Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
File: LI-oUz3MgguhrW-ysvAWEBBTHbk.mft (raw, json)
Hash identifier: sYqB71K0weP6nuabDr+PvchZ6Ig5CB//ewFNYt8rvFE=
Subject key identifier: 3E:B3:64:8A:97:7E:41:F7:BD:20:6E:6F:F0:51:3E:A7:F6:FB:77:87
Authority key identifier: 2C:8F:A8:53:3D:CC:82:0B:A1:AD:6F:B2:B2:F0:16:10:10:53:1D:B9
Certificate issuer: /CN=2c8fa8533dcc820ba1ad6fb2b2f0161010531db9
Certificate serial: 01A16421B18BFDA405870395DE154D4446F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
Manifest number: 0CB9
Signing time: Thu 22 Oct 2026 15:01:32 +0000
Manifest this update: Thu 22 Oct 2026 15:01:32 +0000
Manifest next update: Fri 23 Oct 2026 15:01:32 +0000
Files and hashes: 1: CMpz6Z0ZjbzrsumthPk2h0kU714.roa (hash: A3lBqvLRLb63Z2zkD/QiutUnKW5oZQPl9laeX3xcP64=)
2: LI-oUz3MgguhrW-ysvAWEBBTHbk.crl (hash: wpvTdKjHNsPWUOjfpi7m9KmGbXCybaZM0vmkIO51hak=)
3: PRW-hNh_LQ1tYJtEgFeANrexr4g.roa (hash: EtDY3iCkv6z8EfmjFrXYO7Uslfyf9DYjVpRw+acf/tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:64:21:b1:8b:fd:a4:05:87:03:95:de:15:4d:44:46:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c8fa8533dcc820ba1ad6fb2b2f0161010531db9
Validity
Not Before: Oct 22 15:01:32 2026 GMT
Not After : Oct 23 15:01:32 2026 GMT
Subject: CN=3eb3648a977e41f7bd206e6ff0513ea7f6fb7787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1c:92:6b:b8:21:1d:2b:8c:cc:a1:a4:b7:b6:
6f:f3:23:35:1f:98:c7:8e:f1:69:94:da:19:9c:58:
0d:25:01:ca:2a:e7:ba:fd:8a:80:c4:b0:50:74:db:
ba:26:37:17:3b:e8:20:33:30:3c:dc:81:a0:10:de:
02:38:61:93:fa:7f:97:16:9a:ce:2d:71:01:c0:07:
fa:a5:5b:10:ff:8c:01:66:aa:d5:a3:a0:16:a2:2f:
89:da:65:f2:da:38:8f:45:66:22:6e:92:bc:7f:f0:
4a:02:5d:20:92:58:56:d3:29:08:a8:e1:a2:07:3b:
a1:e2:f3:e3:ba:b6:3c:98:e2:95:ad:9c:34:92:a6:
65:1f:cb:fc:ed:0a:73:a9:65:05:92:9b:f5:93:18:
2a:d8:3f:77:ed:bd:74:a7:fd:0a:eb:d8:29:80:01:
c9:88:5a:4d:d1:3d:a9:a1:7a:ff:e2:c6:7b:7b:23:
02:41:6f:5b:7c:09:ab:f4:d3:e3:fb:27:37:19:d7:
b1:ce:9a:05:6c:2d:ee:a7:ea:5e:e9:e6:2c:aa:fa:
d6:13:d0:f7:84:33:e0:71:9c:dc:af:29:f3:02:09:
c4:33:90:30:29:09:f7:0c:a1:68:32:00:e8:a3:41:
0c:22:f8:2a:0b:a1:9c:8c:f7:97:cb:8c:0c:da:b0:
d4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B3:64:8A:97:7E:41:F7:BD:20:6E:6F:F0:51:3E:A7:F6:FB:77:87
X509v3 Authority Key Identifier:
keyid:2C:8F:A8:53:3D:CC:82:0B:A1:AD:6F:B2:B2:F0:16:10:10:53:1D:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:71:41:b2:b9:72:8c:9d:b1:58:94:7a:b1:8b:76:53:c9:25:
93:f9:e6:8d:c0:69:56:fc:51:aa:7f:0a:e4:1f:e3:70:79:45:
c6:02:d4:dc:df:18:7c:d3:8a:2e:f3:b6:99:7f:79:93:0e:3e:
9e:77:66:f3:30:ca:ea:8f:ea:de:2f:91:7a:78:b5:4a:8d:4e:
3d:63:c1:ae:cb:a6:7d:8b:94:5b:79:49:a5:79:d6:24:15:c7:
a6:93:99:a3:ed:5d:8e:01:e8:2b:3e:b1:ad:7f:22:f7:f8:b8:
1e:76:5c:29:4a:9e:aa:6a:ba:2a:58:80:ad:90:b9:c6:49:71:
38:50:0f:cc:dd:cb:96:6b:4f:55:e8:91:65:45:ec:0a:89:4d:
a2:c0:17:f7:4b:dd:71:23:e4:40:1a:0a:4e:db:d2:f3:b1:a2:
61:e4:21:af:09:e1:5f:94:c4:e9:18:97:de:b0:7a:47:82:8c:
df:10:77:fe:13:df:f6:f0:2d:49:0d:06:2c:ad:c2:70:02:1a:
aa:b0:11:4c:0b:7a:e9:c0:0c:de:d4:00:82:69:cb:87:17:93:
6e:76:6e:3d:12:52:da:e5:2e:4e:18:b1:53:72:b0:d1:71:db:
6d:33:9b:0c:46:1f:f1:d8:02:a1:5b:75:3e:97:29:b1:da:f8:
1f:35:11:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 20:04:36 2026 by rpki-client