Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
File: LI-oUz3MgguhrW-ysvAWEBBTHbk.mft (raw, json)
Hash identifier: jyG9oe4eWqfahOTrz/Ki5xL22uWJ5mTybfJn8lH/upk=
Subject key identifier: 41:3B:ED:7F:60:94:98:43:62:E1:B4:0D:B7:2A:4B:56:64:CB:97:B6
Authority key identifier: 2C:8F:A8:53:3D:CC:82:0B:A1:AD:6F:B2:B2:F0:16:10:10:53:1D:B9
Certificate issuer: /CN=2c8fa8533dcc820ba1ad6fb2b2f0161010531db9
Certificate serial: 01A06EDE1936B131CDF248362AB4F3721B59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
Manifest number: 0C3A
Signing time: Sat 05 Sep 2026 00:00:44 +0000
Manifest this update: Sat 05 Sep 2026 00:00:44 +0000
Manifest next update: Sun 06 Sep 2026 00:00:44 +0000
Files and hashes: 1: CMpz6Z0ZjbzrsumthPk2h0kU714.roa (hash: A3lBqvLRLb63Z2zkD/QiutUnKW5oZQPl9laeX3xcP64=)
2: LI-oUz3MgguhrW-ysvAWEBBTHbk.crl (hash: 4gTAxz3RmU92Fq8LfvX/bzv2jnM3kC/375qlpnggIxA=)
3: PRW-hNh_LQ1tYJtEgFeANrexr4g.roa (hash: EtDY3iCkv6z8EfmjFrXYO7Uslfyf9DYjVpRw+acf/tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:de:19:36:b1:31:cd:f2:48:36:2a:b4:f3:72:1b:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c8fa8533dcc820ba1ad6fb2b2f0161010531db9
Validity
Not Before: Sep 5 00:00:44 2026 GMT
Not After : Sep 6 00:00:44 2026 GMT
Subject: CN=413bed7f6094984362e1b40db72a4b5664cb97b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:82:8d:2c:74:93:99:ef:24:3e:ef:b8:fb:7e:
0e:4b:28:c6:fd:6c:77:f7:1e:05:bf:b5:e4:a7:e4:
05:68:d3:4f:d8:e6:6d:bf:35:66:fc:07:5f:e6:4d:
31:26:b9:a2:f8:b0:36:18:fb:0e:db:58:56:ed:2b:
76:f0:c3:75:dc:be:bb:73:37:4c:a9:73:7a:7f:38:
5a:6f:9e:f7:76:58:5f:b7:a4:cb:42:7e:95:07:bd:
89:4f:de:f5:6e:c8:75:63:d1:0e:65:f0:b6:7e:f2:
05:65:6f:ea:13:ba:2e:55:6e:dc:b0:95:c6:b1:04:
2b:70:c8:3c:ed:80:14:cd:7e:57:1f:57:25:d8:3f:
54:63:c0:3d:da:5f:e2:82:4f:35:a5:ed:f6:71:f8:
e0:9e:d5:f6:e0:d0:5d:30:90:cb:12:c4:9a:1a:ba:
cf:38:dc:42:32:f0:8d:2c:55:6f:b5:3c:31:3a:2b:
63:7a:1f:12:8a:de:56:14:27:ff:dd:1e:fb:00:21:
fd:48:61:19:c8:d2:35:8f:55:cf:20:79:38:e2:b7:
bc:85:13:88:90:86:0d:41:96:a9:4b:9c:59:67:77:
13:06:b7:59:ab:3b:9d:95:f2:05:22:9a:36:07:25:
f7:68:0b:86:00:f8:31:93:dd:8b:eb:16:10:59:47:
ff:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:3B:ED:7F:60:94:98:43:62:E1:B4:0D:B7:2A:4B:56:64:CB:97:B6
X509v3 Authority Key Identifier:
keyid:2C:8F:A8:53:3D:CC:82:0B:A1:AD:6F:B2:B2:F0:16:10:10:53:1D:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:86:26:42:bc:cb:a6:4f:90:e2:e1:62:b0:17:0f:0b:59:b2:
21:85:89:ce:e8:2d:92:bf:7e:99:8d:f4:ec:d2:d3:42:bc:b2:
31:29:75:c8:6b:a0:2e:20:92:1d:90:67:ac:3a:0c:a1:75:e4:
16:57:ed:fc:21:df:20:cb:da:97:03:e3:49:07:fb:49:7a:fd:
0e:05:34:c1:8d:cd:6a:d3:7e:5a:0a:bb:3c:e7:c8:06:f3:16:
68:98:b8:25:b2:78:d0:38:27:c6:1f:93:ab:97:1a:8e:77:81:
5a:ce:bc:07:0d:69:e8:20:88:c3:c7:2f:c4:d8:4a:91:4a:ca:
de:2f:62:c6:97:74:51:4e:ef:42:64:b9:f8:21:7b:44:35:fd:
3e:95:4f:ac:9b:3f:85:c4:9f:57:78:d5:ff:fa:8d:df:5d:43:
63:59:51:4f:ba:d9:cc:cc:0d:c8:5d:3d:a8:f6:23:95:cc:ad:
f9:bd:20:1f:91:09:41:e6:b8:04:07:ed:e0:0f:49:7c:71:24:
8f:65:06:9f:5f:03:37:32:a2:fa:91:f7:95:a8:b4:be:e1:01:
c2:f4:6e:ce:84:75:a8:dd:3a:d9:f3:86:15:e6:2b:db:09:93:
e6:ab:ce:d7:5f:8b:9c:58:31:10:4c:c0:cd:38:5f:7a:3f:72:
fd:6d:27:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:02:43 2026 by rpki-client