Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/83215a-3d8e-4d4d-b361-811f6da8e852/1/Li0SmltLCeXgV4TDQAtrHn8lvXY.mft
File: Li0SmltLCeXgV4TDQAtrHn8lvXY.mft (raw, json)
Hash identifier: 4UTZKePjnR3tXZhQQ/ydOiZ/0tHL+/CA852Amq7wsec=
Subject key identifier: D3:1B:49:90:BC:03:82:FF:6B:F4:48:FF:FE:A9:03:4B:41:0B:49:A2
Authority key identifier: 2E:2D:12:9A:5B:4B:09:E5:E0:57:84:C3:40:0B:6B:1E:7F:25:BD:76
Certificate issuer: /CN=2e2d129a5b4b09e5e05784c3400b6b1e7f25bd76
Certificate serial: 01A08BD601624972DF869BCDAA8E1DCF04B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Li0SmltLCeXgV4TDQAtrHn8lvXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/83215a-3d8e-4d4d-b361-811f6da8e852/1/Li0SmltLCeXgV4TDQAtrHn8lvXY.mft
Manifest number: C3
Signing time: Thu 10 Sep 2026 15:00:53 +0000
Manifest this update: Thu 10 Sep 2026 15:00:53 +0000
Manifest next update: Fri 11 Sep 2026 15:00:53 +0000
Files and hashes: 1: Li0SmltLCeXgV4TDQAtrHn8lvXY.crl (hash: 8b+Rq+r+KGzRupRgTNYZNX9i4DeD2uOU1cI2ECOuprA=)
2: onHVGrE6UnVXJJ7tw9yi2jnpAKA.roa (hash: I7AFUur2ROEZxmpIxbJw3fqUyHF2B3umsxduJVcLuKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/83215a-3d8e-4d4d-b361-811f6da8e852/1/Li0SmltLCeXgV4TDQAtrHn8lvXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/83215a-3d8e-4d4d-b361-811f6da8e852/1/Li0SmltLCeXgV4TDQAtrHn8lvXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Li0SmltLCeXgV4TDQAtrHn8lvXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:d6:01:62:49:72:df:86:9b:cd:aa:8e:1d:cf:04:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e2d129a5b4b09e5e05784c3400b6b1e7f25bd76
Validity
Not Before: Sep 10 15:00:53 2026 GMT
Not After : Sep 11 15:00:53 2026 GMT
Subject: CN=d31b4990bc0382ff6bf448fffea9034b410b49a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:28:d7:20:d3:41:4b:75:78:a6:19:37:dd:39:
c6:24:ae:2b:14:ea:6c:2a:53:cc:0f:c0:62:cc:ca:
b6:e9:97:0c:80:8a:84:30:8d:9e:af:ec:8f:f5:2c:
4a:2a:f2:d1:0f:78:21:22:09:09:81:55:b3:ac:35:
47:1c:85:17:c7:ff:48:94:cf:02:ce:d6:dc:b2:bf:
eb:81:31:e0:8a:c6:59:8c:c5:aa:62:4f:5f:be:46:
48:13:6a:10:ea:94:14:e9:40:2f:a7:b0:23:63:32:
29:e7:1a:31:e7:ed:a7:e6:9b:3c:42:df:ab:4f:cd:
8a:a3:6d:f1:db:4e:04:03:69:ed:63:fb:6f:b7:6d:
b9:4c:53:ec:c9:c3:c6:47:c9:e6:92:99:b4:95:93:
23:62:18:d8:f2:3c:4a:5a:40:11:c5:08:24:13:f1:
17:b8:62:65:96:3e:7e:a2:7c:d4:36:e9:08:17:89:
a9:b4:ac:5d:f0:fe:64:ca:2f:74:20:a9:85:d9:18:
04:b5:01:77:3d:86:4f:6b:94:80:eb:45:8a:ce:60:
22:af:b6:7b:c6:ee:d8:c7:53:0a:e8:26:4b:06:ec:
95:fa:52:a2:68:76:a4:db:c9:fa:96:89:e3:57:b5:
3b:bc:16:99:89:80:03:45:bd:fb:5e:db:60:5c:d1:
56:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:1B:49:90:BC:03:82:FF:6B:F4:48:FF:FE:A9:03:4B:41:0B:49:A2
X509v3 Authority Key Identifier:
keyid:2E:2D:12:9A:5B:4B:09:E5:E0:57:84:C3:40:0B:6B:1E:7F:25:BD:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Li0SmltLCeXgV4TDQAtrHn8lvXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/83215a-3d8e-4d4d-b361-811f6da8e852/1/Li0SmltLCeXgV4TDQAtrHn8lvXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/83215a-3d8e-4d4d-b361-811f6da8e852/1/Li0SmltLCeXgV4TDQAtrHn8lvXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:e9:f6:63:06:79:fe:9d:b4:2b:c2:a4:b5:dc:0c:70:d7:a9:
86:0d:7c:0b:80:a1:e3:4c:8f:69:45:bd:5b:d0:66:54:c5:8d:
97:67:4e:c4:be:18:84:82:3b:61:a2:61:6f:20:d9:a5:ec:3f:
f9:a1:1d:51:66:cc:e9:4d:2d:d9:1d:b1:93:4d:cb:d5:4a:32:
d6:b1:90:5e:11:82:71:f9:6e:3e:4c:8f:6b:b8:09:24:08:40:
c2:fb:24:cc:2e:a3:bf:2a:0f:44:54:d4:6c:ea:de:a2:d4:60:
d2:8f:25:19:b3:2b:2c:bd:6f:2c:35:25:fe:2a:7b:94:91:5b:
53:94:52:d7:e4:32:37:d2:3f:b0:58:b4:ab:0f:4d:de:85:7f:
b1:07:db:6a:82:11:b6:8d:a8:47:4a:1d:96:93:ee:68:52:cf:
f0:e3:8d:1b:98:51:63:e8:9f:d5:e4:8b:87:60:e9:21:b9:bd:
f6:22:f5:e0:d3:3a:a7:11:ed:f6:2d:22:9b:c9:0b:ee:0a:c0:
fe:99:3d:3f:7e:52:1d:19:7d:76:fe:20:09:2c:02:3a:ad:76:
bd:26:64:c8:32:c3:3b:58:5c:a7:3f:f3:34:35:ff:e9:9f:78:
0b:b6:1f:ce:76:bc:11:78:63:4b:23:88:07:03:52:9e:c1:6e:
96:ab:7a:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCL1gFiSXLfhpvNqo4dzwS3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlMmQxMjlhNWI0YjA5ZTVlMDU3ODRjMzQwMGI2YjFlN2Yy
NWJkNzYwHhcNMjYwOTEwMTUwMDUzWhcNMjYwOTExMTUwMDUzWjAzMTEwLwYDVQQD
EyhkMzFiNDk5MGJjMDM4MmZmNmJmNDQ4ZmZmZWE5MDM0YjQxMGI0OWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArijXINNBS3V4phk33TnGJK4rFOps
KlPMD8BizMq26ZcMgIqEMI2er+yP9SxKKvLRD3ghIgkJgVWzrDVHHIUXx/9IlM8C
ztbcsr/rgTHgisZZjMWqYk9fvkZIE2oQ6pQU6UAvp7AjYzIp5xox5+2n5ps8Qt+r
T82Ko23x204EA2ntY/tvt225TFPsycPGR8nmkpm0lZMjYhjY8jxKWkARxQgkE/EX
uGJllj5+onzUNukIF4mptKxd8P5kyi90IKmF2RgEtQF3PYZPa5SA60WKzmAir7Z7
xu7Yx1MK6CZLBuyV+lKiaHak28n6lonjV7U7vBaZiYADRb37XttgXNFWwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNMbSZC8A4L/a/RI//6pA0tBC0miMB8GA1UdIwQY
MBaAFC4tEppbSwnl4FeEw0ALax5/Jb12MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGkwU21sdExDZVhnVjRURFFBdHJIbjhsdlhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi84MzIxNWEtM2Q4ZS00ZDRkLWIzNjEt
ODExZjZkYThlODUyLzEvTGkwU21sdExDZVhnVjRURFFBdHJIbjhsdlhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi84MzIxNWEtM2Q4ZS00ZDRkLWIzNjEtODExZjZkYThlODUy
LzEvTGkwU21sdExDZVhnVjRURFFBdHJIbjhsdlhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD+n2YwZ5
/p20K8KktdwMcNephg18C4Ch40yPaUW9W9BmVMWNl2dOxL4YhII7YaJhbyDZpew/
+aEdUWbM6U0t2R2xk03L1Uoy1rGQXhGCcfluPkyPa7gJJAhAwvskzC6jvyoPRFTU
bOreotRg0o8lGbMrLL1vLDUl/ip7lJFbU5RS1+QyN9I/sFi0qw9N3oV/sQfbaoIR
to2oR0odlpPuaFLP8OONG5hRY+if1eSLh2DpIbm99iL14NM6pxHt9i0im8kL7grA
/pk9P35SHRl9dv4gCSwCOq12vSZkyDLDO1hcpz/zNDX/6Z94C7Yfzna8EXhjSyOI
BwNSnsFulqt6sg==
-----END CERTIFICATE-----
Generated at Thu Sep 10 21:56:18 2026 by rpki-client