Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
File: LiSXk-WSSp8l86Co3ZlLN065N9I.mft (raw, json)
Hash identifier: NsaznBlI1pgSu0Fq7UgUajXa1vzyrG75qGvCpPvARMo=
Subject key identifier: C8:21:46:D2:47:6B:68:03:1E:88:E1:D0:15:BA:7C:82:A8:C0:A4:4E
Authority key identifier: 2E:24:97:93:E5:92:4A:9F:25:F3:A0:A8:DD:99:4B:37:4E:B9:37:D2
Certificate issuer: /CN=2e249793e5924a9f25f3a0a8dd994b374eb937d2
Certificate serial: 019D98BDE9C113E4931E5371EE3BD12607E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiSXk-WSSp8l86Co3ZlLN065N9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
Manifest number: 1899
Signing time: Fri 17 Apr 2026 00:01:16 +0000
Manifest this update: Fri 17 Apr 2026 00:01:16 +0000
Manifest next update: Sat 18 Apr 2026 00:01:16 +0000
Files and hashes: 1: 7vsMsuJmzw7CzqWJp5zGFtPV02U.roa (hash: bK26Gz3BJI9pktI1Le1pz5ATU7aYExDizQZNhktvaPQ=)
2: LiSXk-WSSp8l86Co3ZlLN065N9I.crl (hash: cGDB1dAtzwUb7LHbN3qSkv0/SH6Lka3/TZUZm+Riypc=)
3: a6hZcTn-XqxdaZ2xZ2ZKKRGTeno.roa (hash: ePG3wnShSG6k86StztGYRl/CsawQ81C9m+3zlwarufE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/LiSXk-WSSp8l86Co3ZlLN065N9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:e9:c1:13:e4:93:1e:53:71:ee:3b:d1:26:07:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e249793e5924a9f25f3a0a8dd994b374eb937d2
Validity
Not Before: Apr 17 00:01:16 2026 GMT
Not After : Apr 18 00:01:16 2026 GMT
Subject: CN=c82146d2476b68031e88e1d015ba7c82a8c0a44e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b2:bb:ba:14:b2:76:f1:4e:d8:e3:39:aa:0d:
cc:2f:86:74:6a:bf:e1:26:df:e2:a6:f5:4c:73:16:
7a:8c:12:41:16:c3:3d:4e:7b:e4:c7:2c:0a:44:51:
9b:52:ea:d9:be:50:ca:1e:d2:69:76:61:71:fa:2a:
0f:3d:de:c3:4d:00:2b:c9:69:14:31:27:0d:99:64:
d7:70:76:6e:ff:87:db:44:49:25:57:69:e3:05:9c:
80:af:8d:dc:8d:f1:c6:4d:2d:c8:be:8c:3e:d2:10:
0d:10:fb:35:f1:9a:58:a5:e1:49:33:09:98:a2:39:
23:e1:5e:2c:86:9b:54:09:1d:4e:a0:8e:24:c9:d7:
9c:85:b0:63:56:c8:6e:26:08:a6:e8:95:1d:6c:eb:
21:cd:1b:c2:ea:90:f5:2f:1c:78:17:20:d6:51:b8:
69:e0:17:e6:cd:2b:e0:c0:bc:fd:6f:7e:6a:ab:90:
e1:8e:6a:d8:cf:2e:9e:06:d6:d4:88:73:c9:a6:3d:
3f:28:62:a8:c8:bd:20:50:4a:08:69:84:c1:63:5d:
c5:6f:8d:f9:c0:fe:c4:cc:02:b4:3b:45:30:bb:54:
04:b8:5f:e0:87:b0:42:06:b4:44:5e:57:43:bb:17:
53:f3:86:ae:a3:76:64:eb:19:bc:d5:5a:9d:ee:80:
45:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:21:46:D2:47:6B:68:03:1E:88:E1:D0:15:BA:7C:82:A8:C0:A4:4E
X509v3 Authority Key Identifier:
keyid:2E:24:97:93:E5:92:4A:9F:25:F3:A0:A8:DD:99:4B:37:4E:B9:37:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiSXk-WSSp8l86Co3ZlLN065N9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:32:0c:ed:49:b8:f3:1d:fb:71:c3:b1:32:f2:66:88:9b:c2:
05:6e:c3:5a:f5:61:f1:dc:76:5a:b8:3c:b3:ac:f9:c6:15:f1:
32:b3:76:57:17:e9:a8:d3:da:34:68:a2:be:3e:63:65:a7:90:
cb:1a:3a:2b:9e:5e:9c:5f:0d:25:a3:76:15:f0:5e:60:35:fe:
7a:a2:f4:74:3f:af:65:1f:56:8a:67:b2:1c:8b:8e:34:43:43:
cb:64:45:79:34:31:bf:c0:43:b2:da:96:7e:61:84:53:29:1a:
74:f6:79:2c:8b:d4:2b:0d:c5:e2:b8:0b:37:35:57:75:8b:e8:
7b:22:7f:77:04:7c:2d:d1:18:32:92:c0:c4:74:e8:a9:1f:da:
67:01:ff:f4:2f:ce:8d:9e:d0:59:42:16:b6:cb:66:c2:0c:d0:
db:9f:2d:77:45:56:7f:cd:88:4d:c2:d9:ff:a9:33:8e:93:71:
ba:27:63:82:12:99:46:ad:06:62:cb:6d:53:c9:49:b9:d8:51:
5e:19:5b:82:a7:e7:5a:ce:49:dc:59:90:68:20:88:fa:1c:e8:
ad:64:62:e6:42:25:97:28:1a:91:09:20:3b:f3:7e:3e:9c:08:
b1:90:4a:84:4c:13:4a:c5:eb:16:ba:20:ef:34:83:cf:1a:ba:
83:a0:db:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:00:14 2026 by rpki-client