Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/32024d-d3e7-4ad0-8a91-3318504c7750/1/LI_zYU_QyKi36WPM8gw68IXius4.mft
File: LI_zYU_QyKi36WPM8gw68IXius4.mft (raw, json)
Hash identifier: t3V0ZKyqpqwJAkbZ4zE04roghKO+62gtWHAM5KN4iFQ=
Subject key identifier: C7:53:29:41:9E:A0:3C:79:C2:84:DA:0E:A5:C7:90:C5:B0:45:B7:D2
Authority key identifier: 2C:8F:F3:61:4F:D0:C8:A8:B7:E9:63:CC:F2:0C:3A:F0:85:E2:BA:CE
Certificate issuer: /CN=2c8ff3614fd0c8a8b7e963ccf20c3af085e2bace
Certificate serial: 019F8FECA9B76F25BD88453968C11ABF59C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LI_zYU_QyKi36WPM8gw68IXius4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/32024d-d3e7-4ad0-8a91-3318504c7750/1/LI_zYU_QyKi36WPM8gw68IXius4.mft
Manifest number: 0109
Signing time: Thu 23 Jul 2026 17:01:19 +0000
Manifest this update: Thu 23 Jul 2026 17:01:19 +0000
Manifest next update: Fri 24 Jul 2026 17:01:19 +0000
Files and hashes: 1: 10MlIdaB7FNbLaMDGR2pTyUhDNM.roa (hash: uJVs0I5nGDm0fMwDeKlKvP2NDCYTHKgILZ0u68qw/qM=)
2: LI_zYU_QyKi36WPM8gw68IXius4.crl (hash: fHkXZzR1M3FG0PVQgLhb8rGQ8nft/4DvSXcZsPQl4QE=)
3: MhcXZnTtDfYiJDVELcnkCFBBkXs.roa (hash: MmN60FYZ1eRqdDs1XAaIfFW9D0B2EiB8PeXLjNIcdRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/32024d-d3e7-4ad0-8a91-3318504c7750/1/LI_zYU_QyKi36WPM8gw68IXius4.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/32024d-d3e7-4ad0-8a91-3318504c7750/1/LI_zYU_QyKi36WPM8gw68IXius4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LI_zYU_QyKi36WPM8gw68IXius4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:a9:b7:6f:25:bd:88:45:39:68:c1:1a:bf:59:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c8ff3614fd0c8a8b7e963ccf20c3af085e2bace
Validity
Not Before: Jul 23 17:01:19 2026 GMT
Not After : Jul 24 17:01:19 2026 GMT
Subject: CN=c75329419ea03c79c284da0ea5c790c5b045b7d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f3:3a:24:a1:eb:9c:d1:fb:f6:ab:2d:bb:54:
e5:e3:8a:08:59:48:01:d8:8d:c2:4f:23:db:e4:9b:
22:f5:0a:3a:05:eb:5c:05:43:75:95:02:8a:1f:19:
aa:b1:66:d1:38:34:a5:41:af:e7:75:4f:70:26:cc:
ac:fe:b4:49:1c:87:7e:a1:97:98:7f:91:ec:bf:a3:
11:0e:af:37:ea:d1:b1:56:60:68:11:c8:ac:e5:79:
07:6c:b9:fe:44:5d:86:bb:53:9c:64:b8:fd:36:a3:
27:12:e9:41:f1:26:90:6f:28:ff:22:ce:81:00:13:
40:48:c5:da:2f:20:59:11:e5:7a:bd:0a:ad:86:1e:
c0:0d:c9:21:99:78:51:16:59:ba:d8:27:4f:61:b2:
66:94:78:f9:ea:e6:4e:15:6d:cc:b6:98:f0:50:74:
0d:5a:ee:c0:bf:eb:7c:85:e6:72:2b:98:64:6a:57:
d7:68:22:96:aa:03:d9:de:c7:84:1a:a6:cd:02:5c:
36:72:5c:c2:7e:21:cf:f3:2f:15:31:23:17:d1:da:
65:cf:63:96:7d:2c:8f:e1:05:07:13:45:62:90:cf:
20:e5:92:bf:12:8f:19:fc:ec:f9:53:98:73:6d:14:
f6:e6:26:9b:20:1f:b9:f8:55:6a:fc:19:26:99:94:
97:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:53:29:41:9E:A0:3C:79:C2:84:DA:0E:A5:C7:90:C5:B0:45:B7:D2
X509v3 Authority Key Identifier:
keyid:2C:8F:F3:61:4F:D0:C8:A8:B7:E9:63:CC:F2:0C:3A:F0:85:E2:BA:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LI_zYU_QyKi36WPM8gw68IXius4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/32024d-d3e7-4ad0-8a91-3318504c7750/1/LI_zYU_QyKi36WPM8gw68IXius4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/32024d-d3e7-4ad0-8a91-3318504c7750/1/LI_zYU_QyKi36WPM8gw68IXius4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:6e:1f:23:3a:09:45:82:b4:dd:38:9c:2e:82:73:ff:e5:eb:
2d:6d:f0:eb:20:02:bc:eb:06:d6:0e:e1:a6:51:e5:d0:25:90:
fe:d2:0d:24:70:f1:37:13:72:7f:98:08:ca:0c:94:f8:ff:f8:
3f:1f:38:a1:40:35:15:d1:17:2a:c4:28:1a:15:88:41:3a:f9:
46:a0:ef:00:73:27:ca:a1:78:fa:06:54:ba:87:90:b5:ba:f9:
92:11:a8:00:58:c3:a3:a8:f8:30:14:08:0d:e9:dd:ab:90:bb:
66:00:82:00:d0:5d:5e:ed:8b:ad:4c:7a:86:ef:ee:c9:08:70:
33:e7:04:c5:1b:8f:e8:81:ac:ad:ac:17:6a:8c:23:89:07:e2:
b2:af:a8:be:06:37:68:d1:dc:ce:95:b2:e5:5c:79:0f:0e:23:
c9:c1:75:18:bc:d6:17:4e:c6:04:8b:f7:16:87:0c:87:38:7a:
64:02:43:17:de:fa:67:3a:74:f0:13:c8:d1:3f:0c:c4:41:aa:
8d:5e:54:96:07:ba:9f:b8:16:e6:59:c9:2e:03:6a:83:92:7d:
7e:1c:24:e9:81:c8:b6:44:32:39:04:23:1f:72:1c:a6:1e:db:
40:6c:f8:6b:0f:3c:74:7c:d8:eb:30:29:8d:ef:32:56:40:0e:
b2:5c:9a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:45:17 2026 by rpki-client