Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.mft
File: li68oqtiGOHxrgaHwxREVP1dmWs.mft (raw, json)
Hash identifier: 27/zv2rGi1AAOySura4OX7+bxQEwSY27uzMAbM1XHMA=
Subject key identifier: 42:0C:02:00:17:B4:36:19:8B:DB:63:BE:FA:90:9B:C1:D9:A2:DD:C0
Authority key identifier: 96:2E:BC:A2:AB:62:18:E1:F1:AE:06:87:C3:14:44:54:FD:5D:99:6B
Certificate issuer: /CN=962ebca2ab6218e1f1ae0687c3144454fd5d996b
Certificate serial: 01A089E7F9B7EED24F6BD2E78F56D4E3384E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/li68oqtiGOHxrgaHwxREVP1dmWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.mft
Manifest number: 19D8
Signing time: Thu 10 Sep 2026 06:01:16 +0000
Manifest this update: Thu 10 Sep 2026 06:01:16 +0000
Manifest next update: Fri 11 Sep 2026 06:01:16 +0000
Files and hashes: 1: li68oqtiGOHxrgaHwxREVP1dmWs.crl (hash: ATcIU5GRHqcjUDjkD3OkWy71isvNiZmwOQNMd8cAZBs=)
2: oHMS8ZGj-fNJgkWpYzSGR7WlyE0.roa (hash: iagyKqdH+vp6N5HOrboxhsVEDIapiFjNbJ5/XngCFtY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/li68oqtiGOHxrgaHwxREVP1dmWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 06:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:e7:f9:b7:ee:d2:4f:6b:d2:e7:8f:56:d4:e3:38:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962ebca2ab6218e1f1ae0687c3144454fd5d996b
Validity
Not Before: Sep 10 06:01:16 2026 GMT
Not After : Sep 11 06:01:16 2026 GMT
Subject: CN=420c020017b436198bdb63befa909bc1d9a2ddc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:39:f6:17:7f:c0:74:06:84:5b:b5:bd:2e:5f:
5d:2f:6c:f6:f1:14:6d:a5:76:95:46:8f:76:3d:a7:
97:71:ee:b5:66:15:fe:59:ce:a8:c4:b4:5c:c2:67:
68:e7:03:a4:b1:eb:e7:f1:c3:25:22:d6:dd:80:ea:
51:4b:e2:f3:18:0b:6b:30:47:08:43:cf:b3:f4:9f:
cc:e3:ed:6c:83:fd:6b:c9:cf:17:db:9d:20:73:07:
09:21:3f:4c:89:eb:68:8b:26:8c:cd:7b:c8:d3:40:
a3:49:10:35:c8:95:20:59:dd:d0:fa:07:34:50:d1:
69:70:54:89:bd:8f:82:aa:9a:7c:11:a9:0a:d0:68:
a2:c5:9b:33:a9:93:5f:fa:b8:bf:f8:8b:11:99:71:
c5:18:f1:c9:21:4c:6a:f7:6c:7f:a6:db:9a:da:f1:
58:36:f8:01:f4:5c:55:d3:d2:2c:4c:a7:c6:1f:5b:
3a:7f:c8:29:0d:41:31:5f:87:04:43:cc:13:a0:f0:
96:05:cb:ca:79:fc:e6:ca:c4:f9:ea:0b:72:1d:1b:
0e:e7:e8:ed:62:de:b7:94:cf:c1:c8:b7:dc:43:12:
20:25:99:64:20:99:de:c9:b7:1e:26:80:5e:aa:8c:
77:90:d6:b2:13:b0:65:80:61:40:98:ae:07:93:90:
65:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:0C:02:00:17:B4:36:19:8B:DB:63:BE:FA:90:9B:C1:D9:A2:DD:C0
X509v3 Authority Key Identifier:
keyid:96:2E:BC:A2:AB:62:18:E1:F1:AE:06:87:C3:14:44:54:FD:5D:99:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/li68oqtiGOHxrgaHwxREVP1dmWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:97:bb:ce:43:33:0e:e7:77:5a:cb:76:c2:dc:df:f8:a8:d0:
ce:f5:25:4e:3d:b8:90:d1:50:a9:84:3e:0b:65:26:6a:7e:84:
f8:3a:7c:f0:f6:34:f4:5b:8d:c3:a1:47:8c:33:f5:ca:69:66:
e8:82:bf:3f:70:f2:f3:16:75:7e:88:04:a0:e4:01:d4:e0:ce:
ff:6e:2d:5e:1b:e1:0a:52:40:80:92:ee:e1:9d:5e:af:9b:72:
4d:93:49:c0:e8:8c:65:3a:1c:36:97:57:4a:12:fb:16:95:d1:
43:b8:88:28:84:1f:d4:51:16:70:52:29:94:13:48:c1:07:98:
86:04:1d:07:ff:6a:7a:1e:2a:6f:0d:e2:52:eb:0f:c6:50:4e:
60:1b:2b:c3:8d:b0:3e:5c:29:7c:3a:c4:8c:4a:de:fc:34:d7:
ca:ae:78:e6:9d:f7:bb:4e:3d:db:68:9d:dd:d3:f7:0b:94:9d:
4e:50:37:21:cf:a5:57:3e:b7:e1:4d:50:78:45:36:38:bd:69:
7f:48:bc:c4:40:4e:72:68:ab:d3:75:cc:44:c1:a2:6e:67:2c:
30:7a:cf:5d:9e:05:74:37:05:f0:1e:bc:1e:6f:52:d1:65:fa:
1d:c6:56:76:9b:3c:d3:09:be:c3:52:4a:cb:83:dd:3e:2c:03:
30:25:33:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:42:08 2026 by rpki-client