Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
File: LiSXk-WSSp8l86Co3ZlLN065N9I.mft (raw, json)
Hash identifier: RZp15B+IA/dDTvaKci4zf1zH1FXxGM3IeVCQ1EBJAnU=
Subject key identifier: 6D:A6:66:6E:C7:61:6C:1F:8B:02:AD:B6:95:6A:10:33:1D:AB:81:7B
Authority key identifier: 2E:24:97:93:E5:92:4A:9F:25:F3:A0:A8:DD:99:4B:37:4E:B9:37:D2
Certificate issuer: /CN=2e249793e5924a9f25f3a0a8dd994b374eb937d2
Certificate serial: 019E1DFE10DAB53AEA7B1D11EEA58D7C1CE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiSXk-WSSp8l86Co3ZlLN065N9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
Manifest number: 18DE
Signing time: Tue 12 May 2026 21:00:50 +0000
Manifest this update: Tue 12 May 2026 21:00:50 +0000
Manifest next update: Wed 13 May 2026 21:00:50 +0000
Files and hashes: 1: 7vsMsuJmzw7CzqWJp5zGFtPV02U.roa (hash: bK26Gz3BJI9pktI1Le1pz5ATU7aYExDizQZNhktvaPQ=)
2: LiSXk-WSSp8l86Co3ZlLN065N9I.crl (hash: RsaoL+q8X20SW21aJoNahXW90vgklgcwD89NNcI1rYg=)
3: a6hZcTn-XqxdaZ2xZ2ZKKRGTeno.roa (hash: ePG3wnShSG6k86StztGYRl/CsawQ81C9m+3zlwarufE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/LiSXk-WSSp8l86Co3ZlLN065N9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:10:da:b5:3a:ea:7b:1d:11:ee:a5:8d:7c:1c:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e249793e5924a9f25f3a0a8dd994b374eb937d2
Validity
Not Before: May 12 21:00:50 2026 GMT
Not After : May 13 21:00:50 2026 GMT
Subject: CN=6da6666ec7616c1f8b02adb6956a10331dab817b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b0:de:71:8a:2b:7b:4c:8f:71:6e:14:ce:f4:
96:0e:5e:0f:1e:8b:bb:c9:fc:f3:5c:40:6b:5a:04:
53:43:28:af:80:1e:96:a7:31:06:03:cc:e2:38:2b:
47:bb:ef:85:dc:93:28:83:44:d3:0f:4d:fa:32:5e:
7d:77:3d:27:1d:92:38:23:25:0b:59:f4:3f:ee:4c:
4a:d3:47:31:a7:69:fb:24:0a:e5:dc:49:3c:25:87:
2e:04:c6:69:f2:7a:95:cd:81:c5:09:62:29:f5:3c:
63:11:4b:c6:d1:e9:ac:86:29:da:b8:93:e3:15:cc:
5e:00:1d:09:38:4b:a8:13:19:37:a9:a4:6a:65:31:
e9:75:82:90:5f:17:67:68:09:a9:99:91:d7:4d:e0:
d9:63:d1:73:f6:db:1e:8e:58:4f:8b:bc:ce:65:52:
71:a4:de:b1:ec:e0:87:d7:50:ce:39:74:59:59:f9:
8c:78:4d:d0:6f:96:c0:42:e0:35:4e:a4:d6:39:59:
96:06:37:64:8b:a2:76:31:6b:31:05:55:b0:ed:44:
07:80:1a:be:77:d3:6d:d6:e9:c2:fa:c8:9f:65:ff:
20:ab:79:c0:bd:3f:fb:9e:1c:d1:93:5f:c7:10:32:
4e:02:9f:b5:9e:ce:68:7d:fb:6a:63:d3:67:79:44:
a8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:A6:66:6E:C7:61:6C:1F:8B:02:AD:B6:95:6A:10:33:1D:AB:81:7B
X509v3 Authority Key Identifier:
keyid:2E:24:97:93:E5:92:4A:9F:25:F3:A0:A8:DD:99:4B:37:4E:B9:37:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiSXk-WSSp8l86Co3ZlLN065N9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:08:46:f9:32:ea:5a:9f:73:f2:e9:26:df:7a:1f:9f:8d:47:
c3:89:75:d8:e8:88:02:15:f9:17:57:95:39:f4:19:e9:98:5c:
40:1d:93:0b:cf:1a:4f:ca:13:6f:24:92:11:95:c6:03:e0:79:
45:07:af:7d:b0:83:92:43:bd:7f:84:71:59:27:cc:57:af:96:
dd:cd:5b:dc:21:19:6c:72:cd:f9:09:c3:2c:f0:c1:c0:a9:01:
ec:0c:0f:29:5b:55:6e:f5:4a:0d:ce:61:b3:92:f5:9f:b1:f1:
a0:65:89:29:4a:16:2a:c0:79:fd:f2:28:88:50:29:97:f3:22:
d1:95:d5:7d:7e:30:c4:40:ff:ac:47:fd:81:4d:9f:72:30:9b:
3d:af:b2:24:ad:52:40:fc:d0:66:2b:dc:ed:81:e3:cf:34:6c:
44:d0:af:8c:3b:2a:03:80:a3:ba:d0:dd:a8:45:32:20:35:d3:
7f:e4:21:3a:ff:b2:8c:a0:02:07:16:d4:cd:49:21:3c:b1:6e:
50:f7:0e:b9:06:ac:26:b9:dd:cb:ec:d4:68:a0:a1:9d:f5:0d:
67:c5:61:7a:f1:3d:16:4a:f7:2c:4e:07:a3:2c:16:9e:ea:b6:
4c:5e:83:d4:fb:1b:f0:72:7d:40:05:23:0b:15:1c:cf:f4:a2:
12:c0:dc:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:41:25 2026 by rpki-client