Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.mft
File: LI5SR1LthVF1oBQSyzfEqeTbYXA.mft (raw, json)
Hash identifier: 9UVtxoB25kaI4xmNStXumMFFcJMOuy2Vll2Pcm3GudI=
Subject key identifier: A1:B5:CA:0A:D5:45:ED:6B:82:88:58:18:F3:87:9F:08:1E:AC:02:85
Authority key identifier: 2C:8E:52:47:52:ED:85:51:75:A0:14:12:CB:37:C4:A9:E4:DB:61:70
Certificate issuer: /CN=2c8e524752ed855175a01412cb37c4a9e4db6170
Certificate serial: 019D37533356398169DCEA7C76F504A03305
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LI5SR1LthVF1oBQSyzfEqeTbYXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 02:01:32 +0000
Manifest this update: Sun 29 Mar 2026 02:01:32 +0000
Manifest next update: Mon 30 Mar 2026 02:01:32 +0000
Files and hashes: 1: LI5SR1LthVF1oBQSyzfEqeTbYXA.crl (hash: uuEviPbexQtmfVySmGGEvtDfLL6LuN45fD1uNIXd9gE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LI5SR1LthVF1oBQSyzfEqeTbYXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:53:33:56:39:81:69:dc:ea:7c:76:f5:04:a0:33:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c8e524752ed855175a01412cb37c4a9e4db6170
Validity
Not Before: Mar 29 02:01:32 2026 GMT
Not After : Mar 30 02:01:32 2026 GMT
Subject: CN=a1b5ca0ad545ed6b82885818f3879f081eac0285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e7:3d:68:88:d6:c4:f4:7d:89:cc:e3:38:22:
0e:7c:de:61:db:d0:1b:35:b1:f6:33:ca:57:20:88:
d2:cb:8f:8d:07:38:85:22:e1:11:d2:2d:52:47:cd:
8a:3c:f0:f7:7a:5a:77:fa:bc:be:05:e8:8a:61:66:
e2:79:ee:0f:2b:62:93:48:3c:10:4b:de:e3:e9:83:
9b:ee:8b:3b:9b:50:b3:bf:eb:7d:ae:6f:e5:f2:8b:
fc:91:3b:71:6b:51:36:32:eb:63:ba:1a:59:d4:77:
ba:4d:f2:44:a8:0c:6f:67:cf:af:17:7b:e0:bc:2f:
cc:33:0a:a7:e5:fa:76:89:7b:bc:10:18:5f:38:9f:
2d:51:e6:21:57:21:cd:12:9b:52:67:9a:da:b1:17:
bf:a7:42:1c:8d:91:93:f0:ea:ad:56:e1:e7:9d:b5:
d9:3a:14:6a:06:3e:82:d3:0e:b3:06:16:36:bd:98:
08:05:e1:52:ad:ba:ac:75:4e:69:98:27:aa:10:0e:
2c:14:d4:fe:bf:d6:6e:f4:a6:d5:ee:2e:11:ff:d4:
76:5c:59:20:10:b7:c2:f2:4a:44:ae:b1:4a:52:fb:
c2:61:62:f0:fe:17:10:14:38:db:f7:2e:73:2a:a0:
51:53:da:9f:ba:ed:d7:10:e6:18:e0:92:ef:c3:6f:
c5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:B5:CA:0A:D5:45:ED:6B:82:88:58:18:F3:87:9F:08:1E:AC:02:85
X509v3 Authority Key Identifier:
keyid:2C:8E:52:47:52:ED:85:51:75:A0:14:12:CB:37:C4:A9:E4:DB:61:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LI5SR1LthVF1oBQSyzfEqeTbYXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:28:d0:98:f4:98:23:a6:ce:c0:45:fe:23:02:d7:78:85:2e:
b3:c5:29:bb:65:a5:99:80:2e:51:5b:97:29:4f:c0:83:e7:03:
4e:80:44:64:03:71:50:7a:09:f5:6c:f9:0e:83:d5:45:12:9c:
da:24:88:a6:b9:38:f2:87:f0:0d:ca:cc:49:56:b0:01:e8:fc:
57:f2:7e:c7:e3:6e:1d:68:51:0a:da:3a:f6:df:aa:df:ee:d8:
70:7d:87:68:7e:1c:cb:c5:64:05:16:ca:eb:43:07:cc:a0:4c:
84:96:ab:07:38:aa:67:dc:e5:46:eb:14:81:89:c5:04:31:bc:
80:b7:b6:f9:56:bf:eb:b5:08:22:1e:33:45:d1:f5:f6:b6:35:
ba:c9:87:16:f7:b5:ea:2e:64:43:ee:81:9e:b6:05:2e:44:91:
aa:cb:40:a7:9c:8e:f3:ea:d5:05:e4:95:82:a0:3e:6e:e4:ea:
50:69:f5:77:d2:d3:a6:da:68:21:40:41:8b:c4:65:d7:57:b3:
be:01:47:d7:c0:68:91:4d:53:2d:d7:5d:09:99:bb:b5:ce:df:
11:74:4f:0a:c8:f4:43:ca:78:11:19:1c:97:a8:80:bc:06:b3:
f7:74:70:d9:a6:b6:d6:c0:f5:7d:15:45:09:89:4d:53:60:de:
a1:a0:cf:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03UzNWOYFp3Op8dvUEoDMFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjOGU1MjQ3NTJlZDg1NTE3NWEwMTQxMmNiMzdjNGE5ZTRk
YjYxNzAwHhcNMjYwMzI5MDIwMTMyWhcNMjYwMzMwMDIwMTMyWjAzMTEwLwYDVQQD
EyhhMWI1Y2EwYWQ1NDVlZDZiODI4ODU4MThmMzg3OWYwODFlYWMwMjg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Oc9aIjWxPR9iczjOCIOfN5h29Ab
NbH2M8pXIIjSy4+NBziFIuER0i1SR82KPPD3elp3+ry+BeiKYWbiee4PK2KTSDwQ
S97j6YOb7os7m1Czv+t9rm/l8ov8kTtxa1E2MutjuhpZ1He6TfJEqAxvZ8+vF3vg
vC/MMwqn5fp2iXu8EBhfOJ8tUeYhVyHNEptSZ5rasRe/p0IcjZGT8OqtVuHnnbXZ
OhRqBj6C0w6zBhY2vZgIBeFSrbqsdU5pmCeqEA4sFNT+v9Zu9KbV7i4R/9R2XFkg
ELfC8kpErrFKUvvCYWLw/hcQFDjb9y5zKqBRU9qfuu3XEOYY4JLvw2/FoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKG1ygrVRe1rgohYGPOHnwgerAKFMB8GA1UdIwQY
MBaAFCyOUkdS7YVRdaAUEss3xKnk22FwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEk1U1IxTHRoVkYxb0JRU3l6ZkVxZVRiWVhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC80MTExYTYtYjRjZC00NDE1LTg0YmQt
NTkzYjc3NGZiMDMwLzEvTEk1U1IxTHRoVkYxb0JRU3l6ZkVxZVRiWVhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC80MTExYTYtYjRjZC00NDE1LTg0YmQtNTkzYjc3NGZiMDMw
LzEvTEk1U1IxTHRoVkYxb0JRU3l6ZkVxZVRiWVhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADyjQmPSY
I6bOwEX+IwLXeIUus8Upu2WlmYAuUVuXKU/Ag+cDToBEZANxUHoJ9Wz5DoPVRRKc
2iSIprk48ofwDcrMSVawAej8V/J+x+NuHWhRCto69t+q3+7YcH2HaH4cy8VkBRbK
60MHzKBMhJarBziqZ9zlRusUgYnFBDG8gLe2+Va/67UIIh4zRdH19rY1usmHFve1
6i5kQ+6BnrYFLkSRqstAp5yO8+rVBeSVgqA+buTqUGn1d9LTptpoIUBBi8Rl11ez
vgFH18BokU1TLdddCZm7tc7fEXRPCsj0Q8p4ERkcl6iAvAaz93Rw2aa21sD1fRVF
CYlNU2DeoaDPlA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:48 2026 by rpki-client