Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft
File: liqjLr7JzqHJPEvVX4XvfgpdT5I.mft (raw, json)
Hash identifier: xDCNr57T4QPx/N8NSLpRba7wGunMx05ckUoSKN3g1d8=
Subject key identifier: 49:F0:3E:79:9D:29:2A:92:A6:56:05:85:54:30:5D:B8:F2:37:A9:7B
Authority key identifier: 96:2A:A3:2E:BE:C9:CE:A1:C9:3C:4B:D5:5F:85:EF:7E:0A:5D:4F:92
Certificate issuer: /CN=962aa32ebec9cea1c93c4bd55f85ef7e0a5d4f92
Certificate serial: 019D984FBCDF2100DE945B4DC228028F1DE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/liqjLr7JzqHJPEvVX4XvfgpdT5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft
Manifest number: 0C83
Signing time: Thu 16 Apr 2026 22:00:55 +0000
Manifest this update: Thu 16 Apr 2026 22:00:55 +0000
Manifest next update: Fri 17 Apr 2026 22:00:55 +0000
Files and hashes: 1: 1-3zUelmkTSgTStRjVWxjNNQBiM4.roa (hash: HmKxIUYZnOTiOcoe1j/2oHqq1Af7hqG1JDavmuwUScA=)
2: 2W_yiasSlHxMzGvCseIvYg5Ozd4.roa (hash: KtoflOTIZ2ZK45JBs/qFK0YOESeh/OnZjIbaMrPqgdU=)
3: liqjLr7JzqHJPEvVX4XvfgpdT5I.crl (hash: JVqfz32lnnYpqgo+t42XUIcgP7S2Jok78RlvJZofWG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/liqjLr7JzqHJPEvVX4XvfgpdT5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:bc:df:21:00:de:94:5b:4d:c2:28:02:8f:1d:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962aa32ebec9cea1c93c4bd55f85ef7e0a5d4f92
Validity
Not Before: Apr 16 22:00:55 2026 GMT
Not After : Apr 17 22:00:55 2026 GMT
Subject: CN=49f03e799d292a92a656058554305db8f237a97b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:cd:46:fc:2f:d8:f8:2b:5f:5b:80:09:99:45:
cf:11:93:95:54:0f:c3:61:ea:05:c5:67:20:92:0f:
e6:9d:ce:62:42:3f:36:dc:ee:37:07:60:69:46:e3:
da:e6:44:76:5e:f1:8a:08:97:ab:00:85:b9:66:de:
97:18:5c:aa:4d:36:22:79:d1:c8:bd:de:5e:f1:a4:
2f:35:a9:86:76:29:bf:08:55:a7:94:44:04:9b:3e:
37:dc:c9:d1:76:64:12:08:3a:ea:bf:17:18:53:32:
cf:d3:13:ec:90:19:19:9a:10:ab:a3:18:94:3e:70:
a9:f5:85:18:f8:9d:63:79:a6:ac:66:6e:b1:0d:a0:
89:78:2f:36:08:c6:a5:9d:b8:7b:d8:25:f2:90:38:
99:7d:e2:bf:56:3d:36:a7:01:43:48:27:c1:55:8a:
f0:ae:24:b9:40:31:6c:eb:19:d6:28:08:a6:16:b7:
9c:a2:d7:76:7e:a2:70:1a:66:28:2f:5a:13:e6:d8:
f7:b1:fe:e2:c7:ed:d6:18:43:13:16:bc:17:ce:39:
b4:70:07:68:ca:31:43:17:91:b0:05:df:d1:67:d0:
e6:d2:cb:71:53:c6:25:bd:d8:06:9c:8d:20:08:bd:
d2:54:77:bd:33:4f:8b:b4:60:98:62:90:bb:94:d2:
8b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:F0:3E:79:9D:29:2A:92:A6:56:05:85:54:30:5D:B8:F2:37:A9:7B
X509v3 Authority Key Identifier:
keyid:96:2A:A3:2E:BE:C9:CE:A1:C9:3C:4B:D5:5F:85:EF:7E:0A:5D:4F:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/liqjLr7JzqHJPEvVX4XvfgpdT5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:8d:eb:b8:8c:b1:0e:e9:25:17:d5:b6:7c:b9:2e:3d:ed:f3:
03:43:a9:15:18:e4:d4:5c:ae:c5:2b:c1:2b:69:0a:f1:69:44:
53:79:50:dc:48:d2:88:9c:99:fa:20:43:84:10:58:45:40:4f:
e8:5f:30:84:c7:48:a2:ba:f8:47:2b:42:c6:18:4c:90:ba:66:
71:68:91:0c:54:bc:b7:3d:34:94:74:8f:77:9a:21:4d:c0:3e:
ef:d1:58:92:4c:8a:67:5f:93:8e:df:5a:56:06:39:41:ad:24:
ea:bc:86:e9:3b:25:0d:c2:24:1f:4d:7d:43:38:e1:a0:59:f4:
11:ac:e8:88:da:a3:44:26:77:71:0a:a2:3f:b4:ac:2b:fe:f7:
15:70:82:63:b6:fc:32:93:c3:8b:b5:de:b7:d9:e0:ac:d8:f1:
6b:91:be:ed:b0:9c:24:9a:87:f2:15:e8:06:bc:37:84:dd:67:
de:01:67:06:92:8b:09:81:05:b1:83:b2:9e:6a:15:d4:c9:09:
92:0f:f0:f9:70:21:9b:a0:d2:0b:79:5c:70:6a:e3:b3:d3:2b:
2a:23:36:73:72:98:12:b7:cd:2a:9e:37:62:85:8b:d9:26:1c:
a7:81:75:41:54:42:d8:0b:19:93:18:14:a7:52:b6:c9:16:95:
c6:7f:0c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:25:01 2026 by rpki-client