Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.mft
File: li68oqtiGOHxrgaHwxREVP1dmWs.mft (raw, json)
Hash identifier: iqC18WvVcKRf4DnJaBem5gsYo7Icjz6iCUMMgczi0Fk=
Subject key identifier: 23:D5:72:E0:EF:BA:B0:8D:E2:4F:BB:60:6F:FC:53:68:56:C3:28:E4
Authority key identifier: 96:2E:BC:A2:AB:62:18:E1:F1:AE:06:87:C3:14:44:54:FD:5D:99:6B
Certificate issuer: /CN=962ebca2ab6218e1f1ae0687c3144454fd5d996b
Certificate serial: 019EB87C8E61625B4877812D9819E9A7A1AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/li68oqtiGOHxrgaHwxREVP1dmWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.mft
Manifest number: 18E7
Signing time: Thu 11 Jun 2026 21:00:31 +0000
Manifest this update: Thu 11 Jun 2026 21:00:31 +0000
Manifest next update: Fri 12 Jun 2026 21:00:31 +0000
Files and hashes: 1: li68oqtiGOHxrgaHwxREVP1dmWs.crl (hash: Iyv256bKhwNWtfmTv/W/smU1os9umqL//VC5Bmi2oH8=)
2: oHMS8ZGj-fNJgkWpYzSGR7WlyE0.roa (hash: iagyKqdH+vp6N5HOrboxhsVEDIapiFjNbJ5/XngCFtY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/li68oqtiGOHxrgaHwxREVP1dmWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:7c:8e:61:62:5b:48:77:81:2d:98:19:e9:a7:a1:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962ebca2ab6218e1f1ae0687c3144454fd5d996b
Validity
Not Before: Jun 11 21:00:31 2026 GMT
Not After : Jun 12 21:00:31 2026 GMT
Subject: CN=23d572e0efbab08de24fbb606ffc536856c328e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:45:e5:c4:3f:d8:77:72:70:6d:8c:8b:e3:be:
cd:d6:46:03:fd:f4:6b:76:a4:51:ca:e2:9b:b2:9a:
72:04:03:4d:4e:c7:57:86:5d:59:ab:0a:8d:19:b3:
6e:7a:ea:66:be:00:62:93:46:37:14:bd:9d:7c:8e:
6f:4c:c9:59:7d:3f:5a:5c:fe:50:de:8c:0e:f6:61:
24:94:75:a7:a6:c8:c8:23:07:46:f6:7d:d8:21:78:
fd:36:89:ff:cf:79:64:00:36:07:79:38:1c:3a:7b:
fa:cb:12:f6:4a:82:22:f8:fa:75:d4:16:e2:b9:ad:
08:52:e0:a3:22:87:37:75:34:21:73:15:4e:95:31:
79:09:25:5f:33:d1:70:ea:76:a4:e1:be:4e:41:0c:
54:33:17:80:f3:1e:b1:ca:3e:0d:a6:6d:ce:af:3e:
af:c3:a2:2e:93:f3:c6:92:9c:92:22:36:6e:99:b0:
8a:6e:49:b0:0d:d1:13:86:85:9b:4e:c4:1f:b0:b3:
2b:6a:fe:1c:18:61:82:e0:17:21:57:67:3d:dc:fe:
33:e9:ac:b0:fa:d1:d2:87:6a:1f:90:63:c3:a5:56:
b2:20:f9:e5:43:0a:e3:80:64:1a:e0:cb:d2:9a:30:
eb:23:d2:14:93:d1:68:42:0a:7b:0a:31:fc:dc:8e:
c5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:D5:72:E0:EF:BA:B0:8D:E2:4F:BB:60:6F:FC:53:68:56:C3:28:E4
X509v3 Authority Key Identifier:
keyid:96:2E:BC:A2:AB:62:18:E1:F1:AE:06:87:C3:14:44:54:FD:5D:99:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/li68oqtiGOHxrgaHwxREVP1dmWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:4d:44:e6:a4:e6:1a:1f:dc:8a:81:75:04:55:e6:fb:28:fe:
a0:65:d6:59:11:3b:69:90:03:c8:aa:b2:99:e6:fa:59:03:a7:
95:21:d3:b7:dd:a1:f1:ac:cb:17:8e:8c:c0:67:3e:d8:96:d8:
b4:b0:60:cf:49:45:4b:dc:58:17:ed:ef:06:b1:ae:a2:89:8e:
e7:34:78:33:54:a5:8a:99:64:1f:d7:43:dd:d7:18:dd:e0:ce:
e9:e9:b6:57:33:ef:d1:ab:07:cf:0e:a7:17:7d:ef:74:77:b4:
d8:1e:35:5f:b1:5a:12:e3:66:fc:40:36:6d:09:a8:de:91:94:
3f:89:98:a0:3c:04:47:8b:0b:33:fc:fe:d9:b5:1c:fa:23:90:
9d:75:70:30:7f:49:eb:0f:06:68:87:04:da:7c:0d:c0:be:bc:
88:15:a5:b0:4d:58:4a:2c:6b:41:b0:8e:c9:5e:c5:55:ca:5a:
df:b3:fa:6b:03:41:c2:70:ae:45:a9:c6:dd:35:d5:d3:89:ad:
f9:35:1b:c4:bc:48:9b:d3:77:1d:ab:c5:d3:c0:ce:9f:db:ed:
e9:9c:0f:f3:fb:50:1e:a4:b8:1c:06:dd:cf:97:5c:6b:59:ee:
fd:e0:66:48:2b:4e:6f:b1:18:0f:83:e9:e6:ee:b9:9d:33:66:
9b:5d:dc:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ64fI5hYltId4EtmBnpp6GtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2MmViY2EyYWI2MjE4ZTFmMWFlMDY4N2MzMTQ0NDU0ZmQ1
ZDk5NmIwHhcNMjYwNjExMjEwMDMxWhcNMjYwNjEyMjEwMDMxWjAzMTEwLwYDVQQD
EygyM2Q1NzJlMGVmYmFiMDhkZTI0ZmJiNjA2ZmZjNTM2ODU2YzMyOGU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEXlxD/Yd3JwbYyL477N1kYD/fRr
dqRRyuKbsppyBANNTsdXhl1ZqwqNGbNueupmvgBik0Y3FL2dfI5vTMlZfT9aXP5Q
3owO9mEklHWnpsjIIwdG9n3YIXj9Non/z3lkADYHeTgcOnv6yxL2SoIi+Pp11Bbi
ua0IUuCjIoc3dTQhcxVOlTF5CSVfM9Fw6nak4b5OQQxUMxeA8x6xyj4Npm3Orz6v
w6Iuk/PGkpySIjZumbCKbkmwDdEThoWbTsQfsLMrav4cGGGC4BchV2c93P4z6ayw
+tHSh2ofkGPDpVayIPnlQwrjgGQa4MvSmjDrI9IUk9FoQgp7CjH83I7FBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCPVcuDvurCN4k+7YG/8U2hWwyjkMB8GA1UdIwQY
MBaAFJYuvKKrYhjh8a4Gh8MURFT9XZlrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGk2OG9xdGlHT0h4cmdhSHd4UkVWUDFkbVdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy81NjBhYzYtMTk0Zi00YjFiLWI1YWMt
ZmQ4N2I3MzM1OTU1LzEvbGk2OG9xdGlHT0h4cmdhSHd4UkVWUDFkbVdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy81NjBhYzYtMTk0Zi00YjFiLWI1YWMtZmQ4N2I3MzM1OTU1
LzEvbGk2OG9xdGlHT0h4cmdhSHd4UkVWUDFkbVdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASE1E5qTm
Gh/cioF1BFXm+yj+oGXWWRE7aZADyKqymeb6WQOnlSHTt92h8azLF46MwGc+2JbY
tLBgz0lFS9xYF+3vBrGuoomO5zR4M1SliplkH9dD3dcY3eDO6em2VzPv0asHzw6n
F33vdHe02B41X7FaEuNm/EA2bQmo3pGUP4mYoDwER4sLM/z+2bUc+iOQnXVwMH9J
6w8GaIcE2nwNwL68iBWlsE1YSixrQbCOyV7FVcpa37P6awNBwnCuRanG3TXV04mt
+TUbxLxIm9N3HavF08DOn9vt6ZwP8/tQHqS4HAbdz5dca1nu/eBmSCtOb7EYD4Pp
5u65nTNmm13caw==
-----END CERTIFICATE-----
Generated at Fri Jun 12 04:40:21 2026 by rpki-client