Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
File: LiSXk-WSSp8l86Co3ZlLN065N9I.mft (raw, json)
Hash identifier: UplBw4O/exntxpG4rjAtgIb0/Lsgi5M/DMi0F/oqKmE=
Subject key identifier: 36:DA:2D:D7:8E:62:31:CC:E0:F8:E2:DD:E9:81:4A:91:E5:86:93:09
Authority key identifier: 2E:24:97:93:E5:92:4A:9F:25:F3:A0:A8:DD:99:4B:37:4E:B9:37:D2
Certificate issuer: /CN=2e249793e5924a9f25f3a0a8dd994b374eb937d2
Certificate serial: 019E314E349CE2925C3DB595BE50744F0CE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiSXk-WSSp8l86Co3ZlLN065N9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
Manifest number: 18E8
Signing time: Sat 16 May 2026 15:01:09 +0000
Manifest this update: Sat 16 May 2026 15:01:09 +0000
Manifest next update: Sun 17 May 2026 15:01:09 +0000
Files and hashes: 1: 7vsMsuJmzw7CzqWJp5zGFtPV02U.roa (hash: bK26Gz3BJI9pktI1Le1pz5ATU7aYExDizQZNhktvaPQ=)
2: LiSXk-WSSp8l86Co3ZlLN065N9I.crl (hash: VUVQYTyd2ttTbsRvS3tsCaErK8jThNA0Ou+I5TRlUtw=)
3: a6hZcTn-XqxdaZ2xZ2ZKKRGTeno.roa (hash: ePG3wnShSG6k86StztGYRl/CsawQ81C9m+3zlwarufE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/LiSXk-WSSp8l86Co3ZlLN065N9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:4e:34:9c:e2:92:5c:3d:b5:95:be:50:74:4f:0c:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e249793e5924a9f25f3a0a8dd994b374eb937d2
Validity
Not Before: May 16 15:01:09 2026 GMT
Not After : May 17 15:01:09 2026 GMT
Subject: CN=36da2dd78e6231cce0f8e2dde9814a91e5869309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:5c:0a:5a:cf:29:10:7b:22:32:62:af:dd:5a:
2c:b3:67:20:65:bc:b5:49:e6:65:1b:cc:26:59:51:
39:75:ff:e6:6c:44:a7:0f:90:30:3c:a3:a0:1e:90:
1c:87:34:56:99:98:76:05:3c:59:9f:bc:64:14:59:
2d:f9:a4:ba:33:e8:1f:5a:5e:ab:eb:f3:b1:6b:e5:
3c:71:bf:6c:d7:d2:63:c5:33:1f:93:90:c6:d8:de:
87:47:cc:37:47:92:37:6f:f6:b2:65:3e:56:5d:91:
7d:f9:28:95:ba:1e:d7:14:a2:1f:91:de:b4:cb:3e:
95:50:af:63:bc:3b:77:e5:51:b3:d6:76:f6:11:eb:
30:da:7a:7f:b1:89:c0:f4:8d:f4:e6:54:53:62:9e:
04:12:c3:4a:98:05:03:12:8f:76:f5:ce:ff:0f:ad:
a8:31:37:cb:28:d6:e7:ca:c7:e3:31:0c:78:09:dd:
50:88:d6:6a:63:bb:59:9b:3f:0f:23:1a:84:09:6c:
f8:61:33:18:bc:d3:65:22:16:f6:d3:32:cf:f3:dc:
a4:9a:e8:23:cf:dd:72:ca:7c:88:62:fd:bc:b8:35:
ab:37:d8:ee:0c:85:39:06:f8:d6:ab:ce:b7:2a:8d:
f8:59:63:de:38:b1:ef:e4:03:53:1d:4b:38:e3:f5:
6b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:DA:2D:D7:8E:62:31:CC:E0:F8:E2:DD:E9:81:4A:91:E5:86:93:09
X509v3 Authority Key Identifier:
keyid:2E:24:97:93:E5:92:4A:9F:25:F3:A0:A8:DD:99:4B:37:4E:B9:37:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiSXk-WSSp8l86Co3ZlLN065N9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:d1:1e:e5:c6:53:67:24:56:f4:13:cb:7e:b5:34:70:c9:42:
28:8d:8e:c4:49:a7:b8:fd:4b:46:57:19:2e:6a:4b:7e:bd:87:
e1:90:e3:ef:eb:9e:4d:27:25:21:8c:7d:6c:98:aa:76:78:91:
25:f5:ab:f5:a5:39:6e:30:3f:9f:97:b8:f2:47:e8:03:5e:24:
0f:3a:5e:c4:26:4c:d3:66:a1:37:90:d0:79:50:6a:02:45:a0:
c6:36:4e:40:76:0f:9e:b7:c3:c6:cc:27:e7:a6:0a:72:b8:a8:
d5:dc:56:42:a9:ac:8b:bf:6e:25:0d:87:5a:fb:34:a1:ff:38:
8f:a9:0a:ee:07:5b:e5:d9:ea:f1:21:f7:46:cc:f9:70:b1:2a:
c0:ba:8f:ea:24:b7:50:5d:ab:ee:fa:c5:db:35:aa:b4:76:e6:
44:5a:d0:aa:08:69:b8:d7:7f:ed:94:5c:d2:22:99:73:d0:15:
bf:00:47:f6:16:95:da:d6:7b:06:76:59:58:41:1e:c9:7c:6b:
ce:2f:3a:54:fd:cb:52:1f:8d:16:39:05:49:bd:5a:2e:ca:24:
e1:31:53:8f:c4:7f:08:06:ad:d3:04:96:3f:e9:1a:c1:5d:8f:
01:ca:02:76:47:53:5b:92:ba:22:9e:bd:7e:9f:88:26:d5:f7:
cf:19:82:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 20:18:43 2026 by rpki-client