Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft
File: Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft (raw, json)
Hash identifier: 4E1g3BRLZt4oZoiFnmm6RAMIx55FB+WwQgySD8FLmKc=
Subject key identifier: 20:92:FD:3A:F3:03:0F:79:AE:46:2A:F1:30:AC:5C:09:21:7C:B9:AA
Authority key identifier: 2E:2F:B4:44:6B:97:F4:E0:C2:A9:55:8D:D9:9D:AC:CB:F2:9E:38:06
Certificate issuer: /CN=2e2fb4446b97f4e0c2a9558dd99daccbf29e3806
Certificate serial: 019D0B8CBBFC71DD1FEA2C724F109854A6DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft
Manifest number: 02C9
Signing time: Fri 20 Mar 2026 14:01:05 +0000
Manifest this update: Fri 20 Mar 2026 14:01:05 +0000
Manifest next update: Sat 21 Mar 2026 14:01:05 +0000
Files and hashes: 1: Li-0RGuX9ODCqVWN2Z2sy_KeOAY.crl (hash: vH55dck+oRNyxobVTr5a9zaHjEFkSLzIeGS+JqAynyQ=)
2: aeKNaD6uMJiw1mInBrVnH3hu2rM.roa (hash: 2dAhInK00WGRR5RlwdxiRxeThK0keHj6GNSl0+Y8Gsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Mar 2026 11:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0b:8c:bb:fc:71:dd:1f:ea:2c:72:4f:10:98:54:a6:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e2fb4446b97f4e0c2a9558dd99daccbf29e3806
Validity
Not Before: Mar 20 14:01:05 2026 GMT
Not After : Mar 21 14:01:05 2026 GMT
Subject: CN=2092fd3af3030f79ae462af130ac5c09217cb9aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:dc:f3:0c:45:64:a1:e3:1a:08:f9:4a:77:b3:
ff:c3:d6:35:2a:d4:db:cd:79:11:73:87:b9:3c:62:
3d:8d:ce:56:ba:58:ad:e0:7b:21:ac:c7:fa:91:47:
09:36:08:ee:47:9a:c2:a1:5b:21:9c:51:c9:04:fd:
b9:2a:b9:39:16:ae:db:be:b3:d5:08:19:87:0d:fb:
b4:23:7d:f1:39:22:57:bc:53:ab:8a:de:12:e3:bd:
e7:30:64:ed:13:57:f4:08:cf:e8:8f:0f:50:e3:54:
15:76:b4:81:ed:01:1e:21:71:7b:db:8c:5c:5f:58:
98:74:5f:3d:ca:fa:a1:57:d2:cb:23:5a:2e:8a:a2:
8c:a0:e8:18:6d:c4:0a:55:1c:7a:8b:8b:a3:a2:6b:
fc:b0:f1:ee:e7:91:48:c1:c4:61:dc:3e:b9:23:e0:
f8:d4:7a:75:82:eb:9b:bb:fc:0a:58:c2:30:d9:b9:
2e:2a:11:90:c6:a0:6f:17:43:42:39:35:64:4a:1d:
84:1c:63:42:16:8c:42:9d:a8:8b:13:cb:4e:b0:33:
93:3f:4c:b2:91:f0:ac:67:2a:ac:37:1c:18:77:95:
aa:f7:3b:d8:4b:7c:04:ca:69:10:61:f5:d4:61:0b:
36:4e:18:4d:23:a1:e0:a9:39:63:85:fd:72:35:7a:
a8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:92:FD:3A:F3:03:0F:79:AE:46:2A:F1:30:AC:5C:09:21:7C:B9:AA
X509v3 Authority Key Identifier:
keyid:2E:2F:B4:44:6B:97:F4:E0:C2:A9:55:8D:D9:9D:AC:CB:F2:9E:38:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:eb:a4:10:a5:e3:dc:46:30:1f:ea:f6:30:d9:2f:9f:4a:4a:
95:2c:cd:90:5b:ee:c4:c1:64:34:88:c6:7a:26:20:d1:5f:7e:
a5:1a:99:c9:27:16:25:26:c5:90:98:fa:3e:56:75:b2:7e:25:
71:a6:c2:8b:cf:5c:d8:50:be:31:ae:d7:45:1f:5a:d2:82:db:
9b:f2:7b:ac:a0:2d:b5:18:99:ae:0e:c2:e8:f9:d6:cc:98:71:
0b:b0:49:0c:b2:cb:7c:90:34:4a:34:1f:74:c2:79:36:4b:2c:
aa:11:f6:5c:2d:36:0e:3e:6b:c0:b4:d0:04:22:8b:3d:a1:83:
7e:4e:8d:58:ee:f4:f7:bb:ee:25:65:c5:52:96:fe:f6:c8:61:
5b:30:96:95:cb:01:3a:ff:f0:4b:88:4e:f8:8b:95:3d:a4:f7:
cb:81:d7:70:b6:7c:c5:6d:94:42:95:1e:52:d0:ff:2f:01:2d:
99:9b:4b:ef:e4:29:ea:56:9b:03:5d:f4:a4:92:d9:1e:88:1e:
93:0c:27:36:7a:20:5d:ad:3a:7a:94:ba:9b:a1:71:72:04:9b:
a1:60:85:d5:6f:2d:66:74:a3:9e:01:72:c0:7a:34:ee:a1:29:
55:a4:11:03:07:2d:e8:14:cb:ad:3a:cb:a5:4d:41:e5:0c:a5:
74:f7:4c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 15:56:35 2026 by rpki-client