Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
File: LiSXk-WSSp8l86Co3ZlLN065N9I.mft (raw, json)
Hash identifier: dHD7qxS5CoMcLBIVR2I9yPbF1E5enX5I5ybsyiEARmc=
Subject key identifier: F9:66:01:5E:79:24:4D:99:F0:43:E8:05:AD:F0:EB:0A:0C:63:57:F7
Authority key identifier: 2E:24:97:93:E5:92:4A:9F:25:F3:A0:A8:DD:99:4B:37:4E:B9:37:D2
Certificate issuer: /CN=2e249793e5924a9f25f3a0a8dd994b374eb937d2
Certificate serial: 019FADBF8CA904530D13C9B006C91EE3612B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiSXk-WSSp8l86Co3ZlLN065N9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
Manifest number: 19AD
Signing time: Wed 29 Jul 2026 12:00:39 +0000
Manifest this update: Wed 29 Jul 2026 12:00:39 +0000
Manifest next update: Thu 30 Jul 2026 12:00:39 +0000
Files and hashes: 1: 7vsMsuJmzw7CzqWJp5zGFtPV02U.roa (hash: bK26Gz3BJI9pktI1Le1pz5ATU7aYExDizQZNhktvaPQ=)
2: LiSXk-WSSp8l86Co3ZlLN065N9I.crl (hash: TRhrvQqYNFXNIWuBRUm0f6BJCay6cfJ1z5oGKQ+xmBQ=)
3: a6hZcTn-XqxdaZ2xZ2ZKKRGTeno.roa (hash: ePG3wnShSG6k86StztGYRl/CsawQ81C9m+3zlwarufE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/LiSXk-WSSp8l86Co3ZlLN065N9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 12:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:bf:8c:a9:04:53:0d:13:c9:b0:06:c9:1e:e3:61:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e249793e5924a9f25f3a0a8dd994b374eb937d2
Validity
Not Before: Jul 29 12:00:39 2026 GMT
Not After : Jul 30 12:00:39 2026 GMT
Subject: CN=f966015e79244d99f043e805adf0eb0a0c6357f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fc:db:2d:33:f6:67:a9:7d:3e:29:c0:38:39:
35:b8:2a:34:05:a3:ed:49:45:52:f7:be:d5:45:da:
1e:05:ea:b9:c6:b2:aa:f5:15:34:8f:8d:ed:ab:30:
2e:74:60:f0:09:9a:b4:fb:fd:ba:93:70:b3:30:ec:
f3:21:22:97:9c:90:55:32:c0:f7:32:5e:21:90:c7:
dd:08:41:a4:b2:36:c4:ab:18:8e:e2:0f:1a:e1:59:
70:b7:d2:dd:38:0e:11:74:1a:76:f2:a1:b8:6c:76:
7e:df:34:8a:97:8c:a3:60:93:d7:bb:81:ad:3f:0a:
d3:6c:e0:3c:ad:bc:0d:50:ce:4d:1b:aa:39:37:6c:
2f:7c:71:2e:cf:a3:cf:26:e2:77:1b:b7:6d:d3:f0:
ab:e1:c5:96:07:d5:7a:4a:f5:33:66:ca:77:76:89:
89:74:9c:9f:48:e0:7c:1f:7c:7f:c9:1e:ad:78:7b:
02:8d:b0:e6:d4:97:2c:6a:b1:38:9a:f0:f6:df:95:
99:7e:86:c1:41:72:96:d1:1d:a8:6b:3a:75:87:f7:
ac:58:25:45:37:99:0c:62:e7:0f:c7:56:b0:62:fb:
c5:38:ac:90:65:69:0b:95:6d:46:c3:38:75:90:4f:
f3:d1:53:e1:75:4e:d8:b5:5b:39:d5:0a:6b:65:78:
14:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:66:01:5E:79:24:4D:99:F0:43:E8:05:AD:F0:EB:0A:0C:63:57:F7
X509v3 Authority Key Identifier:
keyid:2E:24:97:93:E5:92:4A:9F:25:F3:A0:A8:DD:99:4B:37:4E:B9:37:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiSXk-WSSp8l86Co3ZlLN065N9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:fc:f6:e3:3e:7c:62:cc:35:a7:bb:99:80:01:4a:15:2a:ba:
76:ac:66:ac:16:36:0a:bf:ed:18:cc:5f:ee:c5:82:a1:a5:13:
2d:c6:af:dd:39:e0:2f:58:5f:b1:53:c1:ea:7d:ef:de:43:2c:
72:a8:06:a9:38:be:51:5b:04:8a:e8:5e:9c:94:84:36:45:93:
4a:45:88:7b:b7:cc:0d:3c:15:c9:43:07:24:60:24:d0:73:cb:
e0:9e:ba:4e:81:a0:b8:db:d1:ef:96:e3:20:6c:de:00:01:93:
d1:e3:92:a0:5a:35:b9:15:6c:c1:5f:78:09:15:45:91:b4:ff:
f7:93:98:d1:a0:77:f5:3d:b8:2b:3d:12:07:ab:cc:62:fa:3f:
a6:d9:93:a3:00:53:4f:c8:9d:ee:fb:74:24:91:33:f4:3e:61:
48:1d:13:9d:7b:0a:d8:f8:18:de:42:76:68:37:a3:5d:2a:f5:
68:0c:00:de:9d:9b:48:74:56:50:5b:74:9f:5c:d8:f1:78:69:
c8:b1:cd:1c:95:6a:a8:bf:7e:c2:da:64:63:1c:72:1c:6c:97:
ff:ca:5c:91:b0:c9:d2:46:01:5b:0e:2a:f8:50:aa:27:4d:21:
e4:75:93:2c:10:a2:26:e8:fa:df:8e:67:f3:dd:f7:38:c9:bb:
ae:4d:f0:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 18:27:28 2026 by rpki-client