Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
File: LiSXk-WSSp8l86Co3ZlLN065N9I.mft (raw, json)
Hash identifier: UjBlyQDEDJ64FCi1uxKZao8yKy8ELvJOm4PyqCjGd0M=
Subject key identifier: 9D:96:41:89:F5:CD:79:8F:F2:DB:93:44:A7:F4:80:B9:D2:C8:F9:76
Authority key identifier: 2E:24:97:93:E5:92:4A:9F:25:F3:A0:A8:DD:99:4B:37:4E:B9:37:D2
Certificate issuer: /CN=2e249793e5924a9f25f3a0a8dd994b374eb937d2
Certificate serial: 019F190CA2F9CD5167E2FEA05DAD1E27FA29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiSXk-WSSp8l86Co3ZlLN065N9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
Manifest number: 1960
Signing time: Tue 30 Jun 2026 15:01:26 +0000
Manifest this update: Tue 30 Jun 2026 15:01:26 +0000
Manifest next update: Wed 01 Jul 2026 15:01:26 +0000
Files and hashes: 1: 7vsMsuJmzw7CzqWJp5zGFtPV02U.roa (hash: bK26Gz3BJI9pktI1Le1pz5ATU7aYExDizQZNhktvaPQ=)
2: LiSXk-WSSp8l86Co3ZlLN065N9I.crl (hash: tXG0TqteM2FYatiHDRRmE3o01r7zW8W1zwSY66TN0ro=)
3: a6hZcTn-XqxdaZ2xZ2ZKKRGTeno.roa (hash: ePG3wnShSG6k86StztGYRl/CsawQ81C9m+3zlwarufE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/LiSXk-WSSp8l86Co3ZlLN065N9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:0c:a2:f9:cd:51:67:e2:fe:a0:5d:ad:1e:27:fa:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e249793e5924a9f25f3a0a8dd994b374eb937d2
Validity
Not Before: Jun 30 15:01:26 2026 GMT
Not After : Jul 1 15:01:26 2026 GMT
Subject: CN=9d964189f5cd798ff2db9344a7f480b9d2c8f976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:18:14:48:b3:3f:99:a7:ce:dc:1e:4f:85:a6:
1b:fd:be:53:bc:00:2b:6b:bd:9b:5f:63:0a:d2:10:
01:20:d6:49:0e:6d:6a:15:a0:36:15:d8:f7:87:2a:
5f:19:db:ae:c7:1f:de:86:ef:45:52:1a:f7:dd:06:
d2:1e:9b:93:f1:c6:f5:cd:88:0a:38:6d:95:51:31:
2f:e1:6b:28:fa:c0:1e:c1:62:b1:39:60:37:e9:de:
d9:d2:18:76:e8:f1:3b:8e:51:c1:c1:72:9b:31:f8:
52:f4:51:d7:49:09:7b:8d:68:60:34:11:cf:0a:2a:
71:f2:eb:ff:01:f0:a8:0e:cd:8c:cd:a4:2c:dc:70:
27:7e:57:85:b5:6a:02:f1:ff:cb:0b:16:6a:e3:d4:
9b:7e:d9:18:d8:1c:43:70:8f:fa:66:13:19:16:b8:
ff:f1:94:49:1a:29:83:dd:53:71:08:6b:91:e7:bb:
09:c7:d3:ec:2f:a0:d3:8f:29:5e:92:66:fa:35:a6:
8a:1a:e3:e3:f1:64:d8:47:9d:65:5d:36:fc:fa:ad:
45:c2:28:ec:5e:c7:cb:b3:fe:70:9a:c6:28:ee:7a:
34:19:d4:cd:01:f2:64:90:b2:19:9a:c6:6c:b5:c5:
b6:8c:a5:30:93:bb:51:52:df:71:29:46:39:34:3f:
fc:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:96:41:89:F5:CD:79:8F:F2:DB:93:44:A7:F4:80:B9:D2:C8:F9:76
X509v3 Authority Key Identifier:
keyid:2E:24:97:93:E5:92:4A:9F:25:F3:A0:A8:DD:99:4B:37:4E:B9:37:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiSXk-WSSp8l86Co3ZlLN065N9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:6c:7d:d2:e1:08:50:c4:47:b7:4a:a3:88:29:bb:f0:7a:ea:
7a:35:81:45:16:e9:e4:e8:96:8f:1e:2b:e6:30:a9:f6:33:6f:
0e:57:84:8c:c3:a3:ea:9d:3a:61:02:25:71:ae:08:b9:ba:5b:
d7:18:d0:c9:2a:b7:9c:9a:1c:3b:6b:0a:67:75:18:1c:aa:34:
25:b3:d4:6f:07:54:fb:61:66:11:ec:5e:64:7b:07:ea:9b:e6:
ef:7a:af:16:57:7d:03:6a:ae:99:6e:a7:6f:c3:06:ce:7f:fb:
0f:63:8c:ac:18:70:e5:a0:c2:f2:82:ca:47:18:e4:90:af:c3:
51:85:f6:16:44:d0:30:f5:3d:69:0e:68:52:d1:35:2a:6e:8e:
78:b0:a1:a1:40:92:d3:49:6b:e9:62:78:0a:00:54:47:51:ab:
a4:23:55:9c:65:cf:05:b9:3f:96:dc:15:62:bb:7c:80:22:7a:
71:3d:de:82:44:54:79:b3:ab:ae:be:e5:f4:2e:22:ff:1f:76:
dc:d7:f9:f3:f1:2f:1d:d1:b4:01:0e:30:dc:7a:0b:b3:a7:d3:
7a:f0:ca:27:16:ba:d9:12:1d:7f:87:e3:86:ec:1f:36:6c:37:
e5:8f:a0:26:06:72:ac:77:72:a0:5f:5d:a7:4a:46:1c:bb:ae:
70:46:fa:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:39:42 2026 by rpki-client