Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.mft
File: Li9t2XmfpOoIT9VJ1xDGiW364pE.mft (raw, json)
Hash identifier: AIKWaQBGbLRCWD+WPacDdSEfchi+/C/pUP7+PQKEVM0=
Subject key identifier: A0:94:DD:EF:45:F5:D4:4E:AD:52:DA:1F:8F:6B:BB:B8:8D:30:92:5D
Authority key identifier: 2E:2F:6D:D9:79:9F:A4:EA:08:4F:D5:49:D7:10:C6:89:6D:FA:E2:91
Certificate issuer: /CN=2e2f6dd9799fa4ea084fd549d710c6896dfae291
Certificate serial: 019E1E6C471D72ACD497475F86C18F781AD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Li9t2XmfpOoIT9VJ1xDGiW364pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.mft
Manifest number: 0B53
Signing time: Tue 12 May 2026 23:01:13 +0000
Manifest this update: Tue 12 May 2026 23:01:13 +0000
Manifest next update: Wed 13 May 2026 23:01:13 +0000
Files and hashes: 1: Li9t2XmfpOoIT9VJ1xDGiW364pE.crl (hash: KzvyqvO38ytsGOtsv4wt6gANqmEqBhp9iEHK/MOTD7E=)
2: tOuyhld-AUyG32ylyMah8UxZ7mE.roa (hash: YUhhR6mZGZf9IfQta0epFj+lmVDPTWRRkPjuKNf8QT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Li9t2XmfpOoIT9VJ1xDGiW364pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:47:1d:72:ac:d4:97:47:5f:86:c1:8f:78:1a:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e2f6dd9799fa4ea084fd549d710c6896dfae291
Validity
Not Before: May 12 23:01:13 2026 GMT
Not After : May 13 23:01:13 2026 GMT
Subject: CN=a094ddef45f5d44ead52da1f8f6bbbb88d30925d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8c:33:ae:0c:d5:b5:49:ca:19:b8:bf:50:eb:
b4:5c:ca:0f:6f:cd:eb:eb:d3:d4:dc:57:a3:56:b6:
33:43:37:a9:97:b9:ee:70:3c:4d:ea:56:85:c7:45:
66:de:86:83:d4:f9:07:81:99:4b:56:2a:58:61:29:
29:50:27:20:3a:4f:89:79:79:69:23:78:7e:68:e4:
10:44:40:b1:51:67:61:d9:7a:3e:7e:bc:59:b9:e3:
4e:ce:2d:78:03:12:d7:d3:12:8d:7f:23:32:fa:0c:
4b:e3:58:e4:db:ce:1d:ef:2c:62:75:1f:85:ce:75:
d4:bd:05:ab:58:f2:ee:e3:ad:2f:3b:dd:98:60:e1:
ca:3c:82:b3:32:6d:af:4c:3e:40:78:a0:40:3f:cb:
7c:76:c6:c4:df:e3:59:69:6c:ae:16:c4:2d:83:d8:
fb:6a:c4:8e:c5:16:76:76:bb:18:16:27:30:c0:71:
30:74:ac:f9:42:fd:99:3a:27:f7:69:18:17:e5:7b:
1f:51:bc:ed:e3:0a:b8:91:30:24:60:61:2c:b8:aa:
49:18:a4:3c:04:bf:ef:14:79:08:84:69:11:63:ae:
d9:ca:81:34:bd:f4:72:6b:17:d8:f2:2d:c4:5b:e1:
04:da:68:f0:c0:f3:ae:48:f0:7f:55:64:bf:f0:83:
58:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:94:DD:EF:45:F5:D4:4E:AD:52:DA:1F:8F:6B:BB:B8:8D:30:92:5D
X509v3 Authority Key Identifier:
keyid:2E:2F:6D:D9:79:9F:A4:EA:08:4F:D5:49:D7:10:C6:89:6D:FA:E2:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Li9t2XmfpOoIT9VJ1xDGiW364pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:36:e0:17:64:05:02:5a:99:31:de:8a:2b:cf:ed:a9:ce:93:
4f:a3:ef:38:f9:ea:d8:4e:d9:c4:13:d7:b5:a8:05:3e:50:24:
f9:75:97:1c:f1:27:cf:86:d2:58:59:1b:b8:98:f3:e7:ae:4a:
27:4d:1c:1a:65:f2:35:00:b3:b9:02:e7:09:d4:c7:db:05:49:
cf:ef:9a:e1:47:87:b4:95:10:b8:8f:ef:c2:4a:75:ba:e7:ea:
bc:c9:b8:98:6b:0d:fd:f1:23:f9:55:81:b6:97:3b:67:ad:1e:
63:e6:12:d1:dd:38:20:02:8b:79:07:df:26:68:76:ec:30:2e:
56:37:35:e7:59:cb:fe:e5:65:3d:0c:97:cc:bd:60:4c:aa:e1:
4d:8b:2b:31:6d:9d:fd:83:34:a8:42:ff:ec:55:9d:be:35:9c:
17:f8:96:3d:09:45:75:21:b1:1f:ff:a9:5b:ba:28:bf:9a:3d:
82:93:89:80:2f:3a:4b:b5:d1:5a:e5:88:45:3e:1d:ff:da:e8:
89:2d:f7:32:68:76:3c:26:7c:7c:e6:1d:26:1a:be:f8:4b:51:
ed:c2:ea:20:3c:2b:d0:4f:f6:d3:0f:b4:e5:76:71:a7:30:b8:
bf:93:ec:94:78:82:bc:51:b3:8b:91:03:f4:e5:10:50:38:23:
0f:57:14:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:42:12 2026 by rpki-client