Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
File: LI-oUz3MgguhrW-ysvAWEBBTHbk.mft (raw, json)
Hash identifier: GUx9JtLkRS49kfpv7UhKj1nX4mF/ZD+0HA21PKhmjpI=
Subject key identifier: 18:D2:D9:06:68:43:A7:58:62:18:9F:B2:FD:03:3F:7E:90:11:E7:47
Authority key identifier: 2C:8F:A8:53:3D:CC:82:0B:A1:AD:6F:B2:B2:F0:16:10:10:53:1D:B9
Certificate issuer: /CN=2c8fa8533dcc820ba1ad6fb2b2f0161010531db9
Certificate serial: 019D3A1C8861A0208BA9A5AB86A691107C55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
Manifest number: 0A91
Signing time: Sun 29 Mar 2026 15:00:41 +0000
Manifest this update: Sun 29 Mar 2026 15:00:41 +0000
Manifest next update: Mon 30 Mar 2026 15:00:41 +0000
Files and hashes: 1: CMpz6Z0ZjbzrsumthPk2h0kU714.roa (hash: A3lBqvLRLb63Z2zkD/QiutUnKW5oZQPl9laeX3xcP64=)
2: LI-oUz3MgguhrW-ysvAWEBBTHbk.crl (hash: U2rhunSTGrW2FkTExo+6spARXJw7HBVZ+HEGlyIY9BI=)
3: PRW-hNh_LQ1tYJtEgFeANrexr4g.roa (hash: EtDY3iCkv6z8EfmjFrXYO7Uslfyf9DYjVpRw+acf/tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 15:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:88:61:a0:20:8b:a9:a5:ab:86:a6:91:10:7c:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c8fa8533dcc820ba1ad6fb2b2f0161010531db9
Validity
Not Before: Mar 29 15:00:41 2026 GMT
Not After : Mar 30 15:00:41 2026 GMT
Subject: CN=18d2d9066843a75862189fb2fd033f7e9011e747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:85:45:54:14:ff:ff:58:d9:c9:7a:c6:39:99:
1f:4c:75:f9:5a:0d:ec:3a:d8:d6:17:53:38:e6:00:
dd:22:e6:71:63:de:52:68:a3:99:02:b7:32:24:9c:
e7:30:92:f1:c2:da:e7:1d:b7:03:7a:55:50:75:a3:
fd:29:98:67:3e:44:ce:a3:19:01:38:f1:3e:db:b5:
91:78:38:6a:f3:45:52:cf:b2:7d:1c:ff:cb:c1:c7:
c4:b5:46:a1:6a:30:22:4f:76:aa:e3:5c:9f:31:bb:
f4:88:a8:2b:d8:79:4f:45:d8:3b:e2:c5:4f:40:ec:
9f:fe:60:25:07:06:91:69:83:3c:72:a0:33:2d:cb:
c6:15:ae:fc:82:79:70:8a:91:3e:38:e1:d1:7f:11:
56:17:64:64:f7:20:89:c1:22:db:2b:9b:78:16:50:
19:47:72:2f:d2:e7:92:18:2c:3f:fe:90:73:7e:b5:
f0:ea:64:4d:13:4b:26:44:18:be:e5:d2:01:fc:b5:
2f:a9:1e:e6:c5:b2:58:32:00:1a:ed:d7:86:42:2c:
ae:d4:c8:fc:8b:0c:80:61:8c:0f:3b:81:00:72:4e:
9d:d7:12:21:8e:45:1b:ea:dd:b5:5d:77:53:02:56:
0e:40:5e:c3:ba:1e:e4:3a:0c:01:ad:79:31:54:d9:
8a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:D2:D9:06:68:43:A7:58:62:18:9F:B2:FD:03:3F:7E:90:11:E7:47
X509v3 Authority Key Identifier:
keyid:2C:8F:A8:53:3D:CC:82:0B:A1:AD:6F:B2:B2:F0:16:10:10:53:1D:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:3c:38:9f:c2:1e:ed:1a:16:2c:94:c6:2a:35:ff:0a:19:5a:
26:35:a5:a2:dc:21:2d:49:d8:27:66:77:ff:99:17:84:8e:ec:
5d:0c:5c:da:c2:28:b4:e9:7d:01:ba:5c:dd:82:df:15:45:95:
2d:a7:e1:b0:d3:b8:fa:96:b8:71:2b:e4:8f:bd:45:a6:57:eb:
e2:51:f7:f5:39:aa:f9:a8:76:d5:d6:6c:2e:cc:7a:49:97:ab:
55:98:6c:6b:bf:8d:b2:93:0f:03:b1:5e:87:9d:ee:8d:7a:0d:
1e:f5:15:59:29:dc:d0:1f:76:87:e3:68:58:90:3a:a1:e7:82:
59:d0:b3:87:d5:66:fe:57:6b:b4:e0:55:bd:5c:6f:dc:a5:c0:
e6:fb:d2:ab:7d:66:26:35:9b:23:42:db:aa:71:a1:ce:ad:ab:
2a:88:b1:8c:15:6b:7c:2f:c1:0a:5b:67:6a:de:46:30:19:42:
b1:8f:88:25:c0:97:f0:54:e8:b7:80:93:08:f9:01:fc:e2:59:
23:60:27:11:50:ad:24:59:24:86:de:af:a4:83:a0:cc:68:11:
5e:fb:8f:98:1b:7c:a4:38:cf:ee:d3:48:f2:47:00:36:62:18:
b2:b0:29:c7:06:e5:45:13:c7:12:d7:c2:44:94:68:4d:32:07:
eb:f8:8e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:10:53 2026 by rpki-client