Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
File: LI-oUz3MgguhrW-ysvAWEBBTHbk.mft (raw, json)
Hash identifier: ilVvbVoWzj1xjAms4Lk42iKPoXVs++59o5fGEfTTQjQ=
Subject key identifier: 67:72:79:DB:45:91:76:3A:CA:DC:87:5F:A0:D0:97:28:A4:EB:39:E8
Authority key identifier: 2C:8F:A8:53:3D:CC:82:0B:A1:AD:6F:B2:B2:F0:16:10:10:53:1D:B9
Certificate issuer: /CN=2c8fa8533dcc820ba1ad6fb2b2f0161010531db9
Certificate serial: 019E8E000D7BE7C177B8077E4A463B0B10BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
Manifest number: 0B41
Signing time: Wed 03 Jun 2026 15:00:28 +0000
Manifest this update: Wed 03 Jun 2026 15:00:28 +0000
Manifest next update: Thu 04 Jun 2026 15:00:28 +0000
Files and hashes: 1: CMpz6Z0ZjbzrsumthPk2h0kU714.roa (hash: A3lBqvLRLb63Z2zkD/QiutUnKW5oZQPl9laeX3xcP64=)
2: LI-oUz3MgguhrW-ysvAWEBBTHbk.crl (hash: u68fydouir01HILM7fNXHzcZtK8imVVp7kan8j/3D8s=)
3: PRW-hNh_LQ1tYJtEgFeANrexr4g.roa (hash: EtDY3iCkv6z8EfmjFrXYO7Uslfyf9DYjVpRw+acf/tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 13:19:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8e:00:0d:7b:e7:c1:77:b8:07:7e:4a:46:3b:0b:10:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c8fa8533dcc820ba1ad6fb2b2f0161010531db9
Validity
Not Before: Jun 3 15:00:28 2026 GMT
Not After : Jun 4 15:00:28 2026 GMT
Subject: CN=677279db4591763acadc875fa0d09728a4eb39e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a1:aa:f9:5c:91:ef:09:6a:56:9a:41:05:4c:
95:12:93:36:29:e5:77:b4:99:b0:1f:6c:40:50:de:
21:83:5e:0e:27:8c:e5:b2:ef:0d:03:24:3b:f7:ac:
7a:1d:bb:fb:e4:53:e3:b4:39:17:b9:9c:6e:37:11:
f3:94:b5:67:d7:45:7b:5c:fb:b5:cb:a6:bb:89:cc:
92:91:2f:2e:bd:d4:33:dd:2c:a2:23:62:00:f5:4a:
0c:9b:1b:84:1d:b3:e1:a8:9f:37:79:2c:fd:46:10:
ab:e6:97:e5:31:76:fc:f7:16:de:aa:74:ba:3f:df:
3e:b9:33:9a:15:4a:be:a4:af:70:71:30:55:0a:c6:
08:1a:8a:02:d1:4b:81:ea:57:e5:cc:be:ab:71:f2:
04:70:5d:0c:da:55:9f:3b:c8:d3:24:f4:a7:89:16:
75:e9:8a:bb:3b:40:de:0d:ae:33:8b:09:f8:89:07:
02:13:60:11:35:2c:39:2a:a5:62:6c:e7:97:e9:62:
42:46:2e:b9:b1:9f:fa:c9:45:98:ce:6d:e8:c7:ae:
85:e3:32:20:75:d0:4e:da:ef:17:3c:d9:8b:38:30:
ce:cd:5c:5e:c9:3f:00:17:b3:c5:e2:e2:41:88:6e:
54:0b:64:3b:e9:b2:b8:4c:34:ab:15:f7:5d:d9:1d:
39:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:72:79:DB:45:91:76:3A:CA:DC:87:5F:A0:D0:97:28:A4:EB:39:E8
X509v3 Authority Key Identifier:
keyid:2C:8F:A8:53:3D:CC:82:0B:A1:AD:6F:B2:B2:F0:16:10:10:53:1D:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:1e:0d:5f:77:82:e9:56:7f:f1:d2:9a:71:75:c6:bd:08:2c:
80:c6:9f:5c:a1:69:7e:92:f6:40:83:9e:46:f2:2b:6f:8f:cd:
e1:46:b7:9c:4e:e2:72:cc:14:64:d5:d5:5b:3a:53:00:4a:b2:
68:c3:3a:71:20:da:19:12:55:9b:58:b1:92:e7:e7:66:54:f7:
3a:3d:52:12:20:76:3b:87:94:3b:c6:45:35:a7:1d:ae:22:7c:
27:1a:bd:ae:6e:c4:96:5e:7f:8d:09:f4:3c:6c:a2:bc:bc:e9:
60:e8:b2:5b:5c:58:3f:e0:e4:8e:c7:d6:bd:65:e4:fa:97:dd:
47:13:49:d5:63:66:12:58:cc:1f:3c:78:dd:04:95:98:d0:a5:
8d:b4:45:88:10:9a:96:56:a1:7f:d5:2d:e7:42:06:a1:5f:49:
87:b3:a0:51:2c:e6:1b:5d:7d:02:2f:4b:fd:65:2e:b6:89:2a:
34:60:f4:35:fa:f0:d1:c2:26:a2:67:05:4d:7c:aa:47:1c:0a:
b5:8a:a4:8f:83:b2:55:4b:7b:3c:2a:e8:1e:19:57:f4:76:66:
97:f3:8b:83:b4:f8:02:c6:9e:99:41:4e:c8:d2:bf:e4:6f:3a:
38:dc:b4:54:94:d9:e3:f3:cf:66:ca:0b:66:39:43:46:ab:94:
f9:6b:7b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 19:59:37 2026 by rpki-client