Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lris-hevk77b78b-tGiPmGBLiq4.mft
File: lris-hevk77b78b-tGiPmGBLiq4.mft (raw, json)
Hash identifier: WgOOpw/tIkqTPln1VblKtjInqkc0+65Sbr8cexOsww0=
Subject key identifier: 44:60:41:D5:D3:AF:C9:61:0F:4B:9F:F2:9E:AD:37:9C:AD:75:E6:AF
Authority key identifier: 96:B8:AC:FA:17:AF:93:BE:DB:EF:C6:FE:B4:68:8F:98:60:4B:8A:AE
Certificate issuer: /CN=96b8acfa17af93bedbefc6feb4688f98604b8aae
Certificate serial: 019E1DC7675D0CEB3D206969BAD3F1BEE2C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lris-hevk77b78b-tGiPmGBLiq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lris-hevk77b78b-tGiPmGBLiq4.mft
Manifest number: 1391
Signing time: Tue 12 May 2026 20:01:07 +0000
Manifest this update: Tue 12 May 2026 20:01:07 +0000
Manifest next update: Wed 13 May 2026 20:01:07 +0000
Files and hashes: 1: 1-_1ND71xAg_YzyTREVjF7BcT090.roa (hash: q6/3yl36YPQO21Sef3A+lExC26TvJGdypkO4TEkJLcg=)
2: lris-hevk77b78b-tGiPmGBLiq4.crl (hash: VrXZ+r4XBbR/LF0N9YT5raV1JHO5lFiNgWb8rZEO4w0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lris-hevk77b78b-tGiPmGBLiq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lris-hevk77b78b-tGiPmGBLiq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lris-hevk77b78b-tGiPmGBLiq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:67:5d:0c:eb:3d:20:69:69:ba:d3:f1:be:e2:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96b8acfa17af93bedbefc6feb4688f98604b8aae
Validity
Not Before: May 12 20:01:07 2026 GMT
Not After : May 13 20:01:07 2026 GMT
Subject: CN=446041d5d3afc9610f4b9ff29ead379cad75e6af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:79:30:4b:f0:02:d2:46:d7:7e:48:46:82:49:
a7:6b:40:8b:85:16:6b:b2:42:51:7e:c6:9f:04:24:
66:22:80:88:8b:4f:14:de:dd:d4:e4:2a:ad:b9:dc:
d2:34:2d:de:a1:ce:16:91:b4:45:27:4d:14:2d:fc:
31:11:cc:2e:5e:f9:b5:e9:a3:12:50:8f:37:82:b9:
02:9b:ad:1a:6c:ea:fc:a2:06:63:2e:14:eb:84:d2:
b1:bb:1c:6d:38:ec:f0:85:a9:6f:d3:92:3e:9e:8d:
27:56:4e:f5:a1:ab:05:87:a7:84:fc:60:9d:4b:84:
f1:83:fe:c7:62:b8:2f:ca:ee:a0:21:4f:fd:12:e5:
51:fb:30:c4:85:13:e5:b0:e2:99:d4:53:4e:16:3e:
da:d7:1c:2a:ba:ed:da:1c:89:63:2b:9f:20:0d:db:
eb:68:ad:f5:31:2f:30:92:f8:52:7d:6e:8f:02:b2:
6e:06:12:96:98:85:33:82:0e:c6:39:d7:ea:e4:4e:
6f:97:2b:e0:0a:e2:58:91:b0:e4:e5:8f:46:eb:9a:
52:0e:7f:81:37:ba:42:ec:57:d9:0b:0d:a1:e7:3f:
0a:d7:7d:98:d1:58:6a:8f:0b:5d:34:a5:aa:56:ef:
cd:65:16:a8:ce:0a:60:ba:dd:0e:5b:df:28:e8:7c:
f0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:60:41:D5:D3:AF:C9:61:0F:4B:9F:F2:9E:AD:37:9C:AD:75:E6:AF
X509v3 Authority Key Identifier:
keyid:96:B8:AC:FA:17:AF:93:BE:DB:EF:C6:FE:B4:68:8F:98:60:4B:8A:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lris-hevk77b78b-tGiPmGBLiq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lris-hevk77b78b-tGiPmGBLiq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lris-hevk77b78b-tGiPmGBLiq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:7a:1d:b5:e0:c7:eb:9e:42:7d:4a:ed:8f:14:9c:00:a0:e0:
0a:f0:4c:4b:e2:d6:c3:c4:51:e0:e4:2e:05:bf:25:03:57:db:
a7:fb:cb:bf:d1:c2:4f:6a:16:0b:86:02:61:dc:f1:99:f8:13:
31:fb:20:32:10:aa:29:0e:b8:21:71:07:f6:51:74:11:ba:3d:
55:af:4c:02:50:f1:d6:30:78:9f:aa:76:79:5e:93:b7:84:1c:
d7:07:74:36:9e:72:d7:83:56:ba:60:62:6a:7f:ce:08:bc:c2:
21:68:1e:98:f0:a6:8c:e0:8a:ee:2e:6f:92:58:d1:ab:10:55:
30:19:84:ce:f8:45:50:ab:8e:ea:94:fa:1b:10:9e:d5:4e:ce:
17:dd:cd:2a:65:87:19:03:14:c7:a9:e0:a2:3a:ca:df:1e:64:
7d:d6:68:e0:f9:da:09:f1:e0:c2:19:3d:21:78:7c:50:71:ba:
4e:5f:b7:10:09:b7:51:5d:57:4d:2a:d1:af:5d:1f:42:ef:fd:
e9:9d:aa:68:8c:b0:0a:15:38:c7:39:4b:6f:79:03:d5:09:9c:
fe:32:d5:d5:d0:3d:88:5c:74:7e:5a:00:31:04:84:25:a8:25:
95:40:b5:67:1e:d7:aa:a2:2d:49:de:69:3d:ed:ed:ea:58:35:
08:2e:81:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:09:54 2026 by rpki-client