Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
File: LiSXk-WSSp8l86Co3ZlLN065N9I.mft (raw, json)
Hash identifier: qr0rlxijb51TXq4U54Y9mPVlBMIurhwHAbETR6/YvJI=
Subject key identifier: 35:A9:60:4D:EF:9D:82:8C:CD:67:C8:79:B3:5B:9F:7F:70:AE:65:2F
Authority key identifier: 2E:24:97:93:E5:92:4A:9F:25:F3:A0:A8:DD:99:4B:37:4E:B9:37:D2
Certificate issuer: /CN=2e249793e5924a9f25f3a0a8dd994b374eb937d2
Certificate serial: 019F92B67C1FCE717D9A8A4D1C5D936F7392
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiSXk-WSSp8l86Co3ZlLN065N9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
Manifest number: 199F
Signing time: Fri 24 Jul 2026 06:01:00 +0000
Manifest this update: Fri 24 Jul 2026 06:01:00 +0000
Manifest next update: Sat 25 Jul 2026 06:01:00 +0000
Files and hashes: 1: 7vsMsuJmzw7CzqWJp5zGFtPV02U.roa (hash: bK26Gz3BJI9pktI1Le1pz5ATU7aYExDizQZNhktvaPQ=)
2: LiSXk-WSSp8l86Co3ZlLN065N9I.crl (hash: b5HV5lKKF+X7U6PLJGhWc12+pDoEcFaQ+1Rz4cBReMo=)
3: a6hZcTn-XqxdaZ2xZ2ZKKRGTeno.roa (hash: ePG3wnShSG6k86StztGYRl/CsawQ81C9m+3zlwarufE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/LiSXk-WSSp8l86Co3ZlLN065N9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:7c:1f:ce:71:7d:9a:8a:4d:1c:5d:93:6f:73:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e249793e5924a9f25f3a0a8dd994b374eb937d2
Validity
Not Before: Jul 24 06:01:00 2026 GMT
Not After : Jul 25 06:01:00 2026 GMT
Subject: CN=35a9604def9d828ccd67c879b35b9f7f70ae652f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:24:3a:d3:ed:f6:67:20:f0:17:5d:57:4e:ee:
2a:37:ea:2a:cc:2c:06:33:52:af:d2:85:cc:0f:46:
11:fd:47:41:69:e7:0e:49:87:4e:c5:06:9d:ba:58:
eb:65:68:0f:28:ac:b5:97:5d:0c:37:b5:e3:a5:41:
2d:42:74:ce:0a:6d:94:29:2e:0e:f7:3d:79:4d:21:
db:7f:55:b6:e3:50:97:9b:8a:7d:03:fd:21:68:24:
76:02:0e:9d:5c:1c:ed:34:43:9b:01:ff:61:08:f6:
89:f4:44:21:7e:cc:c2:e5:db:32:8f:2a:d3:53:06:
f5:cf:87:9c:96:4c:97:2f:e6:7c:cf:26:31:09:a6:
c9:3e:9e:de:a1:a8:e5:98:4f:a6:7e:1b:42:39:62:
6b:1c:9e:a4:b1:e9:ba:01:e2:5c:1b:00:8c:4d:eb:
5d:a9:72:a7:84:2d:df:57:5a:c4:4b:7f:d8:79:54:
2b:73:08:5f:fc:e0:51:11:90:e8:88:5b:7f:b5:15:
b8:db:05:1b:b7:35:ad:69:10:e5:b0:f1:4a:1f:8f:
ff:2b:c8:3e:a4:36:a7:1d:34:79:ee:e0:7a:0c:43:
62:34:f5:86:8f:cd:b9:e0:42:a8:82:bd:8d:82:5e:
29:ba:a0:7f:a2:0c:6c:bf:57:80:f2:0c:56:58:38:
4a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:A9:60:4D:EF:9D:82:8C:CD:67:C8:79:B3:5B:9F:7F:70:AE:65:2F
X509v3 Authority Key Identifier:
keyid:2E:24:97:93:E5:92:4A:9F:25:F3:A0:A8:DD:99:4B:37:4E:B9:37:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiSXk-WSSp8l86Co3ZlLN065N9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:91:cf:08:b3:44:a8:11:be:3f:b0:b9:1a:2c:9e:e8:db:3f:
e4:55:bc:55:ab:1a:3f:df:d9:b6:b1:0f:1c:b2:a8:3b:e0:ea:
e0:b7:d8:49:f2:9e:05:5f:b3:0b:f2:c2:61:57:f8:77:f2:67:
bb:71:58:43:4b:3b:83:9b:c6:87:5c:ac:cd:94:50:7e:df:23:
a7:ca:f4:ae:8b:9b:97:b7:1c:03:05:18:a9:cc:43:0b:73:00:
c6:d7:3b:98:a7:02:01:85:82:29:c1:b2:48:13:08:e2:b3:cd:
12:a1:09:16:4b:57:21:a3:fa:bd:c3:40:3b:e0:e8:3b:c7:3a:
32:d8:2c:09:2f:e9:9d:3d:49:6f:7d:42:1c:2a:28:4b:43:b6:
83:a4:e0:92:c2:e6:43:66:df:28:5b:52:72:17:15:df:0b:d7:
32:94:6a:f9:f3:64:b2:83:81:81:76:4e:b8:07:e8:a4:1d:f7:
4a:f6:33:7b:25:bd:56:63:ed:da:4f:bc:cc:23:33:9b:cd:00:
95:d2:9a:6c:bd:e3:95:0a:6d:46:ef:9f:70:90:2e:47:74:d9:
ed:12:c4:8a:7a:5f:4e:80:7c:03:19:a6:c0:79:92:43:40:b9:
5b:1b:28:ea:be:a5:73:4a:f4:55:7f:b3:61:28:31:c9:3e:5f:
ec:25:e7:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+StnwfznF9mopNHF2Tb3OSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlMjQ5NzkzZTU5MjRhOWYyNWYzYTBhOGRkOTk0YjM3NGVi
OTM3ZDIwHhcNMjYwNzI0MDYwMTAwWhcNMjYwNzI1MDYwMTAwWjAzMTEwLwYDVQQD
EygzNWE5NjA0ZGVmOWQ4MjhjY2Q2N2M4NzliMzViOWY3ZjcwYWU2NTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCQ60+32ZyDwF11XTu4qN+oqzCwG
M1Kv0oXMD0YR/UdBaecOSYdOxQaduljrZWgPKKy1l10MN7XjpUEtQnTOCm2UKS4O
9z15TSHbf1W241CXm4p9A/0haCR2Ag6dXBztNEObAf9hCPaJ9EQhfszC5dsyjyrT
Uwb1z4eclkyXL+Z8zyYxCabJPp7eoajlmE+mfhtCOWJrHJ6ksem6AeJcGwCMTetd
qXKnhC3fV1rES3/YeVQrcwhf/OBREZDoiFt/tRW42wUbtzWtaRDlsPFKH4//K8g+
pDanHTR57uB6DENiNPWGj8254EKogr2Ngl4puqB/ogxsv1eA8gxWWDhK/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDWpYE3vnYKMzWfIebNbn39wrmUvMB8GA1UdIwQY
MBaAFC4kl5PlkkqfJfOgqN2ZSzdOuTfSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGlTWGstV1NTcDhsODZDbzNabExOMDY1TjlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9iZmJjOGUtZWFiNS00ZjIwLThlZWEt
OTZiZjE0M2ViNDUyLzEvTGlTWGstV1NTcDhsODZDbzNabExOMDY1TjlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9iZmJjOGUtZWFiNS00ZjIwLThlZWEtOTZiZjE0M2ViNDUy
LzEvTGlTWGstV1NTcDhsODZDbzNabExOMDY1TjlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyJHPCLNE
qBG+P7C5Giye6Ns/5FW8VasaP9/ZtrEPHLKoO+Dq4LfYSfKeBV+zC/LCYVf4d/Jn
u3FYQ0s7g5vGh1yszZRQft8jp8r0roubl7ccAwUYqcxDC3MAxtc7mKcCAYWCKcGy
SBMI4rPNEqEJFktXIaP6vcNAO+DoO8c6MtgsCS/pnT1Jb31CHCooS0O2g6TgksLm
Q2bfKFtSchcV3wvXMpRq+fNksoOBgXZOuAfopB33SvYzeyW9VmPt2k+8zCMzm80A
ldKabL3jlQptRu+fcJAuR3TZ7RLEinpfToB8AxmmwHmSQ0C5Wxso6r6lc0r0VX+z
YSgxyT5f7CXnBA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:53:21 2026 by rpki-client