Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft
File: Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft (raw, json)
Hash identifier: Ictv6ggC2AHBWY0JJKZ70Oijz4gb+gXv/XNwLCQT8O4=
Subject key identifier: 8E:EA:BF:80:AF:C4:BF:34:D8:1C:2F:D5:E7:34:2B:91:FE:8E:48:F5
Authority key identifier: 2E:2F:B4:44:6B:97:F4:E0:C2:A9:55:8D:D9:9D:AC:CB:F2:9E:38:06
Certificate issuer: /CN=2e2fb4446b97f4e0c2a9558dd99daccbf29e3806
Certificate serial: 01A0D501D74AEE38127F6D391B2093026E49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft
Manifest number: 04BF
Signing time: Thu 24 Sep 2026 20:01:02 +0000
Manifest this update: Thu 24 Sep 2026 20:01:02 +0000
Manifest next update: Fri 25 Sep 2026 20:01:02 +0000
Files and hashes: 1: Li-0RGuX9ODCqVWN2Z2sy_KeOAY.crl (hash: XU50qJs1BgIsCDLzCGlk5KYFS5y4Pm8NskomsTrZqqY=)
2: aeKNaD6uMJiw1mInBrVnH3hu2rM.roa (hash: 2dAhInK00WGRR5RlwdxiRxeThK0keHj6GNSl0+Y8Gsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 20:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:01:d7:4a:ee:38:12:7f:6d:39:1b:20:93:02:6e:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e2fb4446b97f4e0c2a9558dd99daccbf29e3806
Validity
Not Before: Sep 24 20:01:02 2026 GMT
Not After : Sep 25 20:01:02 2026 GMT
Subject: CN=8eeabf80afc4bf34d81c2fd5e7342b91fe8e48f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:db:65:06:84:96:37:7f:48:47:41:b5:88:d4:
8a:cf:01:b3:b0:a4:5d:dc:c8:44:3a:0c:e9:2a:64:
a8:17:85:d9:ec:c1:91:e9:f5:bb:80:86:f4:82:e4:
e9:1b:bc:ee:53:64:56:7f:7b:f2:a5:1c:3f:6c:d9:
1d:25:9b:f6:4d:14:cb:29:7d:7c:79:ea:83:3f:40:
20:79:5d:eb:a6:ce:6f:a5:3d:a6:f0:32:81:92:40:
08:3a:60:ac:30:28:31:cf:ea:06:df:0c:f6:57:0b:
e4:89:1b:c1:c3:c4:9f:35:c7:29:b7:db:63:1f:39:
bb:ef:67:cc:59:4d:ce:7a:48:56:95:39:ac:e1:0c:
ff:9d:49:68:13:f2:87:c7:cf:8c:aa:24:e7:fd:47:
5e:eb:f3:4f:54:87:9b:6c:95:16:e2:83:e2:42:e0:
60:ba:b0:9f:a2:5b:76:8c:21:f9:80:78:ec:46:49:
85:8b:26:c1:3d:62:db:22:c1:6f:cb:b4:9d:03:92:
be:d3:02:8a:02:c1:42:5f:91:82:43:97:c0:ed:3b:
c3:79:b2:e3:03:d6:3a:f4:b5:7a:7a:55:40:c9:77:
85:b0:87:3e:d7:7c:d8:96:f3:07:f9:3b:cc:00:df:
17:52:24:f1:05:cf:ec:b1:2b:64:f6:30:8a:d2:a1:
d9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:EA:BF:80:AF:C4:BF:34:D8:1C:2F:D5:E7:34:2B:91:FE:8E:48:F5
X509v3 Authority Key Identifier:
keyid:2E:2F:B4:44:6B:97:F4:E0:C2:A9:55:8D:D9:9D:AC:CB:F2:9E:38:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:1e:0f:9d:71:50:e2:55:55:41:fc:9c:28:d8:a1:4a:78:cd:
58:aa:78:9a:86:83:72:d7:62:45:04:6c:0e:6d:9b:89:16:9f:
ee:1c:21:62:17:04:9e:14:9d:4c:20:e2:24:84:40:83:02:03:
e5:e6:73:f8:0e:d3:d4:04:21:90:1f:27:1d:da:c4:dd:1d:6b:
50:00:94:2a:91:69:44:b9:17:89:d2:5c:8c:83:95:4f:f9:a2:
c0:f5:28:d6:78:ea:2e:64:4e:95:ce:32:c3:1d:92:be:6d:0a:
f9:c3:3c:51:54:55:e4:ad:a3:d4:4d:b3:64:56:dd:e1:6b:2e:
4b:89:5e:68:44:93:0e:41:f2:46:a1:f9:90:49:6c:18:1e:44:
82:ed:fe:ac:35:1b:a7:09:d3:90:56:21:42:3a:9a:a1:51:10:
85:d0:a4:05:97:8a:29:b6:6c:3c:c5:0b:87:12:a2:63:8d:45:
ac:66:6e:92:65:f3:c8:8a:fc:9c:3e:67:15:07:2b:01:bd:d6:
52:c2:53:b7:90:11:04:7c:10:98:10:c2:41:1a:c3:9e:58:79:
21:00:ac:76:a0:45:e5:8d:83:a7:10:76:89:31:43:d8:87:36:
88:ac:f0:51:75:b9:ff:74:90:d8:43:d3:64:70:3b:c2:c0:15:
9a:1b:da:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:43:44 2026 by rpki-client