Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft
File: liqjLr7JzqHJPEvVX4XvfgpdT5I.mft (raw, json)
Hash identifier: 79w57K0hySw6y4/JmK5shAbY+knWxGPhjSiqvsM/k0g=
Subject key identifier: DF:CF:9A:82:53:38:26:DF:02:23:75:91:2C:2B:B2:BD:2E:08:1A:88
Authority key identifier: 96:2A:A3:2E:BE:C9:CE:A1:C9:3C:4B:D5:5F:85:EF:7E:0A:5D:4F:92
Certificate issuer: /CN=962aa32ebec9cea1c93c4bd55f85ef7e0a5d4f92
Certificate serial: 019D9A3E132F565E85F4B9B1ECE48F00FADE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/liqjLr7JzqHJPEvVX4XvfgpdT5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft
Manifest number: 0C84
Signing time: Fri 17 Apr 2026 07:00:52 +0000
Manifest this update: Fri 17 Apr 2026 07:00:52 +0000
Manifest next update: Sat 18 Apr 2026 07:00:52 +0000
Files and hashes: 1: 1-3zUelmkTSgTStRjVWxjNNQBiM4.roa (hash: HmKxIUYZnOTiOcoe1j/2oHqq1Af7hqG1JDavmuwUScA=)
2: 2W_yiasSlHxMzGvCseIvYg5Ozd4.roa (hash: KtoflOTIZ2ZK45JBs/qFK0YOESeh/OnZjIbaMrPqgdU=)
3: liqjLr7JzqHJPEvVX4XvfgpdT5I.crl (hash: jcEuX60QDlRgbMSEO6PJOaoPNGdQ3A8/RkLBTrO7uk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/liqjLr7JzqHJPEvVX4XvfgpdT5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:13:2f:56:5e:85:f4:b9:b1:ec:e4:8f:00:fa:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962aa32ebec9cea1c93c4bd55f85ef7e0a5d4f92
Validity
Not Before: Apr 17 07:00:52 2026 GMT
Not After : Apr 18 07:00:52 2026 GMT
Subject: CN=dfcf9a82533826df022375912c2bb2bd2e081a88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:54:29:5c:62:56:2c:a6:de:64:ab:59:0c:ce:
81:9b:a9:9f:cf:2a:f5:78:55:ff:d5:df:17:89:80:
d8:79:0f:ef:0e:bb:a1:52:28:53:47:a5:6a:47:73:
b7:eb:4f:f3:c6:4a:ec:48:ee:0f:4c:ff:89:71:68:
61:e1:e6:d7:59:e7:85:41:46:8c:70:41:40:6c:ee:
0f:64:81:47:c3:59:3f:d0:93:2f:01:75:2c:a0:7c:
d2:34:e6:b7:c7:cb:7d:8b:b5:22:aa:1e:65:b5:73:
5f:33:63:ed:45:15:ca:b3:70:01:c2:44:58:bb:1a:
da:18:55:26:1f:d5:a4:70:c3:aa:62:32:cc:a6:3e:
ec:1b:43:29:61:48:3e:af:9c:7c:39:cb:52:67:b4:
94:5a:a6:eb:d6:25:60:62:c8:d6:fa:fd:a2:32:f1:
e8:f7:1f:a9:0c:ea:40:6f:11:88:37:7a:8b:f8:85:
f7:4a:6e:93:f9:82:06:85:10:63:7d:79:05:ac:40:
ac:38:68:e4:b6:46:a0:3b:9a:db:27:42:17:68:82:
f2:fe:69:a6:55:c7:3e:cb:ac:29:17:45:19:a6:cd:
79:96:cf:9e:25:75:aa:24:da:6a:41:89:a9:ba:c7:
3f:a0:23:d2:c5:1f:3e:4e:8a:53:2e:97:bd:f9:84:
03:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:CF:9A:82:53:38:26:DF:02:23:75:91:2C:2B:B2:BD:2E:08:1A:88
X509v3 Authority Key Identifier:
keyid:96:2A:A3:2E:BE:C9:CE:A1:C9:3C:4B:D5:5F:85:EF:7E:0A:5D:4F:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/liqjLr7JzqHJPEvVX4XvfgpdT5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:a6:ef:cf:b9:6c:32:55:aa:f0:f4:18:21:c1:8f:bd:b1:0a:
cc:5f:d2:a7:e6:63:13:5b:58:00:d6:88:88:b1:14:f2:d2:77:
89:d7:55:81:0b:fb:6e:9b:d8:6d:77:0f:5d:09:f8:1b:d5:1c:
92:af:26:d0:93:71:1d:d5:c4:af:c6:f6:e6:29:41:46:f1:40:
a2:3b:e1:95:c2:9b:30:d6:a1:9e:ed:5b:75:99:9f:1c:0c:df:
fb:a0:7d:cd:06:69:b0:e0:b6:88:39:2e:45:25:80:cd:2f:5b:
59:15:d4:a8:1c:29:a8:84:fd:cb:d9:4c:30:cd:16:89:91:3a:
ac:83:45:8b:19:02:1f:d4:d9:f5:c7:98:46:2c:6c:8e:1f:b2:
6f:3a:d5:1a:eb:61:b6:c5:06:9b:f8:c2:d0:fe:40:a5:c1:2b:
07:38:c0:61:98:45:11:f4:86:32:23:d1:df:4f:88:d0:3d:1e:
58:aa:9f:0f:61:45:0e:0d:53:da:34:7a:33:fb:33:e0:d8:52:
0d:f7:55:6b:e7:af:7f:8f:69:88:4e:67:36:22:30:cf:d8:54:
3e:03:5d:41:c2:fd:5d:96:7f:a5:de:9b:63:ac:3a:23:45:b2:
a8:ff:a1:55:76:76:61:be:a3:21:41:43:28:7b:b2:89:c7:58:
82:00:30:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:16:19 2026 by rpki-client