Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.mft
File: li68oqtiGOHxrgaHwxREVP1dmWs.mft (raw, json)
Hash identifier: 0IY0m2+Z+VTGMdMxnykjemlotIucdnMG9VyjwjgSzK0=
Subject key identifier: 1F:C8:60:19:21:A4:76:21:A6:E3:C0:82:F1:8F:45:B6:85:BB:E8:F2
Authority key identifier: 96:2E:BC:A2:AB:62:18:E1:F1:AE:06:87:C3:14:44:54:FD:5D:99:6B
Certificate issuer: /CN=962ebca2ab6218e1f1ae0687c3144454fd5d996b
Certificate serial: 01A17582AC2BA4ABC2E3EF21EE924D9C9624
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/li68oqtiGOHxrgaHwxREVP1dmWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.mft
Manifest number: 1A52
Signing time: Mon 26 Oct 2026 00:01:00 +0000
Manifest this update: Mon 26 Oct 2026 00:01:00 +0000
Manifest next update: Tue 27 Oct 2026 00:01:00 +0000
Files and hashes: 1: li68oqtiGOHxrgaHwxREVP1dmWs.crl (hash: aGuhWuRKLzb15AhPgI03AaUPH3BAjqjulH+RePXdZIk=)
2: oHMS8ZGj-fNJgkWpYzSGR7WlyE0.roa (hash: iagyKqdH+vp6N5HOrboxhsVEDIapiFjNbJ5/XngCFtY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/li68oqtiGOHxrgaHwxREVP1dmWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 00:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:75:82:ac:2b:a4:ab:c2:e3:ef:21:ee:92:4d:9c:96:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962ebca2ab6218e1f1ae0687c3144454fd5d996b
Validity
Not Before: Oct 26 00:01:00 2026 GMT
Not After : Oct 27 00:01:00 2026 GMT
Subject: CN=1fc8601921a47621a6e3c082f18f45b685bbe8f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e5:87:01:d3:ec:8f:0c:1b:27:30:d6:3f:cf:
56:4b:1f:50:58:64:2e:2e:4e:c7:25:45:2d:f0:f3:
4a:65:19:5a:7f:22:03:bf:43:20:5b:7a:a2:b7:c9:
76:a4:d4:0c:87:a7:07:00:43:58:86:79:a4:cc:d5:
10:20:d3:69:3e:92:5d:c8:1b:45:09:83:0d:f7:ee:
11:6d:5a:e0:3d:2f:29:1a:61:a7:15:d9:26:bd:37:
fc:4b:8c:39:bb:0b:9a:11:27:b2:86:2b:85:79:b4:
3b:5f:a0:93:9a:74:3c:35:a6:07:af:11:af:f2:f9:
9b:ee:48:03:55:9d:cd:a9:07:4a:d3:9e:24:88:59:
18:1a:9e:db:bb:ec:af:90:15:50:3f:12:5b:d4:c1:
6a:f8:66:da:b7:ad:f1:97:b3:28:9e:56:a4:82:0b:
ff:46:ec:41:9c:04:7c:f3:ca:f5:b1:05:b1:b8:ff:
e6:57:45:79:31:c8:75:52:d0:56:dc:7f:c8:a1:f1:
6a:ac:88:eb:09:6b:ac:0e:61:e7:e5:ab:7a:19:9a:
5e:7a:bb:cc:4d:cd:35:d7:3b:af:4e:21:f4:00:f5:
ce:ec:ae:4d:5a:e5:38:fa:a9:cf:c2:66:cc:bd:6f:
c1:fe:10:2c:dd:0f:54:30:dd:2a:a2:eb:1d:7c:d5:
20:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:C8:60:19:21:A4:76:21:A6:E3:C0:82:F1:8F:45:B6:85:BB:E8:F2
X509v3 Authority Key Identifier:
keyid:96:2E:BC:A2:AB:62:18:E1:F1:AE:06:87:C3:14:44:54:FD:5D:99:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/li68oqtiGOHxrgaHwxREVP1dmWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:68:9b:d1:d8:ff:c0:7a:c8:7c:5e:62:9f:50:85:c5:ea:00:
f5:1f:7b:ea:43:42:32:2d:ab:57:fa:5f:25:02:d6:33:2d:30:
64:d5:d9:f1:7d:75:99:32:a8:66:ed:ca:8f:fe:b8:1e:a7:41:
d9:ec:d2:8c:df:97:07:9c:e5:12:40:06:b5:2a:b3:c8:76:31:
49:bf:da:e2:2c:12:61:22:11:82:be:a8:c5:21:9c:48:da:3f:
04:64:60:1e:f9:29:d4:dd:af:43:bd:bc:e8:04:f9:8f:69:fe:
8a:ce:3e:47:10:d4:53:38:07:eb:7c:ac:c5:1b:f0:f8:7b:38:
54:c5:75:f0:89:a9:70:9a:81:bf:e8:31:84:b6:86:72:78:be:
cc:62:3c:fa:63:a9:9b:52:73:5d:b9:e4:da:19:2c:35:b9:e5:
fd:bc:66:fa:2e:72:84:79:97:1c:9e:8b:0f:95:8b:e2:79:0c:
6c:f8:bb:06:66:58:f5:83:34:a2:89:89:3a:a5:02:a6:72:d0:
34:4a:c0:a5:b7:46:d5:7f:c3:d1:1e:90:ab:2a:de:e2:2f:ce:
82:27:49:78:a8:87:64:2f:ac:d0:7f:26:c3:80:72:2f:5f:d1:
68:19:f2:a1:9f:fe:9c:65:3f:4d:a3:ef:5c:97:bd:80:05:26:
be:e3:98:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 11:42:27 2026 by rpki-client