Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.mft
File: Li-E9VWmZqoMBKj759wZEAdfVlg.mft (raw, json)
Hash identifier: J6zrX15CSzRbjQAoBkSyUCt+07HcwnNYkswUDFFuYxY=
Subject key identifier: FF:E1:FD:14:0F:70:AA:DE:92:E9:8F:2F:F6:3B:10:EF:7C:AB:DC:AC
Authority key identifier: 2E:2F:84:F5:55:A6:66:AA:0C:04:A8:FB:E7:DC:19:10:07:5F:56:58
Certificate issuer: /CN=2e2f84f555a666aa0c04a8fbe7dc1910075f5658
Certificate serial: 019D382E125384D1D39FF6D8C61E3502C1A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Li-E9VWmZqoMBKj759wZEAdfVlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 06:00:36 +0000
Manifest this update: Sun 29 Mar 2026 06:00:36 +0000
Manifest next update: Mon 30 Mar 2026 06:00:36 +0000
Files and hashes: 1: Li-E9VWmZqoMBKj759wZEAdfVlg.crl (hash: NIGUkle+d1FQeHlqUa8z9Z+BlYZPySxm8XssrXOlack=)
2: vTU8eDNVEo3qFy_xToMGPXkw-Zo.roa (hash: /OpEMA+vjnSrbNhb5S52wsTvUT1f0OuMQ9Pxy+EXh7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Li-E9VWmZqoMBKj759wZEAdfVlg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:12:53:84:d1:d3:9f:f6:d8:c6:1e:35:02:c1:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e2f84f555a666aa0c04a8fbe7dc1910075f5658
Validity
Not Before: Mar 29 06:00:36 2026 GMT
Not After : Mar 30 06:00:36 2026 GMT
Subject: CN=ffe1fd140f70aade92e98f2ff63b10ef7cabdcac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:26:da:67:b1:bf:28:c2:74:4f:7c:cd:4b:ee:
ae:43:aa:24:24:cc:ef:01:44:b5:06:f3:c5:87:5c:
5b:4f:e5:b8:f1:13:e2:a5:76:cf:68:0f:33:85:fd:
ab:a0:bf:5f:bd:8a:08:7f:c5:2c:81:1d:ce:07:39:
9e:f2:c4:5b:6d:5c:49:9d:01:b5:36:c2:6f:b6:12:
0e:28:dd:95:80:48:c6:05:df:82:83:65:be:e7:28:
c6:c7:90:df:fe:cf:6b:09:39:08:96:ee:c6:d4:d3:
45:aa:2f:5a:67:73:8b:3b:82:9b:18:62:db:45:2a:
2c:8a:7b:23:c9:dd:94:f9:47:15:15:62:f4:83:d9:
9b:4c:54:e8:8e:6a:2c:8f:44:17:dd:fa:6f:d5:7b:
4d:83:b8:05:aa:7d:58:23:bb:2a:04:3b:d9:b5:36:
20:b7:36:f6:26:f0:a9:06:56:d6:26:97:19:ab:5c:
11:64:f0:43:3e:73:4e:00:14:d0:4e:ae:a6:0d:0c:
60:d5:69:0a:7a:4f:44:1d:2b:e1:fc:d2:93:79:aa:
4a:d8:0e:38:2f:87:72:74:e3:a8:1b:dc:b6:20:0f:
ad:ef:26:63:0f:70:0e:10:af:af:59:c2:17:ea:52:
1f:d3:0e:f5:79:ed:54:23:0d:c7:9e:5b:8a:df:e5:
38:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E1:FD:14:0F:70:AA:DE:92:E9:8F:2F:F6:3B:10:EF:7C:AB:DC:AC
X509v3 Authority Key Identifier:
keyid:2E:2F:84:F5:55:A6:66:AA:0C:04:A8:FB:E7:DC:19:10:07:5F:56:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Li-E9VWmZqoMBKj759wZEAdfVlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:e3:b4:fb:af:97:e8:dd:eb:9c:cb:2b:5b:9c:ab:34:41:d7:
1d:4b:f0:54:a6:35:09:05:f1:b0:6d:e1:4b:0c:dc:e9:02:47:
a6:be:f8:34:27:3a:bd:7e:6d:42:fb:bf:fd:f9:1e:ce:c1:84:
9f:2a:7a:19:c5:8c:6b:fd:0d:e2:ac:f6:9f:fa:c1:b4:0e:e0:
e2:66:8d:6f:6b:d0:cd:5c:ce:64:45:17:6f:51:17:17:92:5a:
4d:c9:e2:77:c0:b9:ab:ce:1f:b1:76:6c:0a:d0:2c:71:2f:3d:
79:f4:31:48:68:27:aa:a7:e8:bf:ab:c2:15:a5:89:c7:af:29:
48:8f:0b:41:b5:a1:9f:26:5e:8d:12:60:b4:40:85:27:35:12:
42:2f:40:c1:7a:cc:9c:36:b7:19:ed:b1:65:e6:6b:6b:0f:7d:
3a:b6:e8:c3:e3:61:ad:a9:bf:9f:0e:7b:02:df:c1:4f:a5:91:
f8:2b:06:a8:06:37:0b:cf:75:d8:eb:e6:14:4b:be:c8:66:7c:
53:a1:a0:ed:bd:a2:79:6f:75:09:ad:0e:d0:48:18:51:75:df:
df:4b:32:3a:df:dd:f9:93:db:f4:e4:83:88:c0:8c:4a:94:fc:
99:e9:7c:a1:74:c7:60:3b:2a:f2:46:08:09:c9:9f:a9:5c:4f:
59:85:77:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:05 2026 by rpki-client