Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
File: LI-oUz3MgguhrW-ysvAWEBBTHbk.mft (raw, json)
Hash identifier: OCczOSmJKKu1xtB7kZ8r7cyfmFMQV+wooWr+7qHHL/0=
Subject key identifier: 00:15:8B:EF:D4:21:06:9F:8D:AF:87:A4:0E:05:23:6D:A1:8B:8D:C2
Authority key identifier: 2C:8F:A8:53:3D:CC:82:0B:A1:AD:6F:B2:B2:F0:16:10:10:53:1D:B9
Certificate issuer: /CN=2c8fa8533dcc820ba1ad6fb2b2f0161010531db9
Certificate serial: 019E1DFE2CF8E792DFE36285C37EE2A1F83E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
Manifest number: 0B07
Signing time: Tue 12 May 2026 21:00:57 +0000
Manifest this update: Tue 12 May 2026 21:00:57 +0000
Manifest next update: Wed 13 May 2026 21:00:57 +0000
Files and hashes: 1: CMpz6Z0ZjbzrsumthPk2h0kU714.roa (hash: A3lBqvLRLb63Z2zkD/QiutUnKW5oZQPl9laeX3xcP64=)
2: LI-oUz3MgguhrW-ysvAWEBBTHbk.crl (hash: Bg3zAxpOe4HqsKpIABoEM+MGKbN1ZgdmEUHT3dFEBv4=)
3: PRW-hNh_LQ1tYJtEgFeANrexr4g.roa (hash: EtDY3iCkv6z8EfmjFrXYO7Uslfyf9DYjVpRw+acf/tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:2c:f8:e7:92:df:e3:62:85:c3:7e:e2:a1:f8:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c8fa8533dcc820ba1ad6fb2b2f0161010531db9
Validity
Not Before: May 12 21:00:57 2026 GMT
Not After : May 13 21:00:57 2026 GMT
Subject: CN=00158befd421069f8daf87a40e05236da18b8dc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d1:a9:01:fa:28:9e:c0:88:a3:d0:2f:70:da:
31:3a:98:0b:b2:93:b5:19:ce:cd:78:7c:14:00:d6:
ad:1b:08:b2:a0:fa:ed:82:36:32:23:4f:dd:bc:49:
b4:b7:de:a7:2f:dc:f8:5b:02:44:9c:15:df:ce:2b:
4e:17:3e:93:9c:12:ec:19:d6:3f:ef:ea:80:e0:4b:
7c:44:75:d8:8a:3c:1e:6b:c8:39:e1:30:29:e6:8e:
0d:3f:ab:da:fa:70:20:84:47:b4:96:4b:c9:b9:8f:
dc:53:93:42:8b:9c:85:d1:3c:08:63:f2:eb:7a:82:
40:83:ea:e1:6e:24:ea:4d:bc:02:ba:5e:e9:3a:2a:
6a:72:39:47:0f:a1:72:aa:df:29:13:8d:14:0b:3d:
bf:fa:88:a2:30:57:a8:0f:aa:5f:85:2b:d4:90:43:
42:56:13:92:76:25:6e:b7:10:bb:73:11:6e:0d:9a:
68:78:dc:2e:49:63:3d:37:f1:90:d6:e8:18:05:8b:
44:ef:4f:66:d9:83:ea:37:5c:f1:d9:ea:0a:8b:b0:
04:98:80:15:6b:2f:84:6a:f7:b7:40:fc:7b:16:a1:
52:d7:64:f7:7a:76:7e:f3:40:a4:2b:17:31:53:13:
3d:eb:c6:56:f9:83:98:54:9e:92:0b:22:04:ea:bb:
96:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:15:8B:EF:D4:21:06:9F:8D:AF:87:A4:0E:05:23:6D:A1:8B:8D:C2
X509v3 Authority Key Identifier:
keyid:2C:8F:A8:53:3D:CC:82:0B:A1:AD:6F:B2:B2:F0:16:10:10:53:1D:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:1b:02:ca:b9:d6:03:2f:da:32:52:25:a2:01:22:13:50:48:
83:d0:35:8d:ad:8c:98:28:f8:b5:ea:16:9d:70:4c:4c:49:ff:
52:ad:a0:28:81:10:06:66:84:bb:9f:77:30:fb:00:5f:c5:32:
c1:3d:ce:f4:81:c8:31:2e:76:8f:28:0b:fb:d3:04:99:20:16:
5d:20:77:9d:a8:f0:44:09:62:92:78:36:7f:58:5d:2c:04:7f:
4c:c9:b5:f8:c2:df:03:46:c9:0d:9e:58:c2:9d:29:07:eb:44:
7e:d6:31:01:05:9e:46:ec:c3:d1:e3:e4:d2:4d:e3:17:d0:f9:
52:b5:bd:1e:79:58:a3:59:11:47:d5:bb:57:85:eb:7a:6e:96:
13:7d:1a:5b:84:c9:33:f9:93:bf:fc:01:06:09:bb:8d:59:22:
b0:7e:21:ae:0c:30:17:3f:c8:2e:7e:77:35:fa:c4:fa:b8:ca:
e5:cf:4d:05:47:e1:a1:63:af:a6:5a:e2:60:b1:98:30:de:13:
ba:18:40:03:d3:70:6e:5a:27:f2:e3:5d:5f:58:48:72:da:c1:
e3:ca:50:75:c0:ed:4f:19:0f:67:9f:f4:a9:eb:a1:3d:5e:36:
88:05:16:d4:63:37:74:ce:84:e5:5f:d2:1e:31:04:7a:f8:d9:
07:79:a1:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:06:04 2026 by rpki-client