Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lris-hevk77b78b-tGiPmGBLiq4.mft
File: lris-hevk77b78b-tGiPmGBLiq4.mft (raw, json)
Hash identifier: H5J+YogRdqvUvqaAtlbZYWfv4Om3Vvf7NksiSWLysqY=
Subject key identifier: DA:57:E0:AF:33:71:C9:97:5F:8F:D2:10:50:FB:E1:CE:60:99:EE:02
Authority key identifier: 96:B8:AC:FA:17:AF:93:BE:DB:EF:C6:FE:B4:68:8F:98:60:4B:8A:AE
Certificate issuer: /CN=96b8acfa17af93bedbefc6feb4688f98604b8aae
Certificate serial: 019D2696664F054885827A44A2D9A7F5C848
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lris-hevk77b78b-tGiPmGBLiq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lris-hevk77b78b-tGiPmGBLiq4.mft
Manifest number: 1311
Signing time: Wed 25 Mar 2026 20:01:23 +0000
Manifest this update: Wed 25 Mar 2026 20:01:23 +0000
Manifest next update: Thu 26 Mar 2026 20:01:23 +0000
Files and hashes: 1: 1-_1ND71xAg_YzyTREVjF7BcT090.roa (hash: q6/3yl36YPQO21Sef3A+lExC26TvJGdypkO4TEkJLcg=)
2: lris-hevk77b78b-tGiPmGBLiq4.crl (hash: pY8pCpQEGEnfUrfEEvUdZh6xtznlxAVY2VBpvI1GBOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lris-hevk77b78b-tGiPmGBLiq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lris-hevk77b78b-tGiPmGBLiq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lris-hevk77b78b-tGiPmGBLiq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:66:4f:05:48:85:82:7a:44:a2:d9:a7:f5:c8:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96b8acfa17af93bedbefc6feb4688f98604b8aae
Validity
Not Before: Mar 25 20:01:23 2026 GMT
Not After : Mar 26 20:01:23 2026 GMT
Subject: CN=da57e0af3371c9975f8fd21050fbe1ce6099ee02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ff:31:20:c6:e9:d6:ff:da:4b:02:b0:c2:0a:
94:14:85:a0:41:be:d5:db:a8:e8:52:a2:8e:e3:12:
8a:15:5c:23:bd:8c:f0:9f:56:f0:9d:fa:0d:83:32:
38:1d:64:14:f5:2e:de:9f:3f:a5:dc:b0:9b:27:f6:
27:a2:c1:d7:ae:f8:fb:8a:8b:5a:85:08:00:cf:40:
9f:8d:36:23:2c:ea:d3:5e:b5:57:08:72:2c:85:a3:
30:0d:83:a1:9c:23:ac:5b:8c:4e:0e:29:69:31:8f:
ce:1b:fc:58:8f:a2:7e:83:e7:b4:22:6b:7a:db:7d:
34:47:01:29:f0:36:6a:69:50:65:42:cf:5d:47:80:
d2:e9:26:18:d0:6f:a7:2a:33:df:99:fc:77:56:e7:
8e:3b:99:38:77:97:a8:28:4e:c8:a3:2b:45:bd:3a:
ec:9b:22:3e:ca:87:26:59:3a:9d:19:91:18:b9:ea:
cf:8c:36:d1:4a:10:78:10:b4:65:d2:7c:4d:78:8f:
fd:1b:5a:90:81:6e:48:9b:7d:39:ff:b7:21:4a:3c:
3d:57:78:e7:70:ad:c2:cf:3e:32:a8:06:02:c5:bb:
b5:b9:49:83:2d:09:33:72:88:17:0b:9a:a6:6d:f7:
b6:37:fd:c6:c1:ca:7a:3e:25:89:51:8c:6a:04:e1:
99:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:57:E0:AF:33:71:C9:97:5F:8F:D2:10:50:FB:E1:CE:60:99:EE:02
X509v3 Authority Key Identifier:
keyid:96:B8:AC:FA:17:AF:93:BE:DB:EF:C6:FE:B4:68:8F:98:60:4B:8A:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lris-hevk77b78b-tGiPmGBLiq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lris-hevk77b78b-tGiPmGBLiq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lris-hevk77b78b-tGiPmGBLiq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:4c:7e:ff:70:78:a3:1f:16:aa:75:10:59:7a:12:18:d5:00:
1a:bd:55:65:99:91:cb:77:72:84:b9:0b:e5:ae:04:2a:c1:27:
e4:fd:e9:df:37:99:8f:b2:43:cd:75:9d:7d:18:70:6a:1f:7e:
af:11:46:69:31:67:70:a2:5a:ad:8b:41:d9:e7:4f:b7:31:c7:
73:87:dc:ae:b7:a3:3a:a2:04:ca:33:46:9f:36:d2:3d:0b:e1:
66:30:0f:e8:0c:9f:e1:ce:ef:eb:3b:57:f9:e1:3e:6c:c3:c9:
89:ba:b5:00:20:98:9f:41:39:a7:10:11:1e:c8:1e:0b:15:30:
f1:8b:73:17:91:21:a9:95:5e:6a:0c:27:c3:6d:f6:45:f5:88:
6b:99:ad:30:88:b6:fb:e6:a4:30:cc:a5:54:af:ca:11:99:dc:
e7:eb:57:6b:ab:87:cf:63:7d:db:7d:30:3e:e0:ec:6c:f7:eb:
f3:5d:52:3b:9b:03:78:6f:5d:6b:15:ce:81:20:a5:e7:65:89:
f1:4b:8c:b1:9b:25:0f:9e:90:cf:57:4f:f5:ed:09:75:6e:fe:
2a:83:be:8f:09:f1:8f:61:07:69:d8:06:29:15:c5:3b:1c:12:
55:8d:f3:dc:c4:f3:14:22:23:3e:ff:f2:87:19:84:ab:d1:78:
d2:05:ad:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:09:38 2026 by rpki-client