Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft
File: Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft (raw, json)
Hash identifier: Nz4Zc9KkfpVt1kGC0R93Sc4lhSFBV0I/BAatSY7cfO8=
Subject key identifier: 50:37:D2:F9:08:74:8F:63:5F:1E:85:D7:C8:B3:7D:11:D6:64:E5:19
Authority key identifier: 2E:2F:B4:44:6B:97:F4:E0:C2:A9:55:8D:D9:9D:AC:CB:F2:9E:38:06
Certificate issuer: /CN=2e2fb4446b97f4e0c2a9558dd99daccbf29e3806
Certificate serial: 019D099E51038859FA53FD401940069E0D05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft
Manifest number: 02C8
Signing time: Fri 20 Mar 2026 05:01:03 +0000
Manifest this update: Fri 20 Mar 2026 05:01:03 +0000
Manifest next update: Sat 21 Mar 2026 05:01:03 +0000
Files and hashes: 1: Li-0RGuX9ODCqVWN2Z2sy_KeOAY.crl (hash: e6HKv2RM+lrImBsnPXZPmAieosfQ5mHUQKF+O1NnanE=)
2: aeKNaD6uMJiw1mInBrVnH3hu2rM.roa (hash: 2dAhInK00WGRR5RlwdxiRxeThK0keHj6GNSl0+Y8Gsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Mar 2026 05:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:09:9e:51:03:88:59:fa:53:fd:40:19:40:06:9e:0d:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e2fb4446b97f4e0c2a9558dd99daccbf29e3806
Validity
Not Before: Mar 20 05:01:03 2026 GMT
Not After : Mar 21 05:01:03 2026 GMT
Subject: CN=5037d2f908748f635f1e85d7c8b37d11d664e519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c5:7c:01:c6:45:d5:cf:df:43:77:23:00:07:
45:ce:a5:48:50:93:16:fb:bf:6a:20:5f:2e:2e:59:
e1:00:d1:14:aa:51:6f:3e:3b:35:4d:ea:a0:8c:0a:
30:63:f4:a6:50:00:d3:cd:fb:28:32:f1:94:0d:f9:
56:ab:e1:e0:fd:c9:23:04:52:d3:73:e0:b9:e7:9b:
3f:1c:cd:c2:4d:e7:4a:99:3f:c0:58:27:b4:7b:0d:
ee:ab:14:14:e9:c3:9f:49:d8:3e:f7:0f:84:92:1d:
27:a8:9e:e9:56:2b:b9:7b:41:43:62:97:36:3d:de:
c1:5e:44:56:68:80:58:a5:57:83:1f:5d:70:5c:a4:
3b:10:c6:6c:63:40:de:d2:91:ca:0d:b5:e1:64:c5:
7c:38:f9:5d:c3:9b:0c:03:59:4c:bb:d8:82:64:87:
5d:00:d7:4c:97:91:0c:bd:18:b7:10:4d:85:7e:e6:
d2:b2:e3:b5:5d:8d:f3:6f:ca:07:91:a4:61:0f:63:
b3:44:7c:59:94:51:ed:8e:33:b2:02:1d:c9:fa:6d:
09:ce:3a:a7:05:be:12:c3:cc:e3:26:fa:24:77:c9:
c6:dd:f6:fe:ee:cf:4d:e5:dd:21:ab:f0:4c:c4:7c:
95:29:31:38:69:62:50:6f:5f:3f:35:70:07:2d:9f:
1b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:37:D2:F9:08:74:8F:63:5F:1E:85:D7:C8:B3:7D:11:D6:64:E5:19
X509v3 Authority Key Identifier:
keyid:2E:2F:B4:44:6B:97:F4:E0:C2:A9:55:8D:D9:9D:AC:CB:F2:9E:38:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:2f:0a:6d:5e:cd:e4:30:40:22:68:91:88:53:05:e1:92:30:
aa:46:9f:25:60:69:42:14:14:99:3a:be:55:9c:59:40:69:e0:
d8:32:cb:ce:42:17:1d:39:d7:f5:49:4c:b0:1b:1a:3c:54:ba:
5e:f0:af:fc:46:de:65:f5:4f:40:c9:7b:19:0d:0f:bf:8b:f1:
62:e5:b8:d1:ba:66:bb:3d:bf:db:f0:8b:49:4b:e1:cb:42:ab:
db:ae:48:e0:0f:19:9f:97:5d:df:be:ee:fe:c8:6a:6f:29:0d:
b4:14:58:d5:1d:51:4e:47:fb:47:b5:eb:05:df:bc:2c:a0:53:
98:be:9c:b9:d3:d1:b3:4a:22:bb:30:7c:50:1a:5d:5c:39:fe:
3b:ed:4c:fd:f3:88:75:a4:43:03:d2:90:35:64:03:a3:cd:41:
d2:48:2b:7b:c5:0e:0b:a2:f1:66:a7:ad:b1:52:fb:d7:dc:f5:
c0:11:73:2b:a3:f8:eb:b9:c3:3b:c3:58:d1:49:c3:2c:96:da:
dd:09:28:96:38:0d:64:d4:a4:b1:65:61:79:ac:f8:a0:92:70:
33:e4:19:d8:7b:15:99:cf:51:0e:cf:c1:a8:b5:45:08:9f:34:
e9:89:ec:c9:0b:cc:66:f6:79:e3:71:c2:e3:84:f4:01:f8:57:
fa:fe:5d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 14:20:32 2026 by rpki-client