Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/83215a-3d8e-4d4d-b361-811f6da8e852/1/Li0SmltLCeXgV4TDQAtrHn8lvXY.mft
File: Li0SmltLCeXgV4TDQAtrHn8lvXY.mft (raw, json)
Hash identifier: qAzbjfdMhW+FWzX4FKUCOdpFPZ8qSKv5Dl1WFjrayFw=
Subject key identifier: 73:8F:BB:C2:D8:27:BE:84:26:D5:13:85:DA:33:69:30:5E:69:49:08
Authority key identifier: 2E:2D:12:9A:5B:4B:09:E5:E0:57:84:C3:40:0B:6B:1E:7F:25:BD:76
Certificate issuer: /CN=2e2d129a5b4b09e5e05784c3400b6b1e7f25bd76
Certificate serial: 01A1DFBA40D5210FC3294B3285A672CBC123
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Li0SmltLCeXgV4TDQAtrHn8lvXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/83215a-3d8e-4d4d-b361-811f6da8e852/1/Li0SmltLCeXgV4TDQAtrHn8lvXY.mft
Manifest number: 0173
Signing time: Sun 15 Nov 2026 15:01:27 +0000
Manifest this update: Sun 15 Nov 2026 15:01:27 +0000
Manifest next update: Mon 16 Nov 2026 15:01:27 +0000
Files and hashes: 1: Li0SmltLCeXgV4TDQAtrHn8lvXY.crl (hash: ICXYrmEtVZHNtyYSObTM1XFTPXHa7nLhVCLp6rNXJ+k=)
2: onHVGrE6UnVXJJ7tw9yi2jnpAKA.roa (hash: I7AFUur2ROEZxmpIxbJw3fqUyHF2B3umsxduJVcLuKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/83215a-3d8e-4d4d-b361-811f6da8e852/1/Li0SmltLCeXgV4TDQAtrHn8lvXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/83215a-3d8e-4d4d-b361-811f6da8e852/1/Li0SmltLCeXgV4TDQAtrHn8lvXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Li0SmltLCeXgV4TDQAtrHn8lvXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:ba:40:d5:21:0f:c3:29:4b:32:85:a6:72:cb:c1:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e2d129a5b4b09e5e05784c3400b6b1e7f25bd76
Validity
Not Before: Nov 15 15:01:27 2026 GMT
Not After : Nov 16 15:01:27 2026 GMT
Subject: CN=738fbbc2d827be8426d51385da3369305e694908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:24:75:41:75:be:91:4a:a1:ce:30:ad:20:3b:
a7:7b:b0:28:4b:ce:26:5c:fc:67:5f:89:2b:07:ec:
32:31:93:d1:91:9f:24:1a:fc:9c:70:44:7a:bd:73:
6c:f1:0f:ff:9e:b1:43:6e:9a:fb:4f:c5:ba:7c:24:
69:39:2d:5a:31:50:bf:5d:28:8d:2d:d2:6c:63:b8:
4e:1b:49:f0:64:fb:ff:e7:d5:5c:ee:04:94:54:98:
33:dc:a9:f3:b9:46:e9:43:b0:db:b8:5f:47:8f:be:
07:5b:93:87:b9:d3:bf:cd:be:99:0d:2a:a0:3c:52:
51:4e:02:9f:07:a5:5c:c3:78:cc:75:f4:0b:da:b9:
26:db:5e:9d:4b:8f:d1:31:23:64:fb:e7:67:b7:80:
55:16:20:bf:5c:4b:54:c6:17:1b:1b:57:0a:7e:55:
d0:87:de:ef:aa:b8:2d:db:2f:1d:ed:c1:78:b0:6b:
5b:5c:33:ea:cb:31:1f:73:66:2f:ea:6a:e8:59:38:
c0:55:e2:cb:5c:f1:be:b7:10:18:01:cd:79:d3:8f:
c3:4f:72:92:78:c3:77:5c:dc:5e:49:3c:2e:41:04:
dc:5f:3c:47:99:42:ed:15:12:a7:23:bb:69:7d:7c:
aa:09:fe:53:f7:f9:2d:3e:9e:fb:7c:d7:c8:55:d1:
7a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:8F:BB:C2:D8:27:BE:84:26:D5:13:85:DA:33:69:30:5E:69:49:08
X509v3 Authority Key Identifier:
keyid:2E:2D:12:9A:5B:4B:09:E5:E0:57:84:C3:40:0B:6B:1E:7F:25:BD:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Li0SmltLCeXgV4TDQAtrHn8lvXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/83215a-3d8e-4d4d-b361-811f6da8e852/1/Li0SmltLCeXgV4TDQAtrHn8lvXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/83215a-3d8e-4d4d-b361-811f6da8e852/1/Li0SmltLCeXgV4TDQAtrHn8lvXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:f0:56:b5:5b:2a:d3:a5:da:f1:fc:b5:d0:da:73:15:70:05:
30:66:b9:37:cf:be:f4:f4:13:8f:c2:97:b4:b5:f4:22:72:7a:
93:38:4c:bc:1a:f9:c7:83:62:e4:6b:f1:e0:bf:3f:0d:ba:33:
56:c3:b2:12:74:08:c2:fe:85:ab:49:e3:4e:8d:06:3d:a3:3e:
e2:64:6d:29:c2:e7:6e:97:35:b6:45:87:f0:f4:f0:1b:29:ce:
88:db:74:8f:e1:ce:46:4c:e3:42:e6:82:c5:4d:dc:1f:92:f8:
1b:ce:8d:a0:04:68:cf:1a:71:f5:cf:d2:40:9d:b6:f8:fe:71:
e6:e4:aa:59:4d:a3:22:a0:0d:d3:c8:be:66:f7:b0:38:9a:9a:
c3:9d:67:1a:91:af:6a:71:e6:f0:45:1d:43:28:af:f7:01:c9:
61:7e:08:83:b6:17:78:87:ce:5a:eb:0c:6f:95:7e:6f:bf:8e:
d3:cf:ab:c7:c2:3a:94:82:03:14:fa:60:08:33:e3:e2:f5:05:
68:21:f4:bf:82:3a:5d:9f:fd:60:ed:e3:15:48:85:42:14:f1:
a5:80:ba:a7:c2:3b:67:00:96:ad:c6:d4:b2:75:94:87:42:36:
3c:a2:03:cc:b3:ff:f1:c6:79:ff:fc:39:02:e9:68:02:92:b6:
73:ba:f6:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:38:04 2026 by rpki-client