Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.mft
File: LI5SR1LthVF1oBQSyzfEqeTbYXA.mft (raw, json)
Hash identifier: MPiUQYRvgHTXxBVeDGupvuyHdIEy5J3cYBzp5lzISk8=
Subject key identifier: B6:19:85:63:36:11:FC:6D:FB:ED:87:A7:BE:11:A0:A6:65:75:0A:83
Authority key identifier: 2C:8E:52:47:52:ED:85:51:75:A0:14:12:CB:37:C4:A9:E4:DB:61:70
Certificate issuer: /CN=2c8e524752ed855175a01412cb37c4a9e4db6170
Certificate serial: 019D29CDE8004C00CC8E9DA9A4B178B9FFF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LI5SR1LthVF1oBQSyzfEqeTbYXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 11:00:53 +0000
Manifest this update: Thu 26 Mar 2026 11:00:53 +0000
Manifest next update: Fri 27 Mar 2026 11:00:53 +0000
Files and hashes: 1: LI5SR1LthVF1oBQSyzfEqeTbYXA.crl (hash: ei1W22Xn1QX9b0yv9KBXTsGv66XE/PjeVsc4NrkM9z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LI5SR1LthVF1oBQSyzfEqeTbYXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 11:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:cd:e8:00:4c:00:cc:8e:9d:a9:a4:b1:78:b9:ff:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c8e524752ed855175a01412cb37c4a9e4db6170
Validity
Not Before: Mar 26 11:00:53 2026 GMT
Not After : Mar 27 11:00:53 2026 GMT
Subject: CN=b61985633611fc6dfbed87a7be11a0a665750a83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c9:c9:6e:10:c6:55:49:db:b9:fc:a0:c5:cd:
33:24:f8:07:e2:76:f9:06:73:32:e9:44:35:57:de:
94:a2:a3:d6:07:af:aa:a2:a5:e9:da:1d:75:7a:4f:
e3:55:9e:1e:f1:2d:cb:6a:75:e0:ea:64:ed:7c:25:
dd:18:a0:ae:5e:23:ec:d0:cf:75:ef:df:07:4a:82:
94:06:f6:25:34:84:6b:e4:19:1b:d1:06:62:22:18:
2e:89:c1:93:a6:94:81:28:ed:89:f0:f5:ca:c0:9f:
5f:0f:6e:ad:25:fa:19:fe:72:7d:1a:1c:0e:a9:3f:
05:0d:78:1a:0e:42:16:68:07:b7:d1:dd:0a:2f:c4:
e8:2e:67:a0:d2:1f:c1:5f:28:af:8d:b9:3e:7d:f2:
17:6c:14:15:07:2b:e9:0d:b8:37:da:76:a5:e0:ed:
c1:bd:ce:5c:cf:ef:0d:95:4c:4c:d2:b0:d5:c5:28:
84:5b:f1:0b:44:d5:0b:99:f7:a9:b1:4f:c8:92:6b:
8b:dd:a2:97:8a:46:88:0f:c2:b0:fd:ef:00:da:7b:
ec:97:6f:0f:52:93:7c:27:dd:31:b6:b2:30:94:0e:
94:30:9f:c5:6f:f1:90:b3:f7:6a:5f:17:df:d2:00:
1c:38:0b:6f:f0:7c:6b:5f:39:ae:39:29:e1:36:ba:
19:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:19:85:63:36:11:FC:6D:FB:ED:87:A7:BE:11:A0:A6:65:75:0A:83
X509v3 Authority Key Identifier:
keyid:2C:8E:52:47:52:ED:85:51:75:A0:14:12:CB:37:C4:A9:E4:DB:61:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LI5SR1LthVF1oBQSyzfEqeTbYXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:25:51:4b:2c:b8:a8:41:a7:b7:ca:6c:c8:c7:eb:2c:2d:a8:
84:f6:2a:6f:ca:79:29:12:86:27:ea:3d:4a:95:89:96:cf:ad:
56:cb:18:9c:97:da:74:72:be:31:23:7c:8d:47:67:98:c0:90:
09:5d:1f:83:2b:db:28:b0:be:8e:24:b7:19:e0:0e:61:87:a5:
d0:d7:8b:09:e2:f8:6d:cf:43:d5:fb:c3:fa:aa:64:69:18:72:
e2:b5:fe:67:f7:45:5f:9c:e5:da:ee:87:85:30:bb:c3:4a:bf:
63:88:d1:69:ee:ce:86:03:e9:06:df:11:82:01:8e:13:fd:92:
ee:be:3e:28:e2:0a:c8:4a:3e:45:59:d0:68:41:eb:af:90:83:
93:7a:e1:16:01:f1:a6:b9:0c:48:1d:f7:82:fb:e5:3a:06:64:
75:32:2a:2a:91:f4:e5:0a:ed:f1:04:cf:e9:a7:7e:07:ac:a7:
ee:69:67:f7:db:e8:5c:b0:cc:56:f5:0f:1f:53:c6:04:84:6a:
ce:17:1b:b8:ab:f0:f8:c7:0e:fd:7c:8b:ad:e1:0b:34:f2:aa:
95:ce:b5:60:91:48:d6:f4:d8:dd:0b:aa:7f:7f:19:d3:59:75:
78:45:7b:76:e0:05:b2:12:b3:6e:d2:07:e0:3d:bf:f5:9f:11:
31:48:fc:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:15:29 2026 by rpki-client