Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
File: LiSXk-WSSp8l86Co3ZlLN065N9I.mft (raw, json)
Hash identifier: 5ZlCODwDEFxIqcsj0xMv4jooro44ovRB92N2OstRFg8=
Subject key identifier: 63:55:0F:38:F2:18:2F:11:CC:0D:ED:FC:5A:93:1D:F4:A6:41:5D:14
Authority key identifier: 2E:24:97:93:E5:92:4A:9F:25:F3:A0:A8:DD:99:4B:37:4E:B9:37:D2
Certificate issuer: /CN=2e249793e5924a9f25f3a0a8dd994b374eb937d2
Certificate serial: 01A0CB904B11B259CB65E4636B3D1D7D715D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiSXk-WSSp8l86Co3ZlLN065N9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
Manifest number: 1A41
Signing time: Wed 23 Sep 2026 00:00:26 +0000
Manifest this update: Wed 23 Sep 2026 00:00:26 +0000
Manifest next update: Thu 24 Sep 2026 00:00:26 +0000
Files and hashes: 1: 7vsMsuJmzw7CzqWJp5zGFtPV02U.roa (hash: bK26Gz3BJI9pktI1Le1pz5ATU7aYExDizQZNhktvaPQ=)
2: LiSXk-WSSp8l86Co3ZlLN065N9I.crl (hash: WrjUNTnb4aLatYMGEYSZk4UPPnhG5EN/B5ErLSpCogI=)
3: a6hZcTn-XqxdaZ2xZ2ZKKRGTeno.roa (hash: ePG3wnShSG6k86StztGYRl/CsawQ81C9m+3zlwarufE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/LiSXk-WSSp8l86Co3ZlLN065N9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:90:4b:11:b2:59:cb:65:e4:63:6b:3d:1d:7d:71:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e249793e5924a9f25f3a0a8dd994b374eb937d2
Validity
Not Before: Sep 23 00:00:26 2026 GMT
Not After : Sep 24 00:00:26 2026 GMT
Subject: CN=63550f38f2182f11cc0dedfc5a931df4a6415d14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:30:01:d6:a5:fb:69:83:7e:3d:ce:ea:90:c8:
f6:68:2a:9d:91:4a:c6:7f:f6:8e:ba:62:9f:0e:21:
aa:d6:9f:30:d8:3e:40:b6:56:bc:c2:e3:7d:5a:89:
2e:20:82:70:fe:2b:14:a7:de:80:1c:1f:55:7e:39:
27:b4:b5:59:7b:30:cf:42:4e:9c:d6:ec:58:12:08:
73:44:21:b9:bd:6e:e5:cc:7f:48:f3:b0:c8:ec:b5:
25:34:48:ae:83:36:be:15:f1:be:70:cc:f5:5d:cd:
0a:c8:4c:fa:9e:00:06:5b:3b:1a:29:5e:31:93:d8:
ae:d3:78:ba:d0:96:ac:6f:34:db:8c:2f:34:a0:66:
e3:fc:c7:bd:3e:a3:db:48:24:78:6e:e2:ee:89:c0:
7d:03:a7:a0:35:42:d9:27:fe:f5:31:a1:f5:f3:6b:
46:5c:58:50:88:e4:de:4f:4f:a5:de:64:1c:4d:5a:
3d:70:a5:0c:86:9f:04:3f:34:24:ac:ac:c2:74:b2:
b1:77:0d:1d:6d:11:03:d8:47:2e:95:cb:5d:10:fc:
c1:3b:be:b6:3a:6b:8d:fc:df:f9:cd:9f:f2:4d:52:
c8:c7:6d:e3:0a:b5:e1:2b:24:83:b2:cb:a9:23:ce:
9e:31:b5:00:a7:c2:f5:57:cb:8c:ac:11:d1:36:ce:
f3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:55:0F:38:F2:18:2F:11:CC:0D:ED:FC:5A:93:1D:F4:A6:41:5D:14
X509v3 Authority Key Identifier:
keyid:2E:24:97:93:E5:92:4A:9F:25:F3:A0:A8:DD:99:4B:37:4E:B9:37:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiSXk-WSSp8l86Co3ZlLN065N9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:ae:56:80:9c:28:f5:50:48:ce:84:28:ac:c5:dd:40:2c:85:
52:fe:b4:9a:35:f1:f6:c7:7c:e1:54:d0:38:cb:3a:b8:d5:11:
e9:aa:eb:29:b8:bf:52:82:0d:49:12:b3:1d:22:23:2b:64:c8:
44:3e:26:ac:0f:36:2c:58:de:57:6d:51:7a:20:e0:77:ff:c2:
bb:46:d6:f6:d5:0a:18:24:d2:98:e4:eb:df:59:dd:aa:04:ef:
bf:47:ce:56:bd:17:b6:87:fe:77:b3:c3:95:61:ac:f9:14:8f:
cf:e1:72:85:d3:6a:2f:c3:f2:e6:a2:88:78:bb:e7:9b:0c:81:
c2:9b:e7:0f:6f:9b:3a:08:f1:8c:15:d3:a7:94:5e:48:5d:03:
d0:a5:9a:91:35:c2:19:2a:16:c2:da:4a:d3:d4:72:1e:4d:84:
4c:ff:f0:b0:78:48:db:0b:33:3a:ea:4d:1d:c9:b1:02:ef:9d:
a1:61:fa:3f:26:19:f4:7e:32:ec:4d:21:ed:4a:c9:3f:ee:db:
11:e0:be:25:50:19:87:32:5e:c6:72:96:30:9d:bf:52:c7:1b:
f0:6c:a1:7b:19:7a:8c:f6:2d:f0:da:33:d1:c8:09:30:cf:45:
ee:c5:8a:19:70:e8:4f:e4:9b:05:0e:99:6b:bf:03:76:16:af:
27:15:01:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDLkEsRslnLZeRjaz0dfXFdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlMjQ5NzkzZTU5MjRhOWYyNWYzYTBhOGRkOTk0YjM3NGVi
OTM3ZDIwHhcNMjYwOTIzMDAwMDI2WhcNMjYwOTI0MDAwMDI2WjAzMTEwLwYDVQQD
Eyg2MzU1MGYzOGYyMTgyZjExY2MwZGVkZmM1YTkzMWRmNGE2NDE1ZDE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljAB1qX7aYN+Pc7qkMj2aCqdkUrG
f/aOumKfDiGq1p8w2D5Atla8wuN9WokuIIJw/isUp96AHB9VfjkntLVZezDPQk6c
1uxYEghzRCG5vW7lzH9I87DI7LUlNEiugza+FfG+cMz1Xc0KyEz6ngAGWzsaKV4x
k9iu03i60JasbzTbjC80oGbj/Me9PqPbSCR4buLuicB9A6egNULZJ/71MaH182tG
XFhQiOTeT0+l3mQcTVo9cKUMhp8EPzQkrKzCdLKxdw0dbRED2EculctdEPzBO762
OmuN/N/5zZ/yTVLIx23jCrXhKySDssupI86eMbUAp8L1V8uMrBHRNs7zfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGNVDzjyGC8RzA3t/FqTHfSmQV0UMB8GA1UdIwQY
MBaAFC4kl5PlkkqfJfOgqN2ZSzdOuTfSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGlTWGstV1NTcDhsODZDbzNabExOMDY1TjlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9iZmJjOGUtZWFiNS00ZjIwLThlZWEt
OTZiZjE0M2ViNDUyLzEvTGlTWGstV1NTcDhsODZDbzNabExOMDY1TjlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9iZmJjOGUtZWFiNS00ZjIwLThlZWEtOTZiZjE0M2ViNDUy
LzEvTGlTWGstV1NTcDhsODZDbzNabExOMDY1TjlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwq5WgJwo
9VBIzoQorMXdQCyFUv60mjXx9sd84VTQOMs6uNUR6arrKbi/UoINSRKzHSIjK2TI
RD4mrA82LFjeV21ReiDgd//Cu0bW9tUKGCTSmOTr31ndqgTvv0fOVr0Xtof+d7PD
lWGs+RSPz+FyhdNqL8Py5qKIeLvnmwyBwpvnD2+bOgjxjBXTp5ReSF0D0KWakTXC
GSoWwtpK09RyHk2ETP/wsHhI2wszOupNHcmxAu+doWH6PyYZ9H4y7E0h7UrJP+7b
EeC+JVAZhzJexnKWMJ2/Uscb8Gyhexl6jPYt8Noz0cgJMM9F7sWKGXDoT+SbBQ6Z
a78DdhavJxUBYA==
-----END CERTIFICATE-----
Generated at Wed Sep 23 09:45:10 2026 by rpki-client