Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
File: LiSXk-WSSp8l86Co3ZlLN065N9I.mft (raw, json)
Hash identifier: s1gb8mdIDMwoHfqyBGSEY90ubvy/EzeJ8DB0hZed8V4=
Subject key identifier: C1:A7:45:1C:4E:55:6D:94:B2:01:E2:54:4C:7F:B5:6B:2E:7F:40:E3
Authority key identifier: 2E:24:97:93:E5:92:4A:9F:25:F3:A0:A8:DD:99:4B:37:4E:B9:37:D2
Certificate issuer: /CN=2e249793e5924a9f25f3a0a8dd994b374eb937d2
Certificate serial: 019EC035D8044248AB70C0246C5E57753972
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiSXk-WSSp8l86Co3ZlLN065N9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
Manifest number: 1932
Signing time: Sat 13 Jun 2026 09:00:14 +0000
Manifest this update: Sat 13 Jun 2026 09:00:14 +0000
Manifest next update: Sun 14 Jun 2026 09:00:14 +0000
Files and hashes: 1: 7vsMsuJmzw7CzqWJp5zGFtPV02U.roa (hash: bK26Gz3BJI9pktI1Le1pz5ATU7aYExDizQZNhktvaPQ=)
2: LiSXk-WSSp8l86Co3ZlLN065N9I.crl (hash: Qdn9/H2F5OD5UOA1IaBEXEXnRUQ7iGXl2XWnBg6EeF0=)
3: a6hZcTn-XqxdaZ2xZ2ZKKRGTeno.roa (hash: ePG3wnShSG6k86StztGYRl/CsawQ81C9m+3zlwarufE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/LiSXk-WSSp8l86Co3ZlLN065N9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:35:d8:04:42:48:ab:70:c0:24:6c:5e:57:75:39:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e249793e5924a9f25f3a0a8dd994b374eb937d2
Validity
Not Before: Jun 13 09:00:14 2026 GMT
Not After : Jun 14 09:00:14 2026 GMT
Subject: CN=c1a7451c4e556d94b201e2544c7fb56b2e7f40e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b6:e9:2a:ba:1b:08:bf:25:39:45:c0:f6:15:
6e:e0:fb:0b:ec:5e:f6:4d:a2:22:74:1e:59:66:7c:
fd:96:68:6c:e1:c7:b6:7c:50:8a:63:5a:7e:27:b3:
7f:2a:4b:cc:b4:b5:4d:01:73:db:1d:b0:20:53:b4:
9a:72:b5:a7:3c:47:ec:55:0c:eb:ca:bf:6a:fd:8e:
cf:90:a5:c2:1a:ed:cc:24:88:c6:35:97:8d:2d:70:
f3:a5:0c:ef:7e:2e:83:18:49:ee:03:2a:53:f8:bc:
ce:05:c4:5b:24:e5:4d:60:30:91:57:97:0e:0d:0e:
04:26:84:ce:c5:93:2a:bf:9f:a6:ff:b7:fc:3e:d4:
77:36:35:63:87:2d:41:76:5c:5e:57:81:49:48:0d:
88:3f:f4:15:73:d1:15:7b:16:75:89:23:b9:5d:20:
23:20:dd:93:7d:01:89:48:d1:3a:c5:82:d6:2a:ea:
ef:76:17:17:71:55:c5:2c:cb:d6:cf:d3:6f:ce:1e:
aa:60:7f:bd:54:55:dc:35:be:9c:35:df:33:85:4c:
14:76:e0:ae:0a:20:c8:2f:85:68:73:40:2d:91:c3:
7a:8d:6f:8d:ee:bc:f1:6f:e4:38:5e:53:00:b7:e3:
49:89:da:fc:31:a4:e4:0e:ba:4b:f9:25:bd:8e:ca:
75:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:A7:45:1C:4E:55:6D:94:B2:01:E2:54:4C:7F:B5:6B:2E:7F:40:E3
X509v3 Authority Key Identifier:
keyid:2E:24:97:93:E5:92:4A:9F:25:F3:A0:A8:DD:99:4B:37:4E:B9:37:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiSXk-WSSp8l86Co3ZlLN065N9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:18:38:4b:59:5b:82:fd:67:a0:f7:5b:c2:b5:40:f5:91:d1:
c0:ee:03:49:80:b9:43:a3:5a:c6:36:02:30:7f:5a:fe:7d:7a:
1c:ac:a3:c2:f8:76:ad:94:68:0b:60:e3:60:bf:fd:bd:9f:18:
fd:da:a4:95:5f:26:3b:f7:d3:a3:00:9a:a7:d9:d5:05:85:d6:
93:65:a7:e3:57:bc:40:2b:de:13:80:99:6a:72:54:eb:65:f1:
27:65:79:b3:34:77:e7:d9:ba:e6:dd:bd:a8:cb:87:55:f8:b7:
eb:50:a2:6a:ca:02:53:51:2e:39:ef:07:56:bb:e5:6f:ba:b9:
65:ef:ee:41:55:f8:16:80:c8:ff:0a:ae:69:28:df:28:d7:7f:
ae:8e:37:7c:fe:b8:52:d2:f3:fd:a5:ef:12:db:af:4e:38:89:
fc:16:4e:16:5a:a1:22:23:7d:88:9f:18:14:69:56:97:f9:d8:
bf:cd:d4:b1:18:94:f1:64:a3:86:ea:4e:db:ac:c1:82:50:c1:
2e:44:92:fd:01:c9:8a:8b:2f:72:51:db:d2:0f:1d:a2:9b:96:
21:62:6a:70:ea:59:24:c1:07:bc:b0:50:f5:39:c8:ab:e5:46:
da:d3:99:2e:7d:c9:45:13:4a:f5:da:37:c4:66:de:e4:68:58:
0c:8e:8b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:19:57 2026 by rpki-client