Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
File: LiSXk-WSSp8l86Co3ZlLN065N9I.mft (raw, json)
Hash identifier: MBG0LT20RUcAJ11xjCCv+Q1IMKxvy/JV18SNxRa3U5k=
Subject key identifier: 61:1E:8C:0E:05:0C:86:47:0E:73:01:9A:72:06:43:92:48:D4:D3:A8
Authority key identifier: 2E:24:97:93:E5:92:4A:9F:25:F3:A0:A8:DD:99:4B:37:4E:B9:37:D2
Certificate issuer: /CN=2e249793e5924a9f25f3a0a8dd994b374eb937d2
Certificate serial: 019D26CD03C57BF184D83D2AC63D441BA638
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiSXk-WSSp8l86Co3ZlLN065N9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
Manifest number: 185E
Signing time: Wed 25 Mar 2026 21:01:03 +0000
Manifest this update: Wed 25 Mar 2026 21:01:03 +0000
Manifest next update: Thu 26 Mar 2026 21:01:03 +0000
Files and hashes: 1: 7vsMsuJmzw7CzqWJp5zGFtPV02U.roa (hash: bK26Gz3BJI9pktI1Le1pz5ATU7aYExDizQZNhktvaPQ=)
2: LiSXk-WSSp8l86Co3ZlLN065N9I.crl (hash: BCm6qwXG/4iYWiWpxhiYnUiJmJLPPtinaTsIXby8Sp0=)
3: a6hZcTn-XqxdaZ2xZ2ZKKRGTeno.roa (hash: ePG3wnShSG6k86StztGYRl/CsawQ81C9m+3zlwarufE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/LiSXk-WSSp8l86Co3ZlLN065N9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:03:c5:7b:f1:84:d8:3d:2a:c6:3d:44:1b:a6:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e249793e5924a9f25f3a0a8dd994b374eb937d2
Validity
Not Before: Mar 25 21:01:03 2026 GMT
Not After : Mar 26 21:01:03 2026 GMT
Subject: CN=611e8c0e050c86470e73019a7206439248d4d3a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9f:f1:67:77:35:c8:03:e0:49:6c:1d:5c:49:
28:bc:8e:d5:df:75:18:c8:cf:27:5a:11:79:fc:90:
10:e6:a4:01:cc:2a:a4:a9:ff:9d:3f:e3:0f:98:c8:
40:90:fe:d9:be:fb:7e:e9:ce:c6:45:31:f3:b7:f9:
9a:d5:8a:f3:42:c3:7b:ff:cd:26:42:cf:72:ab:7f:
0b:f1:1e:76:2f:6e:6d:62:87:3b:05:51:57:42:37:
32:75:6b:43:43:7e:fe:77:c2:3b:a8:f9:1b:b6:b3:
ef:24:9b:93:c4:88:7d:f7:90:a1:c2:1d:98:ab:dc:
12:be:1a:5d:c3:22:bc:2d:c7:bf:02:b5:3d:a8:eb:
f9:8f:96:26:3d:3e:2d:bd:b5:46:4d:fb:91:ec:f3:
f2:66:ef:d7:69:e7:90:8f:2c:73:15:ad:be:16:aa:
c3:bb:3b:3f:62:0c:55:57:a4:cd:47:44:1f:71:cf:
58:03:dd:39:06:0a:1a:a0:9e:1d:d9:bd:75:86:4e:
27:0f:89:7b:d0:dd:eb:3f:8d:8f:11:42:9a:59:1f:
48:b5:2c:82:2a:90:4e:b3:14:2b:ff:eb:d8:77:0d:
b2:da:95:29:fc:42:f2:1e:e8:b4:89:01:2c:1a:c0:
7d:11:c4:6d:ca:48:2c:6f:22:36:13:dc:82:f7:51:
af:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:1E:8C:0E:05:0C:86:47:0E:73:01:9A:72:06:43:92:48:D4:D3:A8
X509v3 Authority Key Identifier:
keyid:2E:24:97:93:E5:92:4A:9F:25:F3:A0:A8:DD:99:4B:37:4E:B9:37:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiSXk-WSSp8l86Co3ZlLN065N9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:ef:ab:9a:35:0c:93:3d:c4:5d:e6:d6:89:93:23:6b:93:57:
5b:48:32:41:ef:e2:a4:44:f3:34:70:df:53:9f:68:e7:63:f0:
a7:22:41:e4:c0:40:e2:31:da:63:4b:1f:cc:00:07:28:90:09:
91:c8:20:43:d3:0e:17:a1:85:c2:dd:5c:c4:7e:fe:a8:b7:2b:
54:89:81:6d:9b:f7:54:29:09:26:ca:72:d9:9e:de:c6:06:76:
35:1d:dc:f8:ae:70:41:3b:b1:10:90:6a:a1:3d:00:7c:72:a3:
fd:e2:3e:2e:83:e5:ef:5c:48:3a:11:c8:cc:47:af:76:4a:a2:
72:26:03:df:1f:39:d1:eb:3b:57:e7:ed:36:de:d6:4a:55:b0:
69:7e:6b:d6:d9:a5:4c:f6:ce:e7:89:92:40:ce:f2:7d:53:da:
e9:15:40:b9:7e:e3:48:94:3c:89:72:46:6f:60:a7:06:c0:40:
fa:d6:0e:1f:a4:8b:d6:1c:ad:aa:29:67:e6:a4:48:59:28:12:
42:aa:30:84:b5:ba:c2:45:6b:5f:26:17:aa:1f:7a:05:be:39:
97:c6:6d:8b:f4:43:d0:c2:aa:fc:8f:c7:a8:a3:39:69:21:df:
24:cc:c4:cb:5e:19:dc:53:30:1e:98:0d:3d:21:55:12:11:33:
75:eb:1e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:19:08 2026 by rpki-client