Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.mft
File: Li9t2XmfpOoIT9VJ1xDGiW364pE.mft (raw, json)
Hash identifier: YcUT7Sd0PGF0aBgNDU3C4ROl3TrAgfE42YQehhKhj48=
Subject key identifier: B4:8B:34:4B:45:AE:3D:E1:73:F2:2B:C5:8B:2E:BE:98:26:3B:76:A4
Authority key identifier: 2E:2F:6D:D9:79:9F:A4:EA:08:4F:D5:49:D7:10:C6:89:6D:FA:E2:91
Certificate issuer: /CN=2e2f6dd9799fa4ea084fd549d710c6896dfae291
Certificate serial: 01A0DD60D2D98BB897AE7458FAFB8C95A4C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Li9t2XmfpOoIT9VJ1xDGiW364pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.mft
Manifest number: 0CBF
Signing time: Sat 26 Sep 2026 11:01:45 +0000
Manifest this update: Sat 26 Sep 2026 11:01:45 +0000
Manifest next update: Sun 27 Sep 2026 11:01:45 +0000
Files and hashes: 1: Li9t2XmfpOoIT9VJ1xDGiW364pE.crl (hash: f+g66VmDwol7AufOC4Ivydv6o3NeocBMcoGdU3fLxi4=)
2: tOuyhld-AUyG32ylyMah8UxZ7mE.roa (hash: YUhhR6mZGZf9IfQta0epFj+lmVDPTWRRkPjuKNf8QT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Li9t2XmfpOoIT9VJ1xDGiW364pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:60:d2:d9:8b:b8:97:ae:74:58:fa:fb:8c:95:a4:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e2f6dd9799fa4ea084fd549d710c6896dfae291
Validity
Not Before: Sep 26 11:01:45 2026 GMT
Not After : Sep 27 11:01:45 2026 GMT
Subject: CN=b48b344b45ae3de173f22bc58b2ebe98263b76a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fc:8d:a0:95:1f:83:ae:82:e2:d7:73:dc:85:
5f:c2:98:17:e6:ba:25:be:07:f2:80:b8:d6:3a:41:
17:a0:ae:57:52:05:cf:91:3c:88:44:f5:60:15:39:
4a:f0:c3:1a:2a:79:8d:0e:03:e1:2c:dc:06:1a:8a:
42:36:41:10:27:a5:58:64:f8:0f:81:07:ec:67:dd:
26:fb:61:3a:15:d0:3f:a9:32:6b:dc:e2:fa:68:65:
68:72:a9:d5:65:64:5a:d9:e3:fd:e7:54:5f:aa:8c:
3a:29:40:7b:39:7a:e5:b8:b2:36:fa:9f:bb:90:9f:
bc:96:be:b5:b6:86:4c:bb:fa:69:fb:fc:39:69:24:
e0:19:96:5c:34:09:46:84:df:91:90:88:d9:66:14:
bb:da:fd:6f:e8:27:df:08:6e:18:b9:bf:f2:41:0e:
5c:bc:87:4f:d4:ce:7c:c0:0d:68:b3:92:92:7d:51:
58:5d:49:e1:0a:5d:1e:94:84:1b:92:b6:99:8a:6d:
63:05:7b:8b:2c:4d:5f:ce:29:c8:de:e1:9f:d9:6f:
0a:f4:7e:7a:46:d0:ae:61:eb:b6:e5:6f:c7:6c:a9:
a0:9f:a7:0b:2e:94:52:4c:05:63:17:4d:d3:33:0c:
65:f2:5f:7a:37:f7:02:46:17:43:df:7d:33:2d:53:
2c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:8B:34:4B:45:AE:3D:E1:73:F2:2B:C5:8B:2E:BE:98:26:3B:76:A4
X509v3 Authority Key Identifier:
keyid:2E:2F:6D:D9:79:9F:A4:EA:08:4F:D5:49:D7:10:C6:89:6D:FA:E2:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Li9t2XmfpOoIT9VJ1xDGiW364pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:2b:da:e5:68:0f:76:cb:27:08:69:c4:be:c0:17:db:ff:44:
75:d5:4a:18:d4:05:41:42:3d:6d:50:77:9f:bc:a4:6d:57:e8:
b7:25:c7:f9:cd:b9:c2:09:d2:02:50:58:81:a3:f0:d8:e8:c5:
e3:72:9d:55:24:26:14:94:2f:d8:c3:01:b0:51:71:f8:c7:ca:
3a:27:f8:7e:76:0d:87:0c:29:2c:f7:b2:ea:17:e0:84:be:17:
ce:22:78:67:49:da:00:60:79:1b:8c:6d:48:53:4d:d2:df:51:
bf:9c:cd:c7:8f:ea:7d:fd:37:af:72:f3:53:32:d3:7f:b9:98:
a1:d2:c3:b8:9b:4b:10:ec:9c:ab:62:e8:59:05:4e:13:00:ff:
0f:30:b7:a2:ff:26:77:c7:5c:1c:4e:fe:1a:70:78:fc:8e:2c:
38:64:83:6d:4d:18:02:b1:7f:43:37:78:94:75:18:91:3b:a0:
69:cc:18:9b:86:89:ce:7a:b1:71:aa:34:2f:57:f8:ac:01:5c:
b3:40:bd:3c:52:3c:37:cb:ba:87:22:d4:88:4d:06:ed:9a:95:
46:22:1b:a6:40:e3:53:01:c8:de:89:db:62:47:a5:ef:20:1a:
bf:b7:c4:bb:a1:7a:8f:c3:1e:62:9c:81:85:fb:92:41:a2:93:
cf:40:b1:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:31:20 2026 by rpki-client