Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.mft
File: li68oqtiGOHxrgaHwxREVP1dmWs.mft (raw, json)
Hash identifier: Y00wEqI+4vN1eEJHJBkD7OeqOKfmEdxqDJ3HuoDxJy8=
Subject key identifier: 9C:61:7C:E1:85:55:CD:08:E6:F6:EE:20:C5:3B:5E:D2:7B:D0:D4:54
Authority key identifier: 96:2E:BC:A2:AB:62:18:E1:F1:AE:06:87:C3:14:44:54:FD:5D:99:6B
Certificate issuer: /CN=962ebca2ab6218e1f1ae0687c3144454fd5d996b
Certificate serial: 019CE523F323985EBACAF587FAE4ECD4E952
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/li68oqtiGOHxrgaHwxREVP1dmWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.mft
Manifest number: 17F5
Signing time: Fri 13 Mar 2026 03:01:04 +0000
Manifest this update: Fri 13 Mar 2026 03:01:04 +0000
Manifest next update: Sat 14 Mar 2026 03:01:04 +0000
Files and hashes: 1: li68oqtiGOHxrgaHwxREVP1dmWs.crl (hash: dhAFUyoh8bd65hUXcer5aytqmGQSr1gfmYGxBRuF40M=)
2: oHMS8ZGj-fNJgkWpYzSGR7WlyE0.roa (hash: iagyKqdH+vp6N5HOrboxhsVEDIapiFjNbJ5/XngCFtY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/li68oqtiGOHxrgaHwxREVP1dmWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 03:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:23:f3:23:98:5e:ba:ca:f5:87:fa:e4:ec:d4:e9:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962ebca2ab6218e1f1ae0687c3144454fd5d996b
Validity
Not Before: Mar 13 03:01:04 2026 GMT
Not After : Mar 14 03:01:04 2026 GMT
Subject: CN=9c617ce18555cd08e6f6ee20c53b5ed27bd0d454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:75:8c:fd:71:86:00:30:14:19:57:67:29:93:
e3:65:80:67:cf:8f:ab:08:7f:d7:d5:a9:06:9f:f6:
0b:28:98:79:c0:1f:6b:51:c2:96:19:09:27:e6:55:
ae:fa:0c:7d:7e:e9:17:a2:cc:ce:a8:8a:78:8e:fc:
0c:3e:53:48:d2:9e:7b:87:f7:25:ff:a4:d2:08:1f:
85:8b:f9:9b:8c:40:c8:1d:5e:46:2c:45:f0:2d:6a:
99:92:ec:f7:47:85:6b:3d:3e:6d:73:6c:23:cd:29:
d1:c2:34:d3:b1:5d:a2:f9:4f:73:bd:05:18:36:f8:
7d:82:61:31:7c:4b:af:54:74:33:bb:3f:66:bc:ab:
f1:0b:ad:9e:4c:70:c0:f6:3c:f3:3c:af:2c:67:bb:
fb:f0:0c:a3:47:8e:c8:75:a3:db:85:f9:f6:19:46:
d1:11:d4:e2:d0:a0:ae:25:03:c7:e0:7c:d6:b5:a7:
70:0a:31:fe:f3:19:3e:53:4a:9c:71:5a:f8:65:b2:
b6:f9:e0:19:0e:d7:a9:bd:a3:02:b4:c6:e1:f3:9e:
77:f7:f8:07:49:7c:0c:3d:e8:79:4a:a7:e1:3b:b0:
58:dc:f1:09:77:ab:d2:39:9d:48:ac:51:28:f3:23:
a8:a5:4d:3b:90:1b:e0:59:fa:76:95:fd:cb:67:89:
59:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:61:7C:E1:85:55:CD:08:E6:F6:EE:20:C5:3B:5E:D2:7B:D0:D4:54
X509v3 Authority Key Identifier:
keyid:96:2E:BC:A2:AB:62:18:E1:F1:AE:06:87:C3:14:44:54:FD:5D:99:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/li68oqtiGOHxrgaHwxREVP1dmWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:7f:74:dd:c4:30:99:e5:fb:89:05:36:57:0e:99:c2:b0:27:
8c:6a:a8:7f:d0:2b:41:21:9f:96:64:74:27:73:eb:3b:88:89:
a0:49:a9:87:5f:81:7f:f7:91:76:30:d3:1c:e3:b2:de:23:4b:
26:80:ad:16:67:70:85:0a:ed:36:83:99:54:98:ca:19:f8:21:
15:e9:68:e2:16:68:3a:3e:75:98:92:3e:0c:36:e3:7d:ef:e4:
6d:76:ab:e4:7a:b7:76:5f:4f:04:0c:31:3a:00:3d:94:4e:ff:
5b:bf:3b:bd:69:ff:fe:d0:83:94:24:25:d1:bf:66:18:fc:6c:
01:b9:72:0b:44:64:7e:ca:7c:ad:38:a0:21:8d:5a:16:6f:8c:
b3:90:f4:10:16:b1:7c:ed:98:54:50:ab:c0:62:e8:d1:58:8b:
6d:c0:6b:98:79:a0:c6:f1:22:79:32:1b:38:04:96:d9:b4:d4:
8d:f1:eb:c4:be:de:32:cb:49:26:ec:e1:e6:d8:9a:41:c8:ba:
b6:08:df:a9:99:8a:a3:b0:47:ad:d2:00:dd:c9:be:45:25:7e:
79:ea:45:5e:3e:94:53:47:a9:be:63:89:8d:05:90:7b:c7:b3:
fb:3c:83:a2:42:db:63:d8:9c:11:e3:19:47:61:88:5d:c2:c7:
39:09:a0:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:58:37 2026 by rpki-client