Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/e8c8ad-4410-414f-83a9-55b57616dc7a/1/LiYtdllpdVicNOYIbO6frynOdS4.mft
File: LiYtdllpdVicNOYIbO6frynOdS4.mft (raw, json)
Hash identifier: AsM/iGnSlJZ51iCN12IF1iLGvyxX/IIJPH2bG+IYj30=
Subject key identifier: 96:B0:88:7C:EB:39:ED:B2:93:51:75:3A:91:DA:6C:8B:04:80:31:C2
Authority key identifier: 2E:26:2D:76:59:69:75:58:9C:34:E6:08:6C:EE:9F:AF:29:CE:75:2E
Certificate issuer: /CN=2e262d76596975589c34e6086cee9faf29ce752e
Certificate serial: 01A0D79623D54E90845CB9DEB5BA7CDDF745
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiYtdllpdVicNOYIbO6frynOdS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/e8c8ad-4410-414f-83a9-55b57616dc7a/1/LiYtdllpdVicNOYIbO6frynOdS4.mft
Manifest number: 5D
Signing time: Fri 25 Sep 2026 08:02:16 +0000
Manifest this update: Fri 25 Sep 2026 08:02:16 +0000
Manifest next update: Sat 26 Sep 2026 08:02:16 +0000
Files and hashes: 1: LiYtdllpdVicNOYIbO6frynOdS4.crl (hash: XHekvA6Mmd1pLfAqFB1x2d7kVy5qcDroT6XtxpjeR1Y=)
2: qQb0atgavDxv8NkMeAdiHfzr7-Y.roa (hash: AViFVb7x3JIRqF+5JVs+5C5G47Fm5cKGzomGqfeSXyE=)
3: z8NnESnMm31CkiNiQFk0utGBdX0.roa (hash: arwsZJiyIecZlyuebzhSrVKYoD98u/qSY1idgg5RXrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/e8c8ad-4410-414f-83a9-55b57616dc7a/1/LiYtdllpdVicNOYIbO6frynOdS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/e8c8ad-4410-414f-83a9-55b57616dc7a/1/LiYtdllpdVicNOYIbO6frynOdS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LiYtdllpdVicNOYIbO6frynOdS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:96:23:d5:4e:90:84:5c:b9:de:b5:ba:7c:dd:f7:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e262d76596975589c34e6086cee9faf29ce752e
Validity
Not Before: Sep 25 08:02:16 2026 GMT
Not After : Sep 26 08:02:16 2026 GMT
Subject: CN=96b0887ceb39edb29351753a91da6c8b048031c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6b:65:89:0e:7b:8b:e0:93:e1:86:af:bd:3f:
fb:ae:9a:ca:bf:f7:b4:06:6b:aa:9a:71:eb:32:ce:
8d:9b:3b:dc:46:7b:8b:98:2e:6f:14:70:ea:3f:44:
8b:4a:73:e4:85:83:a5:f8:ed:e7:dc:f0:0f:44:ac:
be:bf:5a:f4:d9:3c:72:a6:85:5d:9c:e7:f9:66:82:
93:97:fd:f7:95:43:3e:ea:a8:f9:64:d2:33:b3:c0:
a6:f6:47:c2:dd:0d:cc:b6:05:e1:23:7c:06:e8:d1:
21:42:5c:1f:66:c8:c3:de:13:17:ba:21:62:78:e8:
ef:c1:8f:35:dd:e1:4e:4d:78:77:ac:c8:d3:e3:c0:
bd:6c:26:2c:9d:22:5a:13:41:ec:96:16:e5:c9:5d:
9e:37:58:17:58:22:2c:20:e6:55:e8:51:dc:dc:bc:
e5:68:5c:16:48:f8:94:62:98:f6:8b:4f:8a:2f:30:
96:76:85:81:91:ce:c2:35:25:84:f8:d2:8b:86:54:
21:98:49:81:f5:c6:4c:fb:a6:55:85:50:0b:a8:3e:
50:1e:e8:1f:4d:1e:4b:a5:72:3e:41:40:22:d2:a2:
45:97:02:4e:3e:bd:7a:b5:44:34:67:15:a9:89:65:
bb:f4:de:f3:51:7b:57:e6:69:e9:85:c7:74:93:71:
c9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:B0:88:7C:EB:39:ED:B2:93:51:75:3A:91:DA:6C:8B:04:80:31:C2
X509v3 Authority Key Identifier:
keyid:2E:26:2D:76:59:69:75:58:9C:34:E6:08:6C:EE:9F:AF:29:CE:75:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiYtdllpdVicNOYIbO6frynOdS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e8c8ad-4410-414f-83a9-55b57616dc7a/1/LiYtdllpdVicNOYIbO6frynOdS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e8c8ad-4410-414f-83a9-55b57616dc7a/1/LiYtdllpdVicNOYIbO6frynOdS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:fc:13:98:cf:25:c2:0d:54:4a:87:77:e7:36:4b:f5:ea:b6:
ab:a0:37:26:f0:2f:f1:7f:ed:f3:5b:f8:fc:25:c0:e6:70:f7:
a6:dc:d9:4b:9e:46:c2:27:7f:c7:81:b8:bb:df:e0:35:04:96:
01:94:67:3b:db:b2:86:d2:14:f7:22:46:9b:d2:71:81:9d:6d:
1e:3b:bc:93:5c:d9:a3:12:b1:33:45:79:43:0c:e5:7d:4f:1c:
19:e8:3e:b7:a8:93:c8:87:16:57:81:ea:c2:89:cf:47:61:fb:
52:f0:27:97:cf:10:98:f7:ed:a4:01:4d:31:0d:91:10:75:90:
91:cf:23:64:8a:42:5f:bb:90:8c:32:ca:bc:2c:d6:0f:71:1f:
98:1e:01:b8:cc:d8:54:ef:d9:60:6e:c7:9d:68:fc:e4:6a:51:
00:2d:03:90:24:6c:2d:b5:e2:62:27:e8:25:1b:07:79:b0:ee:
b9:6f:0a:ea:8e:2f:a3:0f:1e:bc:c2:5c:69:a5:83:51:2b:fc:
d8:0e:cb:5d:08:63:2a:31:76:0d:0f:5b:7e:33:1a:de:42:03:
e4:b3:a1:aa:f8:0e:4d:44:7f:4c:be:65:8a:56:17:c1:14:17:
b9:67:a1:3e:44:b8:cb:61:ec:18:53:8b:02:6d:0b:6c:67:26:
71:5a:a2:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:29:03 2026 by rpki-client