Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.mft
File: Li-E9VWmZqoMBKj759wZEAdfVlg.mft (raw, json)
Hash identifier: sud4n6Aaxquz27qncwq4KUdolvdWC7DTNVppSzxXNUE=
Subject key identifier: 62:0E:61:6B:35:3B:3A:F5:DD:C1:6A:1A:B5:0B:D2:D2:94:4E:A6:81
Authority key identifier: 2E:2F:84:F5:55:A6:66:AA:0C:04:A8:FB:E7:DC:19:10:07:5F:56:58
Certificate issuer: /CN=2e2f84f555a666aa0c04a8fbe7dc1910075f5658
Certificate serial: 019D28BB9181C320F10D3D5226AA08440EF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Li-E9VWmZqoMBKj759wZEAdfVlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 06:01:14 +0000
Manifest this update: Thu 26 Mar 2026 06:01:14 +0000
Manifest next update: Fri 27 Mar 2026 06:01:14 +0000
Files and hashes: 1: Li-E9VWmZqoMBKj759wZEAdfVlg.crl (hash: 3oQJj0r0RPVOZbHRbse9jtdYwlQJ0ebL4ZgT9cefyGc=)
2: vTU8eDNVEo3qFy_xToMGPXkw-Zo.roa (hash: /OpEMA+vjnSrbNhb5S52wsTvUT1f0OuMQ9Pxy+EXh7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Li-E9VWmZqoMBKj759wZEAdfVlg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:91:81:c3:20:f1:0d:3d:52:26:aa:08:44:0e:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e2f84f555a666aa0c04a8fbe7dc1910075f5658
Validity
Not Before: Mar 26 06:01:14 2026 GMT
Not After : Mar 27 06:01:14 2026 GMT
Subject: CN=620e616b353b3af5ddc16a1ab50bd2d2944ea681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:98:26:f4:55:f4:3d:45:50:08:eb:41:93:16:
56:a1:5d:8e:83:ae:d4:cb:29:cb:93:36:38:64:db:
42:60:ba:7c:ad:6f:a3:1c:55:74:82:dd:f8:72:8f:
77:aa:18:77:23:b1:0c:5c:cd:15:2c:cd:5c:87:b9:
5d:a5:1b:3d:51:ee:4b:72:8d:13:03:9e:13:d6:68:
f1:4f:55:cd:24:23:bd:73:2d:47:f9:f9:62:87:31:
de:95:61:20:00:42:b7:f6:51:6d:07:66:b1:bc:33:
94:f5:45:2f:3a:5b:4b:69:f5:6c:ba:49:fe:92:d5:
e2:61:36:f5:50:f2:56:48:fc:63:a5:f8:0e:a8:c5:
52:2e:c6:f8:02:14:1c:09:4c:9e:4b:f6:73:b6:b9:
81:35:f5:ce:97:ae:2c:1c:ff:5b:01:8d:eb:9a:30:
39:28:f3:fa:84:f4:b3:12:a3:13:7f:f3:31:61:6e:
af:cf:7b:07:7f:c2:65:f6:76:28:75:f4:31:94:fe:
72:ff:54:a1:d2:e6:85:8a:55:2b:4a:e9:23:ee:75:
72:cb:a5:de:c6:0f:29:af:66:18:79:ff:0f:8b:9e:
73:4b:83:f9:6b:e9:a9:c0:3e:22:fc:39:02:c9:69:
67:eb:6b:97:86:c7:51:32:6a:07:26:2a:c9:74:14:
3c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:0E:61:6B:35:3B:3A:F5:DD:C1:6A:1A:B5:0B:D2:D2:94:4E:A6:81
X509v3 Authority Key Identifier:
keyid:2E:2F:84:F5:55:A6:66:AA:0C:04:A8:FB:E7:DC:19:10:07:5F:56:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Li-E9VWmZqoMBKj759wZEAdfVlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:74:a7:28:b6:74:d2:8a:f8:8e:95:f2:fe:69:66:de:74:92:
ae:0f:5b:7f:18:e0:60:e4:27:e0:b2:11:fa:61:b7:f9:51:6f:
0a:29:c9:bd:99:e5:a3:c8:58:8e:9d:dc:d4:89:9b:7b:d6:ff:
80:63:14:fd:f6:7a:3f:0d:c3:d5:0e:0f:0d:27:6f:9b:fe:7d:
4f:58:f0:9e:09:45:d9:4d:68:3a:b7:1c:e5:b4:fc:3d:a6:b2:
1a:f7:85:90:df:32:a1:0a:fc:99:19:a2:54:40:06:0c:c4:0f:
3c:34:23:04:91:a0:47:a1:50:12:d7:e5:45:d8:78:47:fa:12:
38:b8:89:e8:f4:ee:ca:90:dd:d2:24:48:09:a6:f0:1b:68:88:
ae:53:ec:bc:b9:e4:fd:2b:2a:fa:15:97:d4:f0:74:b2:34:37:
b8:60:2f:ea:3d:ae:95:b4:4c:34:a4:92:9b:cb:d9:ba:09:3b:
e0:58:c6:52:c6:c6:11:88:bd:e6:b4:e4:1c:2f:30:fc:7d:7e:
d1:21:b0:5b:03:21:e4:e2:00:c0:49:1f:45:66:54:43:95:45:
ad:7b:94:90:14:ee:0a:56:ab:cb:a7:36:33:9c:e2:ac:59:18:
e0:b3:1d:fe:11:e0:3b:bf:ad:09:e2:49:43:0e:10:43:24:de:
e4:bb:07:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:59:53 2026 by rpki-client