Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lris-hevk77b78b-tGiPmGBLiq4.mft
File: lris-hevk77b78b-tGiPmGBLiq4.mft (raw, json)
Hash identifier: k9h7vgRhqY4PLlgYvX5I67VivyJ2fdSWjf4eA94hm3U=
Subject key identifier: 8F:B8:FE:A2:94:11:F2:C3:49:6E:16:32:D1:B5:7F:DD:AB:7C:A9:3D
Authority key identifier: 96:B8:AC:FA:17:AF:93:BE:DB:EF:C6:FE:B4:68:8F:98:60:4B:8A:AE
Certificate issuer: /CN=96b8acfa17af93bedbefc6feb4688f98604b8aae
Certificate serial: 019F927F63845D99AE3410C6F19E940D3024
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lris-hevk77b78b-tGiPmGBLiq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lris-hevk77b78b-tGiPmGBLiq4.mft
Manifest number: 1452
Signing time: Fri 24 Jul 2026 05:00:49 +0000
Manifest this update: Fri 24 Jul 2026 05:00:49 +0000
Manifest next update: Sat 25 Jul 2026 05:00:49 +0000
Files and hashes: 1: 1-_1ND71xAg_YzyTREVjF7BcT090.roa (hash: q6/3yl36YPQO21Sef3A+lExC26TvJGdypkO4TEkJLcg=)
2: lris-hevk77b78b-tGiPmGBLiq4.crl (hash: 4BnzAr92gCRdxhQIx3guRRhgOZlTi6cfNYR4IPf6ViM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lris-hevk77b78b-tGiPmGBLiq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lris-hevk77b78b-tGiPmGBLiq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lris-hevk77b78b-tGiPmGBLiq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:63:84:5d:99:ae:34:10:c6:f1:9e:94:0d:30:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96b8acfa17af93bedbefc6feb4688f98604b8aae
Validity
Not Before: Jul 24 05:00:49 2026 GMT
Not After : Jul 25 05:00:49 2026 GMT
Subject: CN=8fb8fea29411f2c3496e1632d1b57fddab7ca93d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2a:ac:36:46:9e:6f:1a:35:37:b2:fd:d5:cb:
fb:d9:6d:b9:25:15:28:4d:dc:bb:37:52:c0:0f:d4:
32:4d:ff:3b:a1:fb:cd:51:38:eb:9f:21:79:8e:dc:
77:5c:4a:a4:e4:d2:3d:e3:c8:1e:f7:b7:0d:45:5d:
43:5a:37:52:1b:b7:72:e4:39:30:22:19:53:72:f5:
80:8a:6a:13:c0:c5:8b:6a:cf:ac:30:03:3e:72:20:
84:96:2b:37:5a:72:39:71:ff:9f:84:50:d2:db:c3:
8d:ac:06:a3:b1:b2:bc:f6:37:3f:bd:32:80:8b:42:
ac:9b:0a:cc:88:ea:02:ae:f8:80:3c:13:f8:68:bd:
5e:a9:c8:07:6c:ff:b3:7c:0a:f0:44:f3:59:69:48:
65:9a:d5:46:85:05:5c:c6:9a:5e:0c:85:45:be:4e:
fe:b5:52:74:6f:12:cd:8a:6c:3b:2a:72:eb:5b:a0:
db:05:4b:66:ce:84:06:98:bf:04:87:0e:08:52:a8:
f7:e1:29:c9:32:04:c2:7a:7b:ed:97:65:16:f4:97:
55:64:ab:8e:04:c4:aa:d3:bd:e8:8d:75:35:4a:e0:
dc:9e:27:4f:f9:33:04:3e:20:87:b7:c0:a5:c3:92:
26:18:94:d2:c0:f4:f0:7f:c5:fb:07:18:48:fa:0a:
51:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:B8:FE:A2:94:11:F2:C3:49:6E:16:32:D1:B5:7F:DD:AB:7C:A9:3D
X509v3 Authority Key Identifier:
keyid:96:B8:AC:FA:17:AF:93:BE:DB:EF:C6:FE:B4:68:8F:98:60:4B:8A:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lris-hevk77b78b-tGiPmGBLiq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lris-hevk77b78b-tGiPmGBLiq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lris-hevk77b78b-tGiPmGBLiq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:9a:49:7e:7c:dc:53:90:45:bb:04:56:55:b0:dd:f9:f4:05:
e3:66:dd:9b:f4:4a:f1:e3:ce:8c:78:39:5d:f5:d0:ac:e8:67:
bf:59:4a:d6:f8:ec:3f:70:1e:de:86:11:a3:54:6e:b3:69:49:
f8:97:05:42:6c:69:50:38:bb:4c:b2:95:28:0f:58:a1:70:4b:
f2:28:b6:b9:35:5a:81:ee:a2:f3:b3:2d:46:f4:f7:e4:07:6b:
d9:5c:ec:7a:ed:e3:36:a3:e6:f7:58:ac:8e:bb:ca:c7:d9:c7:
53:4c:e6:5e:75:1f:30:8e:2b:22:7a:37:8d:77:ae:b6:1b:41:
91:e5:cf:f6:83:6e:da:11:77:ee:76:79:3b:fc:91:bc:19:96:
2d:50:4e:82:78:68:b9:15:28:ae:94:50:f6:a3:da:29:ef:c6:
d6:7e:91:8b:8e:b2:fb:12:f3:ad:aa:64:ce:01:1d:d9:5a:ef:
ca:81:a5:7e:0f:16:bc:39:72:21:98:78:2b:4e:ba:b9:19:31:
e9:1a:b4:30:09:22:e8:4c:c9:d3:65:ec:78:75:5a:04:a1:0f:
e5:64:b2:2b:2c:f4:3a:36:e4:6d:b2:a0:13:35:ee:bf:6b:75:
1b:69:d4:98:11:ae:69:60:a4:56:8b:16:8f:a2:2e:8a:c7:14:
53:d8:1e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:18:17 2026 by rpki-client