Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/32024d-d3e7-4ad0-8a91-3318504c7750/1/LI_zYU_QyKi36WPM8gw68IXius4.mft
File: LI_zYU_QyKi36WPM8gw68IXius4.mft (raw, json)
Hash identifier: VFntJluISXpekeKvSK/r8L1witz51FWpLtUQcW5bfbQ=
Subject key identifier: BB:57:B5:29:F6:C5:0B:BA:AF:DF:64:25:95:AF:63:6F:02:FA:39:F0
Authority key identifier: 2C:8F:F3:61:4F:D0:C8:A8:B7:E9:63:CC:F2:0C:3A:F0:85:E2:BA:CE
Certificate issuer: /CN=2c8ff3614fd0c8a8b7e963ccf20c3af085e2bace
Certificate serial: 019DCC74F79928D66B740C79C819A97890AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LI_zYU_QyKi36WPM8gw68IXius4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/32024d-d3e7-4ad0-8a91-3318504c7750/1/LI_zYU_QyKi36WPM8gw68IXius4.mft
Manifest number: 1F
Signing time: Mon 27 Apr 2026 01:01:50 +0000
Manifest this update: Mon 27 Apr 2026 01:01:50 +0000
Manifest next update: Tue 28 Apr 2026 01:01:50 +0000
Files and hashes: 1: 10MlIdaB7FNbLaMDGR2pTyUhDNM.roa (hash: uJVs0I5nGDm0fMwDeKlKvP2NDCYTHKgILZ0u68qw/qM=)
2: AqfiHRSMPIcbIVkiIdixaRazNn0.roa (hash: UDIOUMnhU9VicSJL71PeZpDe6IjDOXbKWWhQadSznoc=)
3: LI_zYU_QyKi36WPM8gw68IXius4.crl (hash: mB90nI/LRbMTy2enCcbJwLvsggBAQJCphSYSPeQUp9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/32024d-d3e7-4ad0-8a91-3318504c7750/1/LI_zYU_QyKi36WPM8gw68IXius4.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/32024d-d3e7-4ad0-8a91-3318504c7750/1/LI_zYU_QyKi36WPM8gw68IXius4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LI_zYU_QyKi36WPM8gw68IXius4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:74:f7:99:28:d6:6b:74:0c:79:c8:19:a9:78:90:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c8ff3614fd0c8a8b7e963ccf20c3af085e2bace
Validity
Not Before: Apr 27 01:01:50 2026 GMT
Not After : Apr 28 01:01:50 2026 GMT
Subject: CN=bb57b529f6c50bbaafdf642595af636f02fa39f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:eb:36:ad:26:8c:3b:9d:ee:32:dc:11:49:a7:
4b:db:32:bd:e1:bb:5d:d0:17:74:48:5a:f7:27:9c:
69:82:01:3c:e6:0d:0e:6d:64:33:99:31:ef:da:c9:
c9:8c:94:67:a0:d6:bb:f9:97:66:ce:6e:e1:58:d5:
6e:38:78:c9:bb:3a:0a:2a:db:87:a0:90:1c:04:9f:
2f:71:5f:1b:b5:cd:cf:77:c6:4d:3b:a3:18:3b:c0:
ad:d1:1c:96:74:2c:1c:34:cf:5e:ac:28:4b:7e:31:
3e:da:96:12:66:9d:1a:1d:d4:af:f8:c1:3c:4f:a4:
73:f7:10:61:bf:f9:9d:c0:c4:36:3c:4a:5c:cb:c1:
7c:76:ba:dc:86:6d:6c:89:a9:f6:bd:9b:87:a8:4e:
e8:4b:82:3d:61:68:cf:58:a0:19:09:72:03:63:41:
73:3b:40:62:cb:f5:65:6b:8a:1f:ba:43:30:c7:35:
7f:ea:4d:3c:2f:ad:87:04:c0:79:7b:f0:6a:b1:17:
c6:97:d8:47:75:a1:d7:1d:1f:f8:58:bb:c0:c0:ab:
72:43:09:19:1c:6f:9d:97:45:5e:8f:46:e5:ad:ae:
69:94:01:bb:49:62:17:6f:2e:ef:ee:35:35:12:bf:
88:d6:05:99:0b:dc:b4:4e:66:34:8c:b8:6d:e6:6b:
90:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:57:B5:29:F6:C5:0B:BA:AF:DF:64:25:95:AF:63:6F:02:FA:39:F0
X509v3 Authority Key Identifier:
keyid:2C:8F:F3:61:4F:D0:C8:A8:B7:E9:63:CC:F2:0C:3A:F0:85:E2:BA:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LI_zYU_QyKi36WPM8gw68IXius4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/32024d-d3e7-4ad0-8a91-3318504c7750/1/LI_zYU_QyKi36WPM8gw68IXius4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/32024d-d3e7-4ad0-8a91-3318504c7750/1/LI_zYU_QyKi36WPM8gw68IXius4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:e8:1f:bd:a7:57:5b:44:2f:ec:04:57:e4:0c:b9:af:0d:2c:
31:22:e1:3a:5d:74:e8:18:8e:f7:86:b8:77:d7:3e:fd:27:f2:
fb:ab:47:d2:74:6a:59:b3:37:05:e7:cd:11:bc:64:a5:35:9f:
04:f6:69:97:af:a1:6a:c6:dd:d2:ac:32:06:f7:78:a1:86:dc:
01:8e:28:00:0f:17:69:f6:88:ff:6b:b8:1a:78:17:f2:6d:a7:
07:2f:41:0e:08:f6:e3:de:15:ef:ca:7a:27:a4:20:f2:eb:8e:
0c:d6:9a:a1:24:bd:fa:96:cc:be:83:80:66:21:7b:86:f6:f2:
b0:e6:d2:9f:64:e4:63:75:79:7b:a5:f0:e0:d5:a5:b6:a9:6c:
9a:08:88:76:c7:bb:1b:e0:30:3f:53:d4:72:58:39:cd:93:52:
d7:73:b7:15:48:9e:de:68:ef:66:0a:b8:0a:96:03:0e:1f:3c:
f2:23:5f:7b:c2:90:d9:8a:26:72:b2:4a:dc:ec:4b:8f:72:81:
bd:f1:bf:49:b4:b0:fa:7b:0e:8f:8f:26:65:22:6d:c9:df:e8:
a1:6e:8b:52:22:4c:71:c9:cd:d7:29:6b:65:3f:d5:e0:c7:43:
ab:a4:e7:ed:57:16:54:bc:6a:d8:e5:58:f1:1c:8f:1e:67:58:
ec:9c:c5:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3MdPeZKNZrdAx5yBmpeJCqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjOGZmMzYxNGZkMGM4YThiN2U5NjNjY2YyMGMzYWYwODVl
MmJhY2UwHhcNMjYwNDI3MDEwMTUwWhcNMjYwNDI4MDEwMTUwWjAzMTEwLwYDVQQD
EyhiYjU3YjUyOWY2YzUwYmJhYWZkZjY0MjU5NWFmNjM2ZjAyZmEzOWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzes2rSaMO53uMtwRSadL2zK94btd
0Bd0SFr3J5xpggE85g0ObWQzmTHv2snJjJRnoNa7+Zdmzm7hWNVuOHjJuzoKKtuH
oJAcBJ8vcV8btc3Pd8ZNO6MYO8Ct0RyWdCwcNM9erChLfjE+2pYSZp0aHdSv+ME8
T6Rz9xBhv/mdwMQ2PEpcy8F8drrchm1sian2vZuHqE7oS4I9YWjPWKAZCXIDY0Fz
O0Biy/Vla4ofukMwxzV/6k08L62HBMB5e/BqsRfGl9hHdaHXHR/4WLvAwKtyQwkZ
HG+dl0Vej0blra5plAG7SWIXby7v7jU1Er+I1gWZC9y0TmY0jLht5muQpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLtXtSn2xQu6r99kJZWvY28C+jnwMB8GA1UdIwQY
MBaAFCyP82FP0Miot+ljzPIMOvCF4rrOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTElfellVX1F5S2kzNldQTThndzY4SVhpdXM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8zMjAyNGQtZDNlNy00YWQwLThhOTEt
MzMxODUwNGM3NzUwLzEvTElfellVX1F5S2kzNldQTThndzY4SVhpdXM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS8zMjAyNGQtZDNlNy00YWQwLThhOTEtMzMxODUwNGM3NzUw
LzEvTElfellVX1F5S2kzNldQTThndzY4SVhpdXM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEugfvadX
W0Qv7ARX5Ay5rw0sMSLhOl106BiO94a4d9c+/Sfy+6tH0nRqWbM3BefNEbxkpTWf
BPZpl6+hasbd0qwyBvd4oYbcAY4oAA8XafaI/2u4GngX8m2nBy9BDgj2494V78p6
J6Qg8uuODNaaoSS9+pbMvoOAZiF7hvbysObSn2TkY3V5e6Xw4NWltqlsmgiIdse7
G+AwP1PUclg5zZNS13O3FUie3mjvZgq4CpYDDh888iNfe8KQ2YomcrJK3OxLj3KB
vfG/SbSw+nsOj48mZSJtyd/ooW6LUiJMccnN1ylrZT/V4MdDq6Tn7VcWVLxq2OVY
8RyPHmdY7JzFXQ==
-----END CERTIFICATE-----
Generated at Mon Apr 27 09:43:14 2026 by rpki-client