Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
File: LI-oUz3MgguhrW-ysvAWEBBTHbk.mft (raw, json)
Hash identifier: gYivImw409sDPA/UGiCbQBJu+lAnsQnwO8vHkeomQfs=
Subject key identifier: 48:85:50:FB:D2:09:D4:74:5A:5B:F5:25:64:F6:7B:39:C1:C2:D1:63
Authority key identifier: 2C:8F:A8:53:3D:CC:82:0B:A1:AD:6F:B2:B2:F0:16:10:10:53:1D:B9
Certificate issuer: /CN=2c8fa8533dcc820ba1ad6fb2b2f0161010531db9
Certificate serial: 01A1739478275FB30801CE67CBA88538E188
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
Manifest number: 0CC1
Signing time: Sun 25 Oct 2026 15:01:12 +0000
Manifest this update: Sun 25 Oct 2026 15:01:12 +0000
Manifest next update: Mon 26 Oct 2026 15:01:12 +0000
Files and hashes: 1: CMpz6Z0ZjbzrsumthPk2h0kU714.roa (hash: A3lBqvLRLb63Z2zkD/QiutUnKW5oZQPl9laeX3xcP64=)
2: LI-oUz3MgguhrW-ysvAWEBBTHbk.crl (hash: 6Vmaj3krLRuUiAx5BTKDyxBM5aRfwra7VKFZ8dHJKC0=)
3: PRW-hNh_LQ1tYJtEgFeANrexr4g.roa (hash: EtDY3iCkv6z8EfmjFrXYO7Uslfyf9DYjVpRw+acf/tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:73:94:78:27:5f:b3:08:01:ce:67:cb:a8:85:38:e1:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c8fa8533dcc820ba1ad6fb2b2f0161010531db9
Validity
Not Before: Oct 25 15:01:12 2026 GMT
Not After : Oct 26 15:01:12 2026 GMT
Subject: CN=488550fbd209d4745a5bf52564f67b39c1c2d163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e7:c5:12:44:e1:10:f9:6b:5a:3f:e4:5c:82:
51:af:6c:12:e0:ec:70:4e:05:57:33:c0:89:2c:dc:
97:b4:bd:c9:54:6e:3d:94:66:1f:58:af:d5:82:de:
5a:2b:04:29:1c:89:e7:73:63:73:bb:90:1f:7b:30:
9b:4b:87:e3:e7:4e:b3:19:a7:84:51:4e:39:ff:04:
d0:3b:4c:04:5c:76:22:2d:c5:93:9a:68:af:c5:26:
45:f1:16:db:10:3b:6b:d5:b5:20:74:b4:e5:ac:29:
fb:6f:fe:2d:26:08:b5:fd:60:6c:10:b7:fe:fb:57:
3b:0d:d2:54:57:60:d3:7e:5b:12:17:65:c2:85:9b:
36:b7:3a:0b:84:5f:a6:f5:f8:5b:31:23:08:8b:f1:
30:ed:2d:2e:45:7e:87:32:89:b9:80:fc:c9:a7:c8:
4e:9a:76:d0:b1:4c:8d:6d:5f:df:03:f4:b4:02:9a:
64:44:1c:f5:d8:55:92:09:9c:82:e6:2d:c3:50:01:
53:e6:28:dd:f8:fb:7b:27:ba:02:23:5f:af:2d:9b:
e2:57:02:b8:a8:09:1f:1e:38:46:33:d5:5e:a6:91:
89:b2:f4:49:3a:ea:8a:c6:ae:da:a9:ed:de:4d:aa:
dd:b3:c8:a8:3c:74:8e:5d:19:2d:0f:49:df:75:1a:
5e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:85:50:FB:D2:09:D4:74:5A:5B:F5:25:64:F6:7B:39:C1:C2:D1:63
X509v3 Authority Key Identifier:
keyid:2C:8F:A8:53:3D:CC:82:0B:A1:AD:6F:B2:B2:F0:16:10:10:53:1D:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:5c:52:54:ab:48:c3:34:78:d9:72:61:7a:f5:53:0c:25:d6:
e2:0c:ab:f1:fc:83:61:46:f0:4d:6c:65:c4:ae:55:23:b5:3e:
a6:43:62:cc:0d:a5:a7:7b:d9:2c:0e:b1:2b:79:28:85:72:61:
a3:26:3e:14:75:36:fe:98:88:a5:fc:5a:de:f9:de:7a:30:30:
cb:b2:6c:33:05:5c:90:0e:2a:08:3f:74:a8:5a:57:36:88:9a:
4b:a5:32:6f:4f:9f:ed:aa:25:47:d8:96:ef:7d:21:3b:18:a7:
07:91:15:ef:55:d3:1d:84:ab:d4:82:7d:34:29:3c:f2:c5:86:
5b:27:eb:53:55:f6:51:d4:fd:73:16:81:c8:74:b9:a3:ea:ae:
77:76:ee:ea:f3:8c:70:18:b8:d9:44:a2:04:c9:3f:e3:6d:0a:
1a:51:cc:48:29:e5:0d:b4:80:53:8a:2b:ef:38:74:44:4a:15:
23:7b:70:14:12:3e:d8:05:0e:c3:a9:87:4c:17:34:bb:ec:02:
21:c8:13:be:4e:44:bd:d8:c4:60:18:11:af:85:12:97:2a:a4:
5a:58:cf:3e:70:a5:45:27:6a:c5:41:09:6d:26:56:7a:fd:3e:
ac:fc:47:f9:ec:89:5b:bd:c9:5a:a9:18:e0:d2:be:09:ad:5e:
40:c7:52:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 19:50:36 2026 by rpki-client