Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
File: LI-oUz3MgguhrW-ysvAWEBBTHbk.mft (raw, json)
Hash identifier: wkB5cLSHimNDBtKy0SJbhyJpCb2BmxY3hSfgKG/BG1E=
Subject key identifier: 82:E4:E5:78:C7:0B:12:A2:88:26:9B:BB:A6:D2:79:57:FA:04:27:0D
Authority key identifier: 2C:8F:A8:53:3D:CC:82:0B:A1:AD:6F:B2:B2:F0:16:10:10:53:1D:B9
Certificate issuer: /CN=2c8fa8533dcc820ba1ad6fb2b2f0161010531db9
Certificate serial: 01A0E0CF8C4BA892085FCE76615EF697B1D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
Manifest number: 0C75
Signing time: Sun 27 Sep 2026 03:01:33 +0000
Manifest this update: Sun 27 Sep 2026 03:01:33 +0000
Manifest next update: Mon 28 Sep 2026 03:01:33 +0000
Files and hashes: 1: CMpz6Z0ZjbzrsumthPk2h0kU714.roa (hash: A3lBqvLRLb63Z2zkD/QiutUnKW5oZQPl9laeX3xcP64=)
2: LI-oUz3MgguhrW-ysvAWEBBTHbk.crl (hash: ZLNurtutd+1Lk0QYsGtv1gyOPbQTfoUA1vwHghEVJzQ=)
3: PRW-hNh_LQ1tYJtEgFeANrexr4g.roa (hash: EtDY3iCkv6z8EfmjFrXYO7Uslfyf9DYjVpRw+acf/tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 03:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:cf:8c:4b:a8:92:08:5f:ce:76:61:5e:f6:97:b1:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c8fa8533dcc820ba1ad6fb2b2f0161010531db9
Validity
Not Before: Sep 27 03:01:33 2026 GMT
Not After : Sep 28 03:01:33 2026 GMT
Subject: CN=82e4e578c70b12a288269bbba6d27957fa04270d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:17:97:d9:3e:30:88:af:62:7a:27:86:9c:32:
8e:fe:8b:23:f8:7e:b6:7b:ec:b1:87:63:83:b1:6c:
e6:ba:6b:f8:f5:44:0a:86:e3:8f:fb:6e:30:9b:0c:
6e:99:a3:28:2e:16:e6:c1:d1:9f:ec:ac:4b:83:e4:
51:7f:32:af:8d:01:1e:a7:89:19:a7:69:4b:99:6c:
d2:61:fc:e2:d6:6a:d5:36:0c:3b:5f:b1:b8:8e:48:
b6:3d:b5:46:a4:f6:62:12:e7:90:b3:3d:5a:2f:fc:
c4:22:21:4b:d4:d3:41:c2:f2:04:17:13:c4:56:f4:
12:85:b8:05:b8:07:6c:f8:ab:2b:44:66:0a:c7:83:
80:62:c2:c0:b0:e3:ba:87:49:5e:ba:ac:2f:b8:30:
8d:17:a5:c5:ce:fd:2a:8c:50:bf:6e:19:a0:1f:8a:
d3:9d:59:8b:2e:b7:ad:f8:5c:24:0f:cb:f3:c4:78:
38:2e:67:bc:9d:0e:01:e3:71:a8:0c:8e:cb:95:1e:
90:e1:ad:ce:29:ec:96:10:70:5f:0c:73:a0:e4:5f:
f7:f6:27:b2:41:aa:26:0d:6c:4b:e2:57:3a:89:76:
29:74:97:5a:23:c4:1e:db:42:57:a0:f7:0f:51:3c:
ae:b7:55:c6:f1:2e:4c:23:76:27:ad:e1:49:5e:0d:
73:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:E4:E5:78:C7:0B:12:A2:88:26:9B:BB:A6:D2:79:57:FA:04:27:0D
X509v3 Authority Key Identifier:
keyid:2C:8F:A8:53:3D:CC:82:0B:A1:AD:6F:B2:B2:F0:16:10:10:53:1D:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:20:31:bf:ca:78:9e:e8:89:1b:88:0c:b9:7c:48:34:c4:11:
6e:af:0d:e0:18:47:55:56:95:9e:d3:f1:d7:80:f0:50:49:e9:
62:14:8f:23:d7:bc:cb:6f:8f:57:00:ee:5e:10:ce:2a:4b:0e:
f7:21:bd:3f:65:e5:2f:62:51:17:3b:21:b8:f0:c5:29:58:36:
fe:f5:1e:68:8c:73:4b:bc:ef:72:a7:12:32:30:ec:a8:65:59:
e3:be:c0:e4:22:e8:74:a1:e1:fd:6b:c0:19:c7:1f:a4:2b:52:
7c:71:ea:22:6d:06:84:31:82:f4:ff:93:06:cc:ab:ad:31:43:
89:e2:15:28:43:6c:dc:ca:e3:a9:b6:45:a7:da:3c:d1:7b:56:
f5:ba:1c:4a:fe:fc:43:6d:2e:f1:03:bd:68:a4:f2:49:83:19:
e1:ed:d4:7e:e5:b5:c8:a1:8c:07:b7:0e:7e:59:3f:39:78:30:
12:ae:92:71:81:49:13:4b:00:0b:47:dc:3e:47:77:19:4c:95:
19:40:60:53:d3:d3:a0:a3:8a:88:75:e6:ac:eb:b3:29:05:7a:
f8:f7:99:3d:2a:0e:6f:62:1c:cc:5e:6c:54:0c:86:85:36:dd:
34:c7:80:f1:ed:64:67:51:7d:e2:f0:c3:54:02:67:13:c9:40:
19:34:6a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 14:09:35 2026 by rpki-client