Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
File: LiSXk-WSSp8l86Co3ZlLN065N9I.mft (raw, json)
Hash identifier: T4o9uZ1IYXIkiwJvWuEmFkPi3T2xkMXq87GWw3XDnA0=
Subject key identifier: E3:3D:67:BB:DB:7D:16:24:52:C8:70:C8:28:46:D8:B6:DF:FF:A1:4D
Authority key identifier: 2E:24:97:93:E5:92:4A:9F:25:F3:A0:A8:DD:99:4B:37:4E:B9:37:D2
Certificate issuer: /CN=2e249793e5924a9f25f3a0a8dd994b374eb937d2
Certificate serial: 01A13D8151FDC2D03AB99C68BB069E983C5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiSXk-WSSp8l86Co3ZlLN065N9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
Manifest number: 1A7C
Signing time: Thu 15 Oct 2026 03:00:47 +0000
Manifest this update: Thu 15 Oct 2026 03:00:47 +0000
Manifest next update: Fri 16 Oct 2026 03:00:47 +0000
Files and hashes: 1: 7vsMsuJmzw7CzqWJp5zGFtPV02U.roa (hash: bK26Gz3BJI9pktI1Le1pz5ATU7aYExDizQZNhktvaPQ=)
2: LiSXk-WSSp8l86Co3ZlLN065N9I.crl (hash: prB0Bnxc13fWUfMSOIlVULbRyc3vAYezhfp2Jj7OZFE=)
3: a6hZcTn-XqxdaZ2xZ2ZKKRGTeno.roa (hash: ePG3wnShSG6k86StztGYRl/CsawQ81C9m+3zlwarufE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/LiSXk-WSSp8l86Co3ZlLN065N9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:81:51:fd:c2:d0:3a:b9:9c:68:bb:06:9e:98:3c:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e249793e5924a9f25f3a0a8dd994b374eb937d2
Validity
Not Before: Oct 15 03:00:47 2026 GMT
Not After : Oct 16 03:00:47 2026 GMT
Subject: CN=e33d67bbdb7d162452c870c82846d8b6dfffa14d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:84:32:d5:da:36:87:45:78:d5:65:32:a8:a5:
91:44:eb:c1:78:66:e6:1d:15:62:13:7d:ff:5e:ef:
cc:9e:57:24:93:fd:c0:70:e0:48:90:b5:2e:49:44:
ad:a6:67:ef:1d:8b:a8:c3:62:cd:2a:97:3e:c2:4d:
91:a9:f0:fd:33:3e:88:39:ec:02:d1:d3:33:23:05:
27:3f:b7:80:1a:8a:d5:52:4a:2b:6b:d7:d0:e4:b7:
16:a4:f1:43:b8:c4:6f:f4:43:d9:c9:e1:20:4b:01:
d1:f0:2d:27:dd:62:f5:b7:77:e0:a4:01:77:14:d4:
ba:43:de:1d:2c:51:0a:de:f4:90:0d:bb:77:89:af:
06:fb:2a:4e:1e:12:32:57:99:ae:d9:dc:59:29:c1:
6d:be:4c:3e:52:c1:d8:d0:30:a1:42:0c:cd:9f:2e:
71:0b:b6:a7:a9:84:b8:12:d7:0a:f4:7a:62:55:c1:
67:fe:2d:1f:86:d0:69:2a:f7:53:04:6b:b3:7c:27:
35:bf:c7:71:ca:f6:9c:55:ae:7d:8e:49:57:4c:bd:
f9:0d:e1:8a:af:5c:7f:51:a9:f4:11:33:06:d6:a8:
5c:97:34:9b:ad:c4:3c:be:60:11:6a:ea:3c:76:28:
c0:34:e8:1f:0b:72:f5:b0:ee:6a:05:3b:0a:bd:96:
ff:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:3D:67:BB:DB:7D:16:24:52:C8:70:C8:28:46:D8:B6:DF:FF:A1:4D
X509v3 Authority Key Identifier:
keyid:2E:24:97:93:E5:92:4A:9F:25:F3:A0:A8:DD:99:4B:37:4E:B9:37:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiSXk-WSSp8l86Co3ZlLN065N9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:2c:29:c5:56:19:9e:57:b7:05:c5:71:ba:a5:22:dd:4d:4f:
05:a5:24:31:1f:b8:6d:24:19:02:f6:f2:2d:1a:85:e2:05:a8:
a3:94:96:75:6d:c4:7d:3f:69:b6:3c:7a:28:e8:0e:8f:bd:fe:
f5:f9:03:75:1c:94:5d:f4:eb:fc:5b:cb:f3:c7:28:63:0c:0c:
fe:9b:3b:56:d5:86:3e:90:1b:a0:55:1b:5d:50:c2:69:1f:22:
64:05:b7:d6:b1:c6:7a:bc:68:fc:43:56:b9:11:cb:e8:91:bc:
f2:3d:80:4e:14:a2:f6:50:54:73:bc:bf:3b:e4:78:cd:01:f1:
32:3f:8b:70:2d:73:f0:a1:bf:d5:ef:3f:cd:8b:d9:8a:32:b8:
e0:18:f4:2f:71:91:29:d2:30:ce:be:ed:75:59:b5:97:1f:2d:
a7:92:23:a9:60:73:33:99:4c:84:31:dc:d7:53:bf:a0:6d:c5:
91:b5:26:38:d5:da:0d:d6:d0:aa:cd:5a:4e:42:bf:d2:9e:33:
69:6d:cf:8b:24:15:7f:8c:ae:e8:0a:07:16:58:1b:6b:93:17:
ac:3c:10:3f:4a:77:07:e1:4c:7d:15:49:4f:f8:20:52:6a:32:
00:29:da:d9:42:b5:82:33:9c:45:fe:0b:00:6f:89:e7:df:8a:
91:af:4d:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE9gVH9wtA6uZxouwaemDxcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlMjQ5NzkzZTU5MjRhOWYyNWYzYTBhOGRkOTk0YjM3NGVi
OTM3ZDIwHhcNMjYxMDE1MDMwMDQ3WhcNMjYxMDE2MDMwMDQ3WjAzMTEwLwYDVQQD
EyhlMzNkNjdiYmRiN2QxNjI0NTJjODcwYzgyODQ2ZDhiNmRmZmZhMTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5YQy1do2h0V41WUyqKWRROvBeGbm
HRViE33/Xu/Mnlckk/3AcOBIkLUuSUStpmfvHYuow2LNKpc+wk2RqfD9Mz6IOewC
0dMzIwUnP7eAGorVUkora9fQ5LcWpPFDuMRv9EPZyeEgSwHR8C0n3WL1t3fgpAF3
FNS6Q94dLFEK3vSQDbt3ia8G+ypOHhIyV5mu2dxZKcFtvkw+UsHY0DChQgzNny5x
C7anqYS4EtcK9HpiVcFn/i0fhtBpKvdTBGuzfCc1v8dxyvacVa59jklXTL35DeGK
r1x/Uan0ETMG1qhclzSbrcQ8vmARauo8dijANOgfC3L1sO5qBTsKvZb/cQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOM9Z7vbfRYkUshwyChG2Lbf/6FNMB8GA1UdIwQY
MBaAFC4kl5PlkkqfJfOgqN2ZSzdOuTfSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGlTWGstV1NTcDhsODZDbzNabExOMDY1TjlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9iZmJjOGUtZWFiNS00ZjIwLThlZWEt
OTZiZjE0M2ViNDUyLzEvTGlTWGstV1NTcDhsODZDbzNabExOMDY1TjlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9iZmJjOGUtZWFiNS00ZjIwLThlZWEtOTZiZjE0M2ViNDUy
LzEvTGlTWGstV1NTcDhsODZDbzNabExOMDY1TjlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdiwpxVYZ
nle3BcVxuqUi3U1PBaUkMR+4bSQZAvbyLRqF4gWoo5SWdW3EfT9ptjx6KOgOj73+
9fkDdRyUXfTr/FvL88coYwwM/ps7VtWGPpAboFUbXVDCaR8iZAW31rHGerxo/ENW
uRHL6JG88j2AThSi9lBUc7y/O+R4zQHxMj+LcC1z8KG/1e8/zYvZijK44Bj0L3GR
KdIwzr7tdVm1lx8tp5IjqWBzM5lMhDHc11O/oG3FkbUmONXaDdbQqs1aTkK/0p4z
aW3PiyQVf4yu6AoHFlgba5MXrDwQP0p3B+FMfRVJT/ggUmoyACna2UK1gjOcRf4L
AG+J59+Kka9N0g==
-----END CERTIFICATE-----
Generated at Thu Oct 15 09:06:10 2026 by rpki-client