Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft
File: liqjLr7JzqHJPEvVX4XvfgpdT5I.mft (raw, json)
Hash identifier: BDCRFK4hqIqTdpZt+5HMMriXhv1nSLRZX322CM/X7zg=
Subject key identifier: B7:74:6D:2B:02:6D:1D:25:55:7A:CD:A4:9B:F9:90:A1:AC:18:C8:D1
Authority key identifier: 96:2A:A3:2E:BE:C9:CE:A1:C9:3C:4B:D5:5F:85:EF:7E:0A:5D:4F:92
Certificate issuer: /CN=962aa32ebec9cea1c93c4bd55f85ef7e0a5d4f92
Certificate serial: 019FA97547B2390E99E83C7C0B16AA4584B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/liqjLr7JzqHJPEvVX4XvfgpdT5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft
Manifest number: 0D95
Signing time: Tue 28 Jul 2026 16:01:03 +0000
Manifest this update: Tue 28 Jul 2026 16:01:03 +0000
Manifest next update: Wed 29 Jul 2026 16:01:03 +0000
Files and hashes: 1: 1-3zUelmkTSgTStRjVWxjNNQBiM4.roa (hash: HmKxIUYZnOTiOcoe1j/2oHqq1Af7hqG1JDavmuwUScA=)
2: 2W_yiasSlHxMzGvCseIvYg5Ozd4.roa (hash: KtoflOTIZ2ZK45JBs/qFK0YOESeh/OnZjIbaMrPqgdU=)
3: liqjLr7JzqHJPEvVX4XvfgpdT5I.crl (hash: xVIEVC+j5YQaJcwj/WDuYAtv2BnG9hDoigLEQIRn1P8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/liqjLr7JzqHJPEvVX4XvfgpdT5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 16:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:47:b2:39:0e:99:e8:3c:7c:0b:16:aa:45:84:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962aa32ebec9cea1c93c4bd55f85ef7e0a5d4f92
Validity
Not Before: Jul 28 16:01:03 2026 GMT
Not After : Jul 29 16:01:03 2026 GMT
Subject: CN=b7746d2b026d1d25557acda49bf990a1ac18c8d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:32:7a:12:ae:61:be:18:42:b0:1b:2b:18:ec:
4a:9b:fc:76:3b:74:eb:12:89:f4:9b:3e:83:a7:17:
58:4c:c7:28:e9:ec:ed:c4:bd:76:16:7b:b7:79:fb:
4d:ea:f2:f5:66:8f:3d:25:a5:72:ee:3a:af:c3:79:
18:79:62:f8:32:b0:8c:1e:8d:5e:74:28:65:39:96:
ef:7d:91:96:f9:ec:b4:06:98:de:5e:ed:2c:ba:c4:
a9:af:ad:53:f0:4e:ff:16:05:ff:79:56:64:2f:f6:
4b:81:4f:2e:b1:c0:4c:fe:d5:f6:56:9c:f6:c3:b4:
6d:44:3f:b1:01:0a:66:dc:0e:b9:92:9f:b9:fc:c2:
d2:6b:9d:bf:35:46:4a:7b:c6:b1:8e:84:bf:15:8e:
2d:b7:09:9b:18:a7:48:86:7a:b8:89:79:87:bd:49:
0d:9e:49:ad:ed:f1:67:14:0d:8c:9d:ed:04:66:db:
79:9a:32:5b:e9:25:ce:00:1e:ca:c0:50:2e:bb:fc:
03:df:c7:ac:9d:47:a6:6e:58:51:44:6d:f7:46:8c:
87:c9:c1:45:4d:9e:16:7f:4a:e7:ac:0f:41:2d:54:
aa:bc:e0:ea:c5:5c:3a:46:42:0b:2a:9a:a6:f0:f0:
52:93:a5:86:e1:24:52:76:a4:8c:1c:c2:5c:69:80:
83:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:74:6D:2B:02:6D:1D:25:55:7A:CD:A4:9B:F9:90:A1:AC:18:C8:D1
X509v3 Authority Key Identifier:
keyid:96:2A:A3:2E:BE:C9:CE:A1:C9:3C:4B:D5:5F:85:EF:7E:0A:5D:4F:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/liqjLr7JzqHJPEvVX4XvfgpdT5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:b6:15:32:1d:e7:a4:b5:f6:06:0e:75:e8:18:35:62:03:15:
3c:dd:f2:f2:ec:02:73:16:de:19:ef:d0:e5:95:02:ed:6c:ab:
b2:9e:15:0e:6a:f7:80:0f:01:5c:69:f3:d5:88:c6:eb:65:8c:
d6:20:97:90:ee:d2:22:ea:cb:ae:1a:74:e2:2f:b4:77:af:38:
3e:20:1b:18:17:38:c3:72:6e:e3:f9:83:61:06:22:78:30:67:
43:23:ed:6c:39:aa:9b:ec:ae:53:c5:6e:8f:e6:5d:29:a0:d0:
18:c3:1f:5a:8d:83:fb:84:fe:1d:a4:f7:d7:4d:77:40:d0:7f:
41:07:f4:9a:1c:12:66:27:c0:54:7b:d9:46:cf:c6:e4:68:18:
da:44:89:26:77:8b:c6:02:32:40:f2:63:c9:41:b7:83:6d:b8:
85:d0:58:fe:82:3f:95:df:17:b6:70:56:4d:98:eb:ef:7d:bd:
d2:99:da:b4:e3:b7:68:76:23:8e:76:21:a2:d2:4d:bb:51:61:
7b:46:ae:0c:ff:a9:29:c9:e8:d7:01:c7:de:b0:c1:cf:f8:cf:
88:32:7b:60:c3:68:84:5e:b7:b4:7d:5b:39:26:52:63:71:9a:
db:c0:8c:82:4a:af:a5:73:87:67:06:f7:55:1e:7c:ec:09:c9:
a8:b4:22:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:54:53 2026 by rpki-client