Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
File: LI-oUz3MgguhrW-ysvAWEBBTHbk.mft (raw, json)
Hash identifier: Uq25y/HAhP2qPGCcwLp+I2mLVZnVGsS2+PRF+ocueAo=
Subject key identifier: E5:82:3D:92:C2:AD:B7:55:DC:5A:3A:8F:C2:B9:81:D4:38:60:BD:01
Authority key identifier: 2C:8F:A8:53:3D:CC:82:0B:A1:AD:6F:B2:B2:F0:16:10:10:53:1D:B9
Certificate issuer: /CN=2c8fa8533dcc820ba1ad6fb2b2f0161010531db9
Certificate serial: 019F90C808F964D59A75F0A6EA9F10730ED0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
Manifest number: 0BC7
Signing time: Thu 23 Jul 2026 21:00:56 +0000
Manifest this update: Thu 23 Jul 2026 21:00:56 +0000
Manifest next update: Fri 24 Jul 2026 21:00:56 +0000
Files and hashes: 1: CMpz6Z0ZjbzrsumthPk2h0kU714.roa (hash: A3lBqvLRLb63Z2zkD/QiutUnKW5oZQPl9laeX3xcP64=)
2: LI-oUz3MgguhrW-ysvAWEBBTHbk.crl (hash: OcZWnmmDv39JZAIekzgqqyCWXLVIO1K3Lv7CkKaX5FI=)
3: PRW-hNh_LQ1tYJtEgFeANrexr4g.roa (hash: EtDY3iCkv6z8EfmjFrXYO7Uslfyf9DYjVpRw+acf/tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c8:08:f9:64:d5:9a:75:f0:a6:ea:9f:10:73:0e:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c8fa8533dcc820ba1ad6fb2b2f0161010531db9
Validity
Not Before: Jul 23 21:00:56 2026 GMT
Not After : Jul 24 21:00:56 2026 GMT
Subject: CN=e5823d92c2adb755dc5a3a8fc2b981d43860bd01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c5:ee:59:0d:25:28:4f:7d:cd:17:01:b8:6a:
fc:76:75:e8:00:a1:e8:18:26:3c:f6:c6:e7:f8:01:
43:7b:ab:2f:aa:ed:6f:4b:10:b3:53:04:ef:13:7d:
1c:0f:20:31:44:99:b6:95:e6:29:8c:13:0c:56:ff:
e6:9e:f1:07:ea:2a:63:da:c3:6d:c8:d1:2c:ab:3f:
40:f3:de:dd:21:11:4d:81:30:a5:86:d5:ef:78:a6:
d8:75:20:ef:f0:22:55:c2:e9:ef:94:10:a0:f6:07:
d0:20:46:92:db:5a:bd:58:2e:40:9c:51:68:25:94:
a2:6b:f1:fa:94:ce:f9:d8:31:17:aa:21:d6:bf:14:
2f:9a:6f:fe:47:a9:60:74:b0:d1:d0:82:e2:06:96:
04:b0:fe:b0:be:d2:2c:62:1e:7c:df:13:03:f1:1e:
aa:88:d9:71:76:cc:84:6e:8a:c9:87:5e:e2:04:66:
18:3b:9b:8f:1c:57:55:fe:cf:51:a6:80:1e:94:f4:
94:33:29:42:b5:bb:25:a5:b9:fe:e6:e5:92:d0:46:
f5:0b:f5:81:4f:e3:c5:f4:47:88:5a:12:cb:9e:ea:
42:53:e9:cb:98:c4:ee:df:ab:6a:56:b5:84:11:e2:
24:70:d4:d7:11:c0:7a:4d:06:70:36:cb:e7:e8:cd:
b4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:82:3D:92:C2:AD:B7:55:DC:5A:3A:8F:C2:B9:81:D4:38:60:BD:01
X509v3 Authority Key Identifier:
keyid:2C:8F:A8:53:3D:CC:82:0B:A1:AD:6F:B2:B2:F0:16:10:10:53:1D:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:7c:af:95:8b:5b:48:50:ab:4f:41:0d:b1:50:76:69:6d:66:
ff:7e:25:c6:b9:2d:70:22:41:3a:72:c1:c4:69:09:a7:a7:bd:
36:d0:83:fd:01:db:12:b4:86:7b:8c:52:57:96:51:87:cf:d9:
24:05:aa:96:18:3c:ad:5e:17:93:82:d9:e3:8a:81:88:73:1e:
af:9a:32:84:6a:ea:45:eb:6b:34:b5:c2:d5:5f:5a:0b:ac:ae:
7e:20:5b:19:96:73:82:5e:63:bb:22:a0:d1:26:08:c7:e3:6f:
e7:fe:ad:91:9e:53:97:3f:61:47:c5:25:d7:f4:0a:58:06:aa:
ee:9d:dc:06:18:2a:97:ca:bd:41:71:63:b0:36:51:e1:ed:48:
46:ab:5d:21:bf:ce:ec:c7:d2:93:3f:26:4a:b0:ef:f5:29:91:
0f:51:ae:41:f2:79:bd:c5:e6:a2:a3:85:80:1f:34:15:dc:8a:
f3:d9:8e:e7:eb:90:bb:4a:ab:d7:5b:cd:6a:0a:b3:23:89:56:
df:c1:e5:30:8d:82:c0:96:31:4b:f8:60:5a:d9:94:35:8a:c9:
54:19:46:80:6d:13:5d:23:34:c5:e3:0c:83:59:c8:14:4e:09:
8b:dc:16:cd:f1:c4:9a:2c:2d:dd:4f:31:9b:5e:81:90:d1:97:
a6:ef:d6:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:41:26 2026 by rpki-client