Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.mft
File: li68oqtiGOHxrgaHwxREVP1dmWs.mft (raw, json)
Hash identifier: 2TzAMFNRGID+HXHQhY2vgRoOq+rqy3qsl4VjDHALkMg=
Subject key identifier: 62:64:01:89:32:3C:AA:FC:59:F4:FC:49:70:B8:72:9B:75:EE:46:C0
Authority key identifier: 96:2E:BC:A2:AB:62:18:E1:F1:AE:06:87:C3:14:44:54:FD:5D:99:6B
Certificate issuer: /CN=962ebca2ab6218e1f1ae0687c3144454fd5d996b
Certificate serial: 019D26CD485D86D54E9678499ADCB71974A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/li68oqtiGOHxrgaHwxREVP1dmWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.mft
Manifest number: 1817
Signing time: Wed 25 Mar 2026 21:01:20 +0000
Manifest this update: Wed 25 Mar 2026 21:01:20 +0000
Manifest next update: Thu 26 Mar 2026 21:01:20 +0000
Files and hashes: 1: li68oqtiGOHxrgaHwxREVP1dmWs.crl (hash: VoMZdKC9atXTpdEQrEkMR46E+6IWI+D/vzfl0CT5bkk=)
2: oHMS8ZGj-fNJgkWpYzSGR7WlyE0.roa (hash: iagyKqdH+vp6N5HOrboxhsVEDIapiFjNbJ5/XngCFtY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/li68oqtiGOHxrgaHwxREVP1dmWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:48:5d:86:d5:4e:96:78:49:9a:dc:b7:19:74:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962ebca2ab6218e1f1ae0687c3144454fd5d996b
Validity
Not Before: Mar 25 21:01:20 2026 GMT
Not After : Mar 26 21:01:20 2026 GMT
Subject: CN=62640189323caafc59f4fc4970b8729b75ee46c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:57:05:83:e3:ce:da:1e:e6:31:6f:58:4e:98:
3d:b1:d4:71:90:65:1c:51:f7:ac:e4:e3:53:07:bc:
d9:af:26:aa:f0:16:23:62:84:e1:10:25:d4:be:79:
07:63:ce:0f:84:aa:08:75:4e:11:8a:60:fb:2f:f4:
13:36:20:03:a0:34:cd:e3:66:f1:94:40:f3:7c:49:
eb:14:0e:27:86:63:d3:66:3d:d2:a3:2a:67:c1:5f:
89:ab:4f:f7:99:48:b1:e7:5c:c7:09:c9:c5:dc:a9:
95:73:bc:c3:c8:57:8f:25:13:37:46:68:64:a5:18:
73:ef:22:a4:29:22:4e:0f:2d:e0:9d:f2:db:0a:c4:
33:d0:37:85:e7:b5:0c:be:ec:bc:49:25:30:a6:d2:
0e:68:0e:49:73:1f:1b:38:72:e3:d1:80:c1:b3:f6:
2b:58:a4:19:04:22:b7:4f:d1:d2:22:73:51:46:65:
9d:cf:6f:ec:39:d4:97:e5:27:7e:1c:0f:43:c9:7f:
41:31:60:4f:a8:9d:e5:c4:6a:91:1a:37:d3:85:81:
83:af:a1:e4:98:94:d7:18:e6:66:26:4a:6b:2c:f4:
56:e8:3f:67:76:b8:43:55:2c:cf:02:b9:d3:64:72:
b6:26:ea:f6:6a:a2:8b:e3:7a:e6:00:7c:b8:1e:f8:
22:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:64:01:89:32:3C:AA:FC:59:F4:FC:49:70:B8:72:9B:75:EE:46:C0
X509v3 Authority Key Identifier:
keyid:96:2E:BC:A2:AB:62:18:E1:F1:AE:06:87:C3:14:44:54:FD:5D:99:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/li68oqtiGOHxrgaHwxREVP1dmWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:8c:55:09:d0:92:ca:68:29:5d:a5:55:22:19:92:a4:97:82:
54:de:6e:03:f8:5e:a0:21:52:75:f3:66:ef:95:6d:55:93:28:
7c:0c:ba:af:96:89:6c:0b:8a:4f:05:3a:d4:c3:c4:3b:f1:4f:
99:a0:35:fb:cc:21:11:e9:b1:2a:a9:00:ec:a1:eb:9a:75:10:
82:e8:d4:48:ca:5b:c2:c4:4a:09:02:47:d5:80:17:ed:cd:fa:
b5:2a:aa:a6:1f:47:f6:a5:c6:e7:86:64:d7:02:82:20:8b:ec:
68:f6:de:5b:45:06:37:ce:f2:0e:90:a5:37:63:95:80:49:4e:
f6:ee:f4:10:0c:be:a5:dd:86:2c:18:68:e1:72:e9:32:c9:ab:
f8:a8:c6:f9:7f:7a:bc:3c:3d:1d:b0:ea:46:36:a8:ba:bc:a2:
e6:e4:f5:3b:ed:e2:5d:97:ac:14:c3:e6:30:ed:b7:8d:6d:a2:
fe:fc:92:47:1f:2f:c0:12:00:68:17:1f:50:5c:24:81:c3:c3:
cf:a3:72:ac:ad:17:84:c4:6f:ab:9e:79:c8:8e:29:e0:70:db:
57:56:45:1b:c0:93:a9:09:88:45:50:0b:a7:79:55:ef:f7:7a:
72:d9:e9:82:fe:d8:92:89:1b:82:62:34:c3:6c:ec:52:eb:c5:
e2:b0:0a:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzUhdhtVOlnhJmty3GXSnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2MmViY2EyYWI2MjE4ZTFmMWFlMDY4N2MzMTQ0NDU0ZmQ1
ZDk5NmIwHhcNMjYwMzI1MjEwMTIwWhcNMjYwMzI2MjEwMTIwWjAzMTEwLwYDVQQD
Eyg2MjY0MDE4OTMyM2NhYWZjNTlmNGZjNDk3MGI4NzI5Yjc1ZWU0NmMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVcFg+PO2h7mMW9YTpg9sdRxkGUc
Ufes5ONTB7zZryaq8BYjYoThECXUvnkHY84PhKoIdU4RimD7L/QTNiADoDTN42bx
lEDzfEnrFA4nhmPTZj3SoypnwV+Jq0/3mUix51zHCcnF3KmVc7zDyFePJRM3Rmhk
pRhz7yKkKSJODy3gnfLbCsQz0DeF57UMvuy8SSUwptIOaA5Jcx8bOHLj0YDBs/Yr
WKQZBCK3T9HSInNRRmWdz2/sOdSX5Sd+HA9DyX9BMWBPqJ3lxGqRGjfThYGDr6Hk
mJTXGOZmJkprLPRW6D9ndrhDVSzPArnTZHK2Jur2aqKL43rmAHy4HvgiswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGJkAYkyPKr8WfT8SXC4cpt17kbAMB8GA1UdIwQY
MBaAFJYuvKKrYhjh8a4Gh8MURFT9XZlrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGk2OG9xdGlHT0h4cmdhSHd4UkVWUDFkbVdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy81NjBhYzYtMTk0Zi00YjFiLWI1YWMt
ZmQ4N2I3MzM1OTU1LzEvbGk2OG9xdGlHT0h4cmdhSHd4UkVWUDFkbVdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy81NjBhYzYtMTk0Zi00YjFiLWI1YWMtZmQ4N2I3MzM1OTU1
LzEvbGk2OG9xdGlHT0h4cmdhSHd4UkVWUDFkbVdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtIxVCdCS
ymgpXaVVIhmSpJeCVN5uA/heoCFSdfNm75VtVZMofAy6r5aJbAuKTwU61MPEO/FP
maA1+8whEemxKqkA7KHrmnUQgujUSMpbwsRKCQJH1YAX7c36tSqqph9H9qXG54Zk
1wKCIIvsaPbeW0UGN87yDpClN2OVgElO9u70EAy+pd2GLBho4XLpMsmr+KjG+X96
vDw9HbDqRjaouryi5uT1O+3iXZesFMPmMO23jW2i/vySRx8vwBIAaBcfUFwkgcPD
z6NyrK0XhMRvq555yI4p4HDbV1ZFG8CTqQmIRVALp3lV7/d6ctnpgv7YkokbgmI0
w2zsUuvF4rAK6g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:48 2026 by rpki-client