Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft
File: Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft (raw, json)
Hash identifier: LP4wyp1ClL2z+Csd36VqE8vCgRKUzI/7HFRANBDcY0A=
Subject key identifier: F1:FD:00:07:38:38:60:64:90:85:E1:BA:7C:5B:18:83:68:1C:3D:F6
Authority key identifier: 2E:2F:B4:44:6B:97:F4:E0:C2:A9:55:8D:D9:9D:AC:CB:F2:9E:38:06
Certificate issuer: /CN=2e2fb4446b97f4e0c2a9558dd99daccbf29e3806
Certificate serial: 019F946E3178B71C41306A3A97AA5BD6209B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft
Manifest number: 0419
Signing time: Fri 24 Jul 2026 14:01:17 +0000
Manifest this update: Fri 24 Jul 2026 14:01:17 +0000
Manifest next update: Sat 25 Jul 2026 14:01:17 +0000
Files and hashes: 1: Li-0RGuX9ODCqVWN2Z2sy_KeOAY.crl (hash: 3QLRTmyCsNrFKQKn67DNdY6MxLVIqR6C9He07rT2Y0U=)
2: aeKNaD6uMJiw1mInBrVnH3hu2rM.roa (hash: 2dAhInK00WGRR5RlwdxiRxeThK0keHj6GNSl0+Y8Gsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6e:31:78:b7:1c:41:30:6a:3a:97:aa:5b:d6:20:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e2fb4446b97f4e0c2a9558dd99daccbf29e3806
Validity
Not Before: Jul 24 14:01:17 2026 GMT
Not After : Jul 25 14:01:17 2026 GMT
Subject: CN=f1fd0007383860649085e1ba7c5b1883681c3df6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:91:b2:e4:96:d0:d4:71:6d:b6:59:38:ac:58:
cb:bc:7c:2c:cd:fc:18:90:11:9e:76:4a:28:09:04:
6d:f7:06:a7:e5:a5:1a:2c:ea:f3:cc:9f:c7:e1:ad:
cc:41:31:fb:6f:e7:36:92:71:48:49:93:0e:dc:c5:
fe:88:8e:ea:dd:16:f1:97:4a:82:47:7e:25:84:f8:
42:9b:0f:bc:8a:5e:06:9d:a9:58:26:fb:78:96:17:
a0:2b:d3:47:21:3c:e8:2d:ea:5c:be:95:f1:7c:5e:
79:99:6d:64:28:cc:1b:25:9c:be:6b:03:c2:41:eb:
89:34:32:62:61:70:0d:72:52:6c:5c:78:40:19:50:
09:82:29:46:87:36:6a:6c:6b:6e:c5:2b:86:ef:5a:
bd:9f:d5:83:33:87:06:01:cd:42:90:a7:b8:7a:42:
85:22:ce:04:31:f1:36:2a:29:15:8a:10:0d:76:1b:
9e:4f:f1:8f:6f:ad:9c:69:6a:8a:09:12:95:41:4f:
e6:3d:de:3f:1e:1e:47:e9:65:20:de:f3:3e:6d:37:
a4:29:b6:c4:2a:74:08:6b:84:67:f5:e3:c8:19:aa:
1c:e1:32:5b:9f:ec:e5:c2:ca:67:61:c9:f0:2d:48:
48:5f:88:f0:3e:58:11:76:cc:32:87:21:c0:75:e1:
81:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:FD:00:07:38:38:60:64:90:85:E1:BA:7C:5B:18:83:68:1C:3D:F6
X509v3 Authority Key Identifier:
keyid:2E:2F:B4:44:6B:97:F4:E0:C2:A9:55:8D:D9:9D:AC:CB:F2:9E:38:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:4b:d9:ce:45:3b:ed:b5:47:7f:53:b5:61:db:35:2a:66:85:
22:de:fe:46:06:64:fb:44:6b:16:df:40:38:67:13:e1:c3:d7:
e8:4e:60:20:d8:d2:ac:94:c8:bb:a5:95:c0:40:01:e8:a7:de:
cf:2e:6a:e3:95:85:5a:1f:ac:aa:5d:26:33:10:ce:52:1d:68:
a8:c4:88:ac:3b:01:fd:a8:62:89:61:b2:32:a5:0c:32:21:be:
1d:cf:93:16:62:f8:07:aa:99:55:19:7f:1c:f4:f4:64:b6:89:
9a:90:25:42:e4:8c:e1:77:ad:c6:c9:fc:47:62:c8:4f:10:a3:
c5:5b:18:9a:da:06:cb:92:18:21:62:44:54:3f:e2:81:8a:85:
84:c4:f8:bf:e3:cc:a6:cb:4b:4c:dc:99:a8:6a:01:fe:36:60:
eb:8f:b4:ab:32:eb:9e:2a:98:bc:f3:3b:9c:07:5d:b6:9f:48:
59:73:78:98:3e:8b:b0:56:56:0a:1b:69:64:4a:81:09:38:cf:
74:24:95:57:aa:36:34:bc:8b:03:0b:81:e0:5b:d5:0c:92:52:
10:9f:c6:09:e0:3c:a2:fa:ec:a0:ce:19:96:05:37:23:18:fc:
a3:2f:30:b7:50:28:54:29:7f:80:bd:5e:21:43:77:68:54:60:
6e:9b:49:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:53:13 2026 by rpki-client