Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft
File: liqjLr7JzqHJPEvVX4XvfgpdT5I.mft (raw, json)
Hash identifier: wrTYmaC+qKIPCgFBKtbh0M+DT/yXjaHuzQuyCfEDzr8=
Subject key identifier: 06:99:AB:29:18:56:4A:EF:80:CC:77:02:B1:1D:83:F5:15:61:51:28
Authority key identifier: 96:2A:A3:2E:BE:C9:CE:A1:C9:3C:4B:D5:5F:85:EF:7E:0A:5D:4F:92
Certificate issuer: /CN=962aa32ebec9cea1c93c4bd55f85ef7e0a5d4f92
Certificate serial: 01A0D2DF0C2C55EAF88BCE5D778D8F0F5A53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/liqjLr7JzqHJPEvVX4XvfgpdT5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft
Manifest number: 0E2F
Signing time: Thu 24 Sep 2026 10:03:47 +0000
Manifest this update: Thu 24 Sep 2026 10:03:47 +0000
Manifest next update: Fri 25 Sep 2026 10:03:47 +0000
Files and hashes: 1: 1-3zUelmkTSgTStRjVWxjNNQBiM4.roa (hash: HmKxIUYZnOTiOcoe1j/2oHqq1Af7hqG1JDavmuwUScA=)
2: 2W_yiasSlHxMzGvCseIvYg5Ozd4.roa (hash: KtoflOTIZ2ZK45JBs/qFK0YOESeh/OnZjIbaMrPqgdU=)
3: liqjLr7JzqHJPEvVX4XvfgpdT5I.crl (hash: Mo+nHHHenxw+Y+5BP4N0HC2kXCUUM8C7uWrDyH1Oi1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/liqjLr7JzqHJPEvVX4XvfgpdT5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 10:03:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:df:0c:2c:55:ea:f8:8b:ce:5d:77:8d:8f:0f:5a:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962aa32ebec9cea1c93c4bd55f85ef7e0a5d4f92
Validity
Not Before: Sep 24 10:03:47 2026 GMT
Not After : Sep 25 10:03:47 2026 GMT
Subject: CN=0699ab2918564aef80cc7702b11d83f515615128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:37:a3:6d:03:a3:d6:51:4c:f4:f4:5e:9c:63:
cc:9a:59:1c:be:24:f0:13:62:b4:43:75:f8:ce:b2:
5c:0e:f5:84:17:c8:5d:9f:fa:66:68:47:f7:3d:ac:
7d:99:b8:9e:56:54:78:85:ee:e7:ac:3a:22:16:f3:
cf:da:b4:da:3d:7f:95:8f:a8:89:05:63:59:fa:03:
a9:22:62:6c:55:e3:d2:e4:80:cd:9c:5f:31:ce:4c:
36:a0:15:e9:a0:76:19:59:55:fb:63:e2:3a:79:84:
6b:6f:06:22:ae:8b:47:de:7c:07:77:3a:5f:a3:3a:
13:ad:ab:ab:8f:3c:99:43:d7:47:67:e6:77:af:83:
ed:c9:27:c5:72:b6:96:f9:af:ef:66:d0:c4:62:d6:
61:1d:f1:44:ff:29:f0:3d:9b:3c:79:0a:7c:08:84:
8b:18:fa:5f:07:a0:e4:3a:de:3e:36:1a:3c:d4:52:
c3:4e:21:b6:c6:0d:26:df:d0:e5:9a:c6:fe:fd:87:
ce:f5:73:76:b4:d2:ba:f4:1f:73:b6:4f:90:92:2e:
1b:2c:d4:c6:75:dc:78:8a:b3:6a:46:21:cb:f1:17:
37:ef:8e:32:f6:18:13:8d:40:68:68:99:29:b8:59:
0e:2d:12:7d:a0:1c:9d:7f:0c:bc:73:99:e6:01:dd:
42:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:99:AB:29:18:56:4A:EF:80:CC:77:02:B1:1D:83:F5:15:61:51:28
X509v3 Authority Key Identifier:
keyid:96:2A:A3:2E:BE:C9:CE:A1:C9:3C:4B:D5:5F:85:EF:7E:0A:5D:4F:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/liqjLr7JzqHJPEvVX4XvfgpdT5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:c6:f5:97:60:6d:60:8b:28:a7:f5:d5:95:ce:70:9f:02:78:
f9:db:82:8d:0c:65:23:a7:1a:7b:fa:2d:75:12:4b:a7:2e:d3:
91:07:37:38:db:6d:14:44:da:15:46:bd:3c:7a:ab:87:60:7a:
c4:c0:98:e6:3f:fc:93:24:4a:10:bc:74:1e:82:36:48:7c:8f:
3d:d7:b6:97:89:d2:d3:9f:02:90:1c:65:75:65:ce:1a:d5:d8:
90:10:7a:37:4e:03:79:ba:23:de:5c:51:ff:70:d8:98:36:8f:
77:1d:20:6d:12:4e:f8:ce:8c:3d:fb:99:0e:d3:b1:f6:01:73:
ec:5e:e3:d2:a9:6d:b9:27:f1:73:eb:bd:34:19:a5:61:fc:6f:
eb:73:db:79:8e:7f:d1:e3:3b:80:01:3a:b0:62:be:82:4c:10:
14:ea:91:6d:33:62:47:28:cb:8b:c2:db:bf:6b:02:f5:ef:42:
94:f4:c6:67:88:1f:78:78:2b:66:51:47:2f:c0:ae:c8:23:f8:
53:5b:12:87:05:17:a9:ce:3b:1c:41:c0:29:13:6b:09:87:e1:
da:da:d8:f7:5e:0e:6c:40:a0:af:81:2e:51:4f:f2:1e:c6:c6:
5a:31:3b:92:a9:74:99:fd:53:f1:68:cd:a1:10:cd:48:30:47:
c5:37:c1:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 19:19:28 2026 by rpki-client