf:85:98:a1:3e:eb:ca:1e:
3a:76:44:c7:0b:33:a6:69:99:ab:60:51:84:09:83:
9d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:4D:A6:CB:3F:A6:42:5E:E1:A3:78:95:A4:FA:B0:D0:5D:18:0A:11
X509v3 Authority Key Identifier:
keyid:2C:8F:F3:61:4F:D0:C8:A8:B7:E9:63:CC:F2:0C:3A:F0:85:E2:BA:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LI_zYU_QyKi36WPM8gw68IXius4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/32024d-d3e7-4ad0-8a91-3318504c7750/1/LI_zYU_QyKi36WPM8gw68IXius4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/32024d-d3e7-4ad0-8a91-3318504c7750/1/LI_zYU_QyKi36WPM8gw68IXius4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:30:60:55:15:16:8b:ae:02:39:2b:1f:09:d2:b8:b9:95:d5:
bd:0b:95:dd:dd:a7:64:8e:b4:7c:21:9b:2a:a3:bf:43:74:e8:
a3:2f:88:16:24:41:0e:0a:3c:d9:b6:0c:ac:ac:6e:e1:1f:cf:
c9:dd:cb:59:67:dc:ad:0e:42:e3:52:6e:91:37:c4:d7:81:57:
40:b9:02:00:8c:6c:de:98:54:7d:43:23:11:fa:e7:72:0d:39:
42:bc:cf:21:8f:ff:26:56:ac:fe:b5:a2:e2:8a:57:77:8c:b2:
a0:7f:42:c1:ff:ff:a4:83:9c:9e:7a:23:89:11:a0:1a:cf:9d:
93:35:60:a2:7b:ff:5b:c7:ba:25:e9:29:34:ec:78:29:e8:3d:
aa:27:18:d5:f4:53:3f:e2:de:df:e3:32:5a:c9:f4:d2:49:d4:
49:00:a1:a1:96:ba:e7:eb:e1:28:5c:13:c4:68:18:19:dc:00:
c7:fa:ab:ee:95:36:c7:d7:fb:1f:8d:cb:67:cb:b2:46:b5:8e:
6a:c1:90:63:23:22:f6:a3:70:71:e8:25:d0:53:e4:0b:d2:b0:
4a:3d:b1:37:1e:e0:a7:9d:eb:8f:d3:86:60:f4:a0:9a:91:d9:
81:8f:f6:05:24:f9:08:8c:27:85:e8:6f:36:ac:03:1d:40:c6:
dc:b8:7a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:11:23 2026 by rpki-client