Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft
File: liqjLr7JzqHJPEvVX4XvfgpdT5I.mft (raw, json)
Hash identifier: FLDiwqzzBmZDcnFfm3YVz/RJReUtcmRXGeSNylcbCqY=
Subject key identifier: A4:34:75:C3:E2:43:56:2A:C5:80:CF:1F:BF:04:95:4E:79:4D:43:01
Authority key identifier: 96:2A:A3:2E:BE:C9:CE:A1:C9:3C:4B:D5:5F:85:EF:7E:0A:5D:4F:92
Certificate issuer: /CN=962aa32ebec9cea1c93c4bd55f85ef7e0a5d4f92
Certificate serial: 019EBFC8DBCD334323FC82D387E3B9DC57E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/liqjLr7JzqHJPEvVX4XvfgpdT5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft
Manifest number: 0D1C
Signing time: Sat 13 Jun 2026 07:01:11 +0000
Manifest this update: Sat 13 Jun 2026 07:01:11 +0000
Manifest next update: Sun 14 Jun 2026 07:01:11 +0000
Files and hashes: 1: 1-3zUelmkTSgTStRjVWxjNNQBiM4.roa (hash: HmKxIUYZnOTiOcoe1j/2oHqq1Af7hqG1JDavmuwUScA=)
2: 2W_yiasSlHxMzGvCseIvYg5Ozd4.roa (hash: KtoflOTIZ2ZK45JBs/qFK0YOESeh/OnZjIbaMrPqgdU=)
3: liqjLr7JzqHJPEvVX4XvfgpdT5I.crl (hash: EOwld4BOHrLM3K4xPbWKzXplm1rfb1QXntnbTID8YXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/liqjLr7JzqHJPEvVX4XvfgpdT5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 07:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c8:db:cd:33:43:23:fc:82:d3:87:e3:b9:dc:57:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962aa32ebec9cea1c93c4bd55f85ef7e0a5d4f92
Validity
Not Before: Jun 13 07:01:11 2026 GMT
Not After : Jun 14 07:01:11 2026 GMT
Subject: CN=a43475c3e243562ac580cf1fbf04954e794d4301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:17:36:0d:4d:ad:fb:a7:09:88:0d:81:e0:72:
3d:e2:f0:e7:54:73:c9:7a:25:07:c8:64:36:1e:40:
8c:2a:bd:fe:b6:40:cf:75:e5:5c:76:ee:8b:6f:f1:
2f:3d:57:a7:3a:ef:d9:6d:b2:e9:3c:fa:d6:61:fb:
18:3f:49:10:09:dc:2c:2c:6f:a7:bb:81:a6:5e:22:
e9:c0:a4:60:70:a8:3d:69:1c:95:80:1f:b5:82:3a:
34:27:b0:da:77:fc:04:f6:f0:e3:ed:de:94:79:dd:
ea:bc:d3:40:d7:c3:b2:e7:40:a8:f1:0b:55:df:c3:
96:5e:f7:17:c3:b6:5d:b4:31:bb:c0:e3:40:26:f0:
f1:d7:43:a5:ed:42:4d:31:c4:57:c0:46:39:69:c1:
40:f3:52:ae:b3:a9:41:9b:39:9f:46:1b:e9:57:16:
2a:a1:1b:fc:9a:14:b8:b5:b3:1c:70:dc:6e:86:da:
0e:15:31:55:75:a7:d5:4f:8c:c5:32:1b:1a:18:88:
22:3d:e4:5f:4c:04:cd:21:47:20:c3:52:f9:03:8d:
e6:06:3f:ba:ea:aa:c0:88:5b:04:17:8a:73:b9:b9:
93:4e:8a:29:4d:90:52:c0:68:71:60:84:96:51:56:
63:8a:70:9e:d0:08:d3:fa:89:90:6b:a1:fb:94:b3:
b0:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:34:75:C3:E2:43:56:2A:C5:80:CF:1F:BF:04:95:4E:79:4D:43:01
X509v3 Authority Key Identifier:
keyid:96:2A:A3:2E:BE:C9:CE:A1:C9:3C:4B:D5:5F:85:EF:7E:0A:5D:4F:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/liqjLr7JzqHJPEvVX4XvfgpdT5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:66:36:3f:fa:cc:49:59:81:9b:d7:0b:66:7f:41:1c:23:99:
86:46:5c:c8:72:a3:4d:e9:bc:9c:ec:cc:db:e5:78:d6:98:2d:
75:09:72:02:0d:a0:5c:cf:e3:a4:37:47:f9:b4:37:ac:1f:96:
57:02:18:83:01:31:93:a0:e7:9d:95:24:ed:e5:ab:39:8e:ee:
dc:f0:87:80:d0:89:42:fd:d6:8d:d3:25:f1:5e:81:97:f9:be:
01:0f:d8:6b:c3:59:c9:99:29:61:55:9d:b6:bd:0e:d9:7d:d5:
e3:cc:3a:4e:62:8b:dd:0b:d2:bf:27:0c:64:a6:da:2b:b7:dd:
26:69:a1:ce:1c:b3:dd:11:53:7c:cc:d0:03:86:af:68:2d:9d:
e5:b5:1b:8f:d0:56:8a:d2:3b:e1:c1:ea:46:a4:99:17:94:5e:
50:11:83:78:fa:d0:71:84:a8:27:1e:36:51:ed:6d:a8:47:0f:
f7:29:b9:d7:1c:f4:67:32:d0:29:15:a4:30:0a:e4:35:fc:c9:
39:c4:58:41:c3:a5:92:56:61:34:65:6c:32:c6:c1:f9:78:21:
64:75:07:1a:2f:2f:46:35:b5:80:95:7e:a2:80:4c:6f:69:d5:
c9:e7:67:c6:2b:b3:dd:89:29:24:cb:b9:c0:00:72:5a:eb:36:
6d:9d:2c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:51:51 2026 by rpki-client