Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.mft
File: li68oqtiGOHxrgaHwxREVP1dmWs.mft (raw, json)
Hash identifier: Lny5vMqfNuc/GWCScWbCNLFXlZ5Fo4X2b54f3U0Aufo=
Subject key identifier: 53:64:B2:55:34:C1:4D:0B:90:8E:DB:E5:4E:D7:4C:7E:FE:17:29:2A
Authority key identifier: 96:2E:BC:A2:AB:62:18:E1:F1:AE:06:87:C3:14:44:54:FD:5D:99:6B
Certificate issuer: /CN=962ebca2ab6218e1f1ae0687c3144454fd5d996b
Certificate serial: 019DCED071E8523B9CB818D0D8EB46302319
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/li68oqtiGOHxrgaHwxREVP1dmWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.mft
Manifest number: 186E
Signing time: Mon 27 Apr 2026 12:01:00 +0000
Manifest this update: Mon 27 Apr 2026 12:01:00 +0000
Manifest next update: Tue 28 Apr 2026 12:01:00 +0000
Files and hashes: 1: li68oqtiGOHxrgaHwxREVP1dmWs.crl (hash: 6UeYfVJTIt+TbVhOOo3gYF5+I7FZQjzTQbS2Meu9yXI=)
2: oHMS8ZGj-fNJgkWpYzSGR7WlyE0.roa (hash: iagyKqdH+vp6N5HOrboxhsVEDIapiFjNbJ5/XngCFtY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/li68oqtiGOHxrgaHwxREVP1dmWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 12:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:d0:71:e8:52:3b:9c:b8:18:d0:d8:eb:46:30:23:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962ebca2ab6218e1f1ae0687c3144454fd5d996b
Validity
Not Before: Apr 27 12:01:00 2026 GMT
Not After : Apr 28 12:01:00 2026 GMT
Subject: CN=5364b25534c14d0b908edbe54ed74c7efe17292a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a9:ea:c3:73:b6:a1:35:25:9b:5f:99:fc:f7:
b6:15:90:75:05:09:ca:7b:6a:74:0b:e4:c7:16:ad:
a6:33:37:1a:97:bb:67:01:e0:0f:32:ab:ad:ab:dc:
f7:9d:89:f2:17:28:14:75:13:60:e6:e5:31:b1:c3:
f1:ab:5a:0d:39:24:99:08:92:75:9f:20:80:d4:7f:
41:8c:10:e5:18:5a:01:92:84:1b:ce:f5:3a:50:0f:
e1:bd:73:ab:bf:81:67:53:ac:b0:10:25:73:d0:f6:
00:38:57:63:72:c9:a4:38:5a:7a:7f:fc:da:65:48:
86:2e:ba:fd:dc:7c:28:0c:a9:a6:d6:c3:dc:a1:11:
83:7a:68:0a:b8:c3:b1:3b:69:d0:21:b2:0c:36:39:
a7:a0:8c:10:aa:ae:b6:d8:bc:f9:48:82:85:d9:f2:
7b:9d:3b:78:6c:6e:a9:69:74:f4:47:f4:7e:1e:67:
9b:b0:cd:75:7f:b1:9f:1c:c8:20:67:0a:d2:38:29:
4b:58:a7:20:68:65:93:b2:29:7e:dc:5b:90:46:71:
2c:1c:ca:3f:58:d5:66:cf:8b:e7:b6:87:a2:68:be:
be:e3:d8:cd:ae:90:d4:9d:88:60:61:a0:f3:bf:af:
6c:5b:30:57:53:45:30:4f:92:92:04:3d:7e:4a:b3:
29:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:64:B2:55:34:C1:4D:0B:90:8E:DB:E5:4E:D7:4C:7E:FE:17:29:2A
X509v3 Authority Key Identifier:
keyid:96:2E:BC:A2:AB:62:18:E1:F1:AE:06:87:C3:14:44:54:FD:5D:99:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/li68oqtiGOHxrgaHwxREVP1dmWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:b6:95:56:00:1c:bc:1e:a2:04:73:c4:0e:a4:24:51:dd:f0:
07:f0:a8:b7:8d:f6:8d:e0:39:cc:f0:86:1a:26:c5:7d:88:0c:
73:2c:df:39:38:6d:b7:bd:53:10:80:75:4e:0b:01:f2:e5:bb:
28:8e:59:ac:b1:d5:74:33:5a:eb:ce:21:e7:7f:f7:52:5d:af:
c8:ca:2f:43:c1:41:b9:58:d2:43:45:1d:95:42:92:12:29:d7:
98:23:a4:c5:d5:bb:b0:60:05:68:75:86:dc:9b:61:65:21:44:
f2:e1:02:64:bf:d8:0a:7d:4d:d1:77:2c:00:54:7f:d0:81:df:
a4:1c:27:8c:25:52:aa:b7:96:b4:f1:d4:4b:6b:ef:88:9d:12:
12:e4:4c:9f:55:07:3d:46:30:c3:38:c3:1b:ee:6a:2d:dc:d5:
55:2a:dc:12:e5:2c:b5:23:e7:12:c3:32:79:62:dd:33:4c:6c:
84:ef:9e:81:b1:9e:87:3d:82:0c:ce:89:d2:db:8c:d8:92:44:
25:69:85:b7:7d:73:54:31:2c:38:ee:46:ab:6f:c5:1b:fa:8e:
10:21:a0:68:1d:5e:bf:aa:bd:0b:15:00:42:9c:06:0a:07:50:
c2:50:8e:a3:75:b4:c3:19:f8:d9:29:34:3f:0e:e3:83:73:c9:
fd:01:f7:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3O0HHoUjucuBjQ2OtGMCMZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2MmViY2EyYWI2MjE4ZTFmMWFlMDY4N2MzMTQ0NDU0ZmQ1
ZDk5NmIwHhcNMjYwNDI3MTIwMTAwWhcNMjYwNDI4MTIwMTAwWjAzMTEwLwYDVQQD
Eyg1MzY0YjI1NTM0YzE0ZDBiOTA4ZWRiZTU0ZWQ3NGM3ZWZlMTcyOTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqnqw3O2oTUlm1+Z/Pe2FZB1BQnK
e2p0C+THFq2mMzcal7tnAeAPMqutq9z3nYnyFygUdRNg5uUxscPxq1oNOSSZCJJ1
nyCA1H9BjBDlGFoBkoQbzvU6UA/hvXOrv4FnU6ywECVz0PYAOFdjcsmkOFp6f/za
ZUiGLrr93HwoDKmm1sPcoRGDemgKuMOxO2nQIbIMNjmnoIwQqq622Lz5SIKF2fJ7
nTt4bG6paXT0R/R+HmebsM11f7GfHMggZwrSOClLWKcgaGWTsil+3FuQRnEsHMo/
WNVmz4vntoeiaL6+49jNrpDUnYhgYaDzv69sWzBXU0UwT5KSBD1+SrMpNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFNkslU0wU0LkI7b5U7XTH7+FykqMB8GA1UdIwQY
MBaAFJYuvKKrYhjh8a4Gh8MURFT9XZlrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGk2OG9xdGlHT0h4cmdhSHd4UkVWUDFkbVdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy81NjBhYzYtMTk0Zi00YjFiLWI1YWMt
ZmQ4N2I3MzM1OTU1LzEvbGk2OG9xdGlHT0h4cmdhSHd4UkVWUDFkbVdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy81NjBhYzYtMTk0Zi00YjFiLWI1YWMtZmQ4N2I3MzM1OTU1
LzEvbGk2OG9xdGlHT0h4cmdhSHd4UkVWUDFkbVdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr7aVVgAc
vB6iBHPEDqQkUd3wB/Cot432jeA5zPCGGibFfYgMcyzfOThtt71TEIB1TgsB8uW7
KI5ZrLHVdDNa684h53/3Ul2vyMovQ8FBuVjSQ0UdlUKSEinXmCOkxdW7sGAFaHWG
3JthZSFE8uECZL/YCn1N0XcsAFR/0IHfpBwnjCVSqreWtPHUS2vviJ0SEuRMn1UH
PUYwwzjDG+5qLdzVVSrcEuUstSPnEsMyeWLdM0xshO+egbGehz2CDM6J0tuM2JJE
JWmFt31zVDEsOO5Gq2/FG/qOECGgaB1ev6q9CxUAQpwGCgdQwlCOo3W0wxn42Sk0
Pw7jg3PJ/QH3EQ==
-----END CERTIFICATE-----
Generated at Mon Apr 27 19:10:38 2026 by rpki-client