Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lris-hevk77b78b-tGiPmGBLiq4.mft
File: lris-hevk77b78b-tGiPmGBLiq4.mft (raw, json)
Hash identifier: x7HNSPLYnTzGm57+/02D9D20EUTMbIZy5vz5hDvIp0s=
Subject key identifier: BB:49:07:0C:CD:1B:52:9D:29:C4:E7:91:4A:B4:0D:41:A8:47:D9:1F
Authority key identifier: 96:B8:AC:FA:17:AF:93:BE:DB:EF:C6:FE:B4:68:8F:98:60:4B:8A:AE
Certificate issuer: /CN=96b8acfa17af93bedbefc6feb4688f98604b8aae
Certificate serial: 01A0B61AF03EC0BA77FB2E965E566D438225
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lris-hevk77b78b-tGiPmGBLiq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lris-hevk77b78b-tGiPmGBLiq4.mft
Manifest number: 14E9
Signing time: Fri 18 Sep 2026 20:00:13 +0000
Manifest this update: Fri 18 Sep 2026 20:00:13 +0000
Manifest next update: Sat 19 Sep 2026 20:00:13 +0000
Files and hashes: 1: 1-_1ND71xAg_YzyTREVjF7BcT090.roa (hash: q6/3yl36YPQO21Sef3A+lExC26TvJGdypkO4TEkJLcg=)
2: lris-hevk77b78b-tGiPmGBLiq4.crl (hash: iBz2+kVEY+4VXI9BjDwn3Syz2J9X6bZGHNmb5ghkUHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lris-hevk77b78b-tGiPmGBLiq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lris-hevk77b78b-tGiPmGBLiq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lris-hevk77b78b-tGiPmGBLiq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 20:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b6:1a:f0:3e:c0:ba:77:fb:2e:96:5e:56:6d:43:82:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96b8acfa17af93bedbefc6feb4688f98604b8aae
Validity
Not Before: Sep 18 20:00:13 2026 GMT
Not After : Sep 19 20:00:13 2026 GMT
Subject: CN=bb49070ccd1b529d29c4e7914ab40d41a847d91f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:96:b4:75:e6:06:0c:4d:59:a8:6e:53:9f:00:
a2:cb:8a:be:fd:9b:c8:8c:56:0c:fc:51:01:63:89:
96:3e:5e:3d:a6:d2:6d:59:a7:5b:8e:d8:13:d7:f5:
6f:f3:13:61:28:ad:a4:ad:65:51:6c:5d:88:34:86:
08:c8:cc:3c:06:6a:28:3a:ad:1d:46:77:b9:27:f8:
4f:45:c4:14:b7:a1:34:9c:eb:c2:45:cc:65:b2:c6:
1c:7f:0f:7a:c2:f9:dc:0c:7e:fd:02:e3:d4:97:7a:
2e:22:a7:29:2d:05:75:8d:ec:bc:bd:cc:aa:b5:d8:
b5:10:75:6f:ba:14:41:44:2a:e7:5c:ad:a2:88:22:
51:c4:c0:67:36:44:51:f9:39:1e:41:c2:75:38:40:
e7:ec:ad:c7:d8:72:4b:ac:36:95:2e:98:de:07:14:
88:75:3d:b9:8d:95:3a:1d:b9:e5:d2:68:13:47:ff:
5b:c6:56:e7:22:48:93:51:ac:a4:67:e7:41:7e:14:
66:44:e8:23:8f:ed:c0:fc:98:ba:3f:bd:64:48:f2:
5c:18:1f:a6:02:7a:a8:4f:06:a2:22:b3:aa:d7:0e:
5c:1f:e2:6a:80:85:a7:9f:84:c5:0b:8f:ec:e0:e7:
08:01:c0:57:22:ca:6c:e9:a8:75:e4:19:f6:e0:4e:
81:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:49:07:0C:CD:1B:52:9D:29:C4:E7:91:4A:B4:0D:41:A8:47:D9:1F
X509v3 Authority Key Identifier:
keyid:96:B8:AC:FA:17:AF:93:BE:DB:EF:C6:FE:B4:68:8F:98:60:4B:8A:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lris-hevk77b78b-tGiPmGBLiq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lris-hevk77b78b-tGiPmGBLiq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lris-hevk77b78b-tGiPmGBLiq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:26:49:60:60:c2:61:87:96:b6:56:e8:6d:55:94:5e:d2:33:
ca:9e:b5:aa:74:4d:30:e5:11:00:67:3d:a1:6a:41:fc:57:65:
86:f1:46:5c:7a:0b:b4:a5:48:40:f2:c6:4a:bd:92:5c:d3:92:
92:c5:dd:bf:6e:58:d3:59:b9:79:db:e1:5b:01:24:75:8b:8c:
3d:b9:20:23:8f:ea:31:65:7d:cc:91:18:91:d0:3b:3a:63:62:
6b:3f:c2:d9:c6:74:d2:e2:f3:f3:5a:d9:39:0a:56:79:1c:09:
c8:78:f2:91:3a:d5:fd:91:8a:7e:0a:8c:0b:e6:4d:8f:b3:73:
21:96:e8:64:40:57:81:b3:6a:9d:aa:5b:bf:2d:70:9e:47:08:
bc:c6:d5:25:00:44:75:e1:17:9c:57:bc:db:9c:96:9a:0e:1d:
fb:68:4b:8e:22:8a:3f:c5:98:5f:d1:63:53:a2:65:1d:23:96:
1f:5d:57:80:5f:e5:72:0c:52:dd:b5:2b:86:5a:1e:f5:0a:22:
cc:34:24:d1:d1:70:91:d6:4c:66:b9:32:18:cd:b5:f0:58:7c:
74:3c:f1:82:2f:79:99:7f:a7:18:43:5e:89:32:42:06:8b:a6:
42:86:b9:94:84:3f:d3:a2:c6:47:c8:5a:c5:00:3a:a4:59:d0:
1b:e1:7d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 05:07:09 2026 by rpki-client