Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/83215a-3d8e-4d4d-b361-811f6da8e852/1/Li0SmltLCeXgV4TDQAtrHn8lvXY.mft
File: Li0SmltLCeXgV4TDQAtrHn8lvXY.mft (raw, json)
Hash identifier: 3M3mxORANV7CxHvgjWFfxZ0h+BLKQ2xE7Kz9fPddnFo=
Subject key identifier: DE:21:7E:FD:B4:8B:13:0A:20:5D:56:93:D7:B8:DC:15:7D:30:25:93
Authority key identifier: 2E:2D:12:9A:5B:4B:09:E5:E0:57:84:C3:40:0B:6B:1E:7F:25:BD:76
Certificate issuer: /CN=2e2d129a5b4b09e5e05784c3400b6b1e7f25bd76
Certificate serial: 019FA229ACF3FB105A1672CF408C9CEC36E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Li0SmltLCeXgV4TDQAtrHn8lvXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/83215a-3d8e-4d4d-b361-811f6da8e852/1/Li0SmltLCeXgV4TDQAtrHn8lvXY.mft
Manifest number: 4A
Signing time: Mon 27 Jul 2026 06:01:07 +0000
Manifest this update: Mon 27 Jul 2026 06:01:07 +0000
Manifest next update: Tue 28 Jul 2026 06:01:07 +0000
Files and hashes: 1: Li0SmltLCeXgV4TDQAtrHn8lvXY.crl (hash: JGgyURpfJCK9Qs1TFPPqc/Mdt+JVmnVFDKUUraVGDRg=)
2: onHVGrE6UnVXJJ7tw9yi2jnpAKA.roa (hash: I7AFUur2ROEZxmpIxbJw3fqUyHF2B3umsxduJVcLuKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/83215a-3d8e-4d4d-b361-811f6da8e852/1/Li0SmltLCeXgV4TDQAtrHn8lvXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/83215a-3d8e-4d4d-b361-811f6da8e852/1/Li0SmltLCeXgV4TDQAtrHn8lvXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Li0SmltLCeXgV4TDQAtrHn8lvXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:29:ac:f3:fb:10:5a:16:72:cf:40:8c:9c:ec:36:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e2d129a5b4b09e5e05784c3400b6b1e7f25bd76
Validity
Not Before: Jul 27 06:01:07 2026 GMT
Not After : Jul 28 06:01:07 2026 GMT
Subject: CN=de217efdb48b130a205d5693d7b8dc157d302593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:40:39:a8:9e:a9:bb:98:a3:41:99:90:cd:ad:
25:84:db:9d:6b:9b:62:b5:0b:ca:aa:35:a2:34:a3:
c6:70:cc:73:d6:0e:c1:f7:be:b8:f7:5b:81:16:d3:
52:f6:65:b6:1b:fb:38:49:53:0e:1f:18:b9:bd:90:
bc:0e:1d:32:24:a4:8a:c2:07:55:d6:d9:59:e1:5b:
30:3e:08:44:65:72:3d:11:73:31:1b:c3:c0:82:31:
dc:b6:a7:f2:7c:ee:e8:b8:2f:c0:ab:73:64:a1:40:
09:4b:fd:50:cb:15:66:67:69:a7:e5:c6:3d:f8:09:
40:f7:47:5f:f6:74:74:d6:d7:e3:75:a6:5d:f5:37:
6c:36:76:47:40:ed:05:c3:02:16:fb:b5:a1:e2:42:
6e:8b:ce:a7:c2:47:76:b5:de:54:e1:ff:43:17:9b:
e9:a6:c3:89:07:96:0f:a5:e9:9b:6c:a5:65:9a:e0:
ec:16:01:3d:b8:f7:a0:8e:19:5b:51:2a:83:fd:e1:
19:2b:72:e1:58:88:f2:d1:ba:8a:79:18:63:f5:5f:
aa:7d:a0:b4:55:c6:55:47:88:5e:80:ca:40:46:f4:
d0:07:fe:84:2f:5e:fa:22:8f:f5:10:57:5b:5b:9c:
b8:e2:cc:04:f0:9b:80:cb:b8:9d:7d:ae:a4:a9:82:
f3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:21:7E:FD:B4:8B:13:0A:20:5D:56:93:D7:B8:DC:15:7D:30:25:93
X509v3 Authority Key Identifier:
keyid:2E:2D:12:9A:5B:4B:09:E5:E0:57:84:C3:40:0B:6B:1E:7F:25:BD:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Li0SmltLCeXgV4TDQAtrHn8lvXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/83215a-3d8e-4d4d-b361-811f6da8e852/1/Li0SmltLCeXgV4TDQAtrHn8lvXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/83215a-3d8e-4d4d-b361-811f6da8e852/1/Li0SmltLCeXgV4TDQAtrHn8lvXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:f7:34:1d:1a:9f:88:01:55:ba:6f:61:52:1c:0d:1e:c6:8e:
31:42:0d:57:77:c0:07:fb:4f:f4:b2:4a:91:1a:68:49:38:ed:
f4:c8:a3:67:54:d9:6d:b5:a6:58:53:0c:84:62:b0:3e:0a:0e:
8d:93:66:29:4d:9e:e7:a2:f7:20:b1:1a:6d:c9:07:89:40:0c:
91:7c:a4:52:40:0c:24:fc:de:1b:f7:9f:21:85:08:97:bb:68:
09:7f:db:9f:af:9e:77:6b:d6:04:7e:46:20:07:53:b9:d8:17:
f7:a0:25:c2:ce:1f:9d:06:06:b6:2b:24:11:6b:f1:b8:58:ac:
9f:5f:38:d8:82:45:64:64:c3:1f:ce:17:d4:67:b0:02:34:f7:
51:16:25:32:72:3b:7c:c3:b3:88:68:dd:70:6b:b0:de:84:5c:
c1:4b:fb:37:e0:d3:61:29:7c:01:1c:b5:b3:5b:9e:ee:0e:39:
99:d2:03:cf:b0:95:c1:2e:2b:ef:64:40:fe:af:f2:ec:2e:91:
05:58:52:a4:0c:51:45:9f:d1:64:31:c5:dc:98:6c:02:87:4c:
b3:05:cf:25:65:16:40:ed:55:e1:63:13:40:e2:47:f8:2c:06:
05:82:65:91:c4:10:a9:3b:12:7d:d3:4c:d6:14:6c:a6:19:36:
f5:e4:27:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 07:49:45 2026 by rpki-client