Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
File: LiSXk-WSSp8l86Co3ZlLN065N9I.mft (raw, json)
Hash identifier: lkQPkLR0OYXDuLGI3BZWbyQNYRU6NUwpeZ5VABU+CNE=
Subject key identifier: 6F:8C:D1:55:69:FB:95:3F:E1:8C:87:13:47:B3:B8:A2:F8:EA:7C:88
Authority key identifier: 2E:24:97:93:E5:92:4A:9F:25:F3:A0:A8:DD:99:4B:37:4E:B9:37:D2
Certificate issuer: /CN=2e249793e5924a9f25f3a0a8dd994b374eb937d2
Certificate serial: 01A1DFB9EAB600140378FF83800BF764A5D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiSXk-WSSp8l86Co3ZlLN065N9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
Manifest number: 1AD0
Signing time: Sun 15 Nov 2026 15:01:05 +0000
Manifest this update: Sun 15 Nov 2026 15:01:05 +0000
Manifest next update: Mon 16 Nov 2026 15:01:05 +0000
Files and hashes: 1: 7vsMsuJmzw7CzqWJp5zGFtPV02U.roa (hash: bK26Gz3BJI9pktI1Le1pz5ATU7aYExDizQZNhktvaPQ=)
2: LiSXk-WSSp8l86Co3ZlLN065N9I.crl (hash: IyXsalI8fM5amOphvXVTLKhBxx4fsQtTqKtIAyjzJ4A=)
3: a6hZcTn-XqxdaZ2xZ2ZKKRGTeno.roa (hash: ePG3wnShSG6k86StztGYRl/CsawQ81C9m+3zlwarufE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/LiSXk-WSSp8l86Co3ZlLN065N9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:b9:ea:b6:00:14:03:78:ff:83:80:0b:f7:64:a5:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e249793e5924a9f25f3a0a8dd994b374eb937d2
Validity
Not Before: Nov 15 15:01:05 2026 GMT
Not After : Nov 16 15:01:05 2026 GMT
Subject: CN=6f8cd15569fb953fe18c871347b3b8a2f8ea7c88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:bb:d7:57:25:84:49:3a:66:3e:ad:34:f9:5d:
8c:8b:a6:de:a6:00:d7:cb:3d:ae:48:2e:86:56:6c:
2a:1b:af:16:f6:09:dc:5a:31:07:b8:1f:54:0e:21:
3a:28:a1:84:e7:67:22:79:8d:06:29:7b:f4:2a:cb:
ee:27:b5:44:9e:4a:84:28:18:db:f5:0c:f3:ec:2c:
d1:e0:5b:bd:e5:2b:3b:66:93:12:9f:46:a2:85:4b:
20:01:02:ec:0d:4d:1d:e8:1e:1f:14:71:67:20:c7:
7f:13:51:20:52:c3:c9:1e:12:34:4c:59:1b:81:dc:
61:cf:41:d8:17:fd:98:05:a9:ff:99:cb:00:4b:b1:
87:c1:0c:2f:96:5f:a8:9b:4d:77:0c:7a:60:b0:19:
0b:65:aa:3a:db:f5:da:71:ce:62:53:c4:eb:45:68:
cf:5e:40:c9:aa:18:d2:fb:a2:4e:00:34:b5:54:a9:
b2:bb:99:33:14:85:f5:54:c5:23:46:da:9f:18:46:
a4:2c:fc:6c:ae:3b:d0:b7:62:fc:dd:aa:8e:be:7a:
05:f0:8a:d4:8d:3a:86:3f:d3:9b:c4:35:6a:a6:51:
29:4a:cd:4f:e1:28:55:ad:0c:e8:13:ee:b8:7e:aa:
e7:ae:c8:15:45:e0:49:97:b0:ca:c9:df:52:46:ad:
88:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:8C:D1:55:69:FB:95:3F:E1:8C:87:13:47:B3:B8:A2:F8:EA:7C:88
X509v3 Authority Key Identifier:
keyid:2E:24:97:93:E5:92:4A:9F:25:F3:A0:A8:DD:99:4B:37:4E:B9:37:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiSXk-WSSp8l86Co3ZlLN065N9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:ab:4b:63:79:29:4d:88:66:79:41:3a:ba:18:87:fc:86:fb:
95:7a:04:16:50:f4:f5:24:3a:d9:74:f5:80:83:d6:56:3f:24:
c0:94:7b:42:06:d4:30:2e:0c:d6:ac:68:ff:98:9a:49:0b:f6:
d2:0a:fd:f5:3f:b4:66:e2:db:de:5a:34:69:94:f3:66:39:3d:
9e:a1:f4:8d:68:6d:23:7c:d4:7d:49:8a:ad:ff:ef:14:66:dc:
e8:67:07:6a:9c:e5:24:cf:2c:e9:c4:c2:de:63:d3:3f:de:fa:
04:b7:18:d2:0b:eb:0d:44:f3:93:5f:e0:7c:86:e3:93:46:32:
58:4c:25:5d:aa:e0:09:bd:d2:5f:ce:76:67:81:4d:17:2a:4e:
8d:69:f3:13:5a:12:35:2a:f9:73:9e:31:7f:d6:24:90:8b:62:
e6:27:51:02:53:8b:52:1a:5f:09:7f:37:48:13:8b:1e:d6:9a:
dc:16:7c:9b:58:5d:ee:04:7b:64:e4:76:4c:b7:60:57:27:4d:
a5:ad:22:c9:77:cc:54:f5:42:bf:65:cf:76:dc:02:a6:e0:af:
12:18:e9:f6:0f:38:f9:90:bc:df:61:58:2f:a7:2a:4e:51:ee:
05:46:a8:42:0f:49:b3:36:d5:6f:d0:55:bb:a8:31:b3:63:da:
cc:23:29:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 22:40:31 2026 by rpki-client