Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
File: LiSXk-WSSp8l86Co3ZlLN065N9I.mft (raw, json)
Hash identifier: v2dsyv7MN07g7kpFLswwkida5GlEoAlw0A6fepzv6Ss=
Subject key identifier: 0F:74:60:11:F4:0C:16:41:E1:C7:62:01:0D:8C:64:1E:84:41:CE:95
Authority key identifier: 2E:24:97:93:E5:92:4A:9F:25:F3:A0:A8:DD:99:4B:37:4E:B9:37:D2
Certificate issuer: /CN=2e249793e5924a9f25f3a0a8dd994b374eb937d2
Certificate serial: 019D382E6A07B64C22DF9F9C7A136B9D133C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiSXk-WSSp8l86Co3ZlLN065N9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
Manifest number: 1867
Signing time: Sun 29 Mar 2026 06:00:59 +0000
Manifest this update: Sun 29 Mar 2026 06:00:59 +0000
Manifest next update: Mon 30 Mar 2026 06:00:59 +0000
Files and hashes: 1: 7vsMsuJmzw7CzqWJp5zGFtPV02U.roa (hash: bK26Gz3BJI9pktI1Le1pz5ATU7aYExDizQZNhktvaPQ=)
2: LiSXk-WSSp8l86Co3ZlLN065N9I.crl (hash: 5na47XYYG0ekiEsv4LqTI6G5QKJeGdNEH0P5OkEhI7U=)
3: a6hZcTn-XqxdaZ2xZ2ZKKRGTeno.roa (hash: ePG3wnShSG6k86StztGYRl/CsawQ81C9m+3zlwarufE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/LiSXk-WSSp8l86Co3ZlLN065N9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:6a:07:b6:4c:22:df:9f:9c:7a:13:6b:9d:13:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e249793e5924a9f25f3a0a8dd994b374eb937d2
Validity
Not Before: Mar 29 06:00:59 2026 GMT
Not After : Mar 30 06:00:59 2026 GMT
Subject: CN=0f746011f40c1641e1c762010d8c641e8441ce95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:af:18:ea:29:fe:07:a7:91:97:25:df:87:64:
11:9c:23:5a:0d:89:1f:e5:7a:e3:63:e9:63:47:04:
87:55:89:f6:25:5f:9d:7d:24:e9:04:a7:ae:b9:e1:
b6:dc:68:9b:d4:f8:99:77:a1:f2:7c:e4:cf:0a:1f:
16:4c:a9:ae:3f:28:0f:91:13:73:ee:cd:c4:68:7e:
1f:31:a1:ea:43:ba:87:cd:74:30:99:b2:89:37:74:
c2:90:f4:5a:a8:9b:79:8c:5a:b7:39:a3:5b:9d:ab:
39:ba:70:5d:0a:66:67:bd:94:d7:83:ed:b9:7c:5d:
4b:91:e6:f0:de:21:cd:2d:e3:c0:a0:c6:f9:fc:9a:
d2:15:37:a2:24:d8:42:f7:0c:f9:e8:82:83:4f:f1:
47:de:32:4b:0a:8f:72:b8:54:c7:e8:5c:98:e8:1b:
8b:2b:2c:24:0c:64:f4:41:25:0a:dd:55:5a:e5:59:
d1:28:08:0c:5a:73:a8:d6:d6:8a:ec:12:e5:a4:d7:
af:2f:00:d2:09:3e:91:15:11:54:50:22:d0:c2:9a:
3e:07:5c:f1:98:d5:9f:3c:6a:9b:11:cd:3d:fa:0e:
9a:ce:63:23:23:fb:ad:7a:78:b0:e0:44:00:2a:55:
63:fe:92:56:9e:b0:cb:56:12:4e:d5:7e:68:b8:61:
0e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:74:60:11:F4:0C:16:41:E1:C7:62:01:0D:8C:64:1E:84:41:CE:95
X509v3 Authority Key Identifier:
keyid:2E:24:97:93:E5:92:4A:9F:25:F3:A0:A8:DD:99:4B:37:4E:B9:37:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiSXk-WSSp8l86Co3ZlLN065N9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:86:ff:40:ea:86:40:45:c2:1d:98:0b:79:f6:51:ed:32:aa:
72:c4:ec:4b:4c:4b:12:4f:1c:01:c5:b9:0a:e8:54:a0:76:66:
e2:64:4c:68:6d:b7:43:ac:ce:28:eb:14:1c:29:71:09:12:85:
55:76:a3:da:77:94:d5:ae:78:05:7f:8c:38:57:cd:f8:69:1c:
3a:7b:75:4a:25:d1:ba:23:9c:72:38:fd:bb:6b:33:3a:ac:59:
17:79:1f:31:34:ba:17:99:e4:56:cb:f8:b8:1e:93:ad:78:96:
a4:55:be:8d:11:3f:4b:ad:9a:5e:2d:2f:05:23:0c:77:bb:9a:
f6:ea:45:a6:22:8c:f8:ba:51:91:82:5b:bf:d4:bc:07:af:a8:
d9:4a:d6:0b:cf:03:e7:e8:3a:a4:e9:03:02:8e:73:e3:dc:5e:
d1:81:49:23:6b:9c:c0:34:57:0e:f7:cf:ab:a9:c9:6a:2b:df:
87:fb:20:27:c1:a1:4c:f9:b3:bc:52:ac:4e:e7:2f:6b:3a:fc:
a0:a5:88:d7:b4:0f:b2:63:ad:6a:16:4f:65:7e:01:63:34:5e:
f1:8f:73:a4:ee:ff:24:86:21:85:ac:47:37:fe:17:80:92:50:
bf:52:13:c0:be:06:6f:54:5c:4a:79:a3:a8:29:78:0e:ea:92:
ee:39:a0:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:41:44 2026 by rpki-client