
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.mft
File: livXalysKD7OCg-OqyyXAhQB-4k.mft (raw, json)
Hash identifier: yeIN2DUw9OHIrGOTgDVYlXTiscAylyHQ1hjWyPpuYA0=
Subject key identifier: 98:EF:72:3D:21:90:20:71:EE:A2:62:3D:7F:B4:A6:38:7E:3D:89:BB
Authority key identifier: 96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89
Certificate issuer: /CN=962bd76a5cac283ece0a0f8eab2c97021401fb89
Certificate serial: 019F935B5864247CE5842FB914E2BDFEBEA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.mft
Manifest number: 0389
Signing time: Fri 24 Jul 2026 09:01:04 +0000
Manifest this update: Fri 24 Jul 2026 09:01:04 +0000
Manifest next update: Sat 25 Jul 2026 09:01:04 +0000
Files and hashes: 1: 1-8B1HJiBNZt2mLa484DWmBMQSFU.roa (hash: oP/xM98/RPfu/5TqpnGJmxNimUeay7qqliPVccblTpQ=)
2: 1-Qeq6hhgmsnV9dwc9CM4x2DEp_o.roa (hash: hqKeYIw+K+XvdJwrb3vT/mCOwu7/uLLr532kYdiZTtk=)
3: 1-aH8x_etPHb7N5lZxH2EJ06tejk.roa (hash: 4D8bZL+jOKZy7BZQ0lGHl4mnZyTD+EOB54zTxO+almE=)
4: 4qUkTKGm6pGhy2LKyNsE9JLEu9s.roa (hash: n8RFY9wAkRTw92IGWmg3oXl6nw20aGymGHPFNpvZX/Q=)
5: 7pVh0pZTEc1E6xJL3InhvltDz2s.roa (hash: MmrKH/vPG61mnh+lBIkFizSc2omHNbwFSetlTBexxRo=)
6: C9KkvhzLL551ZPbXxx1FoBbqXf4.roa (hash: UeCszyUVIZvVTu9aAl83hlN/RDOqN4hXz1ho/Fs2ISc=)
7: DiqaDwrLCUvrlPkP-0eihteOneY.roa (hash: TuifAr8s69JWfjPp9b5i4tGf2xSWW7Ct4OGJ2sDmRwg=)
8: E7dX5V4ZZyskIK6Sp-YQmDZAzFk.roa (hash: 8IC9Nubg/5Jpt50f9l4q2zuXWjF7ZZkCNpKaDWsctR0=)
9: FL-mLisikCniX8ptzn2CQkY1EP4.roa (hash: p99XPLiTd+DQjXuhkl7h+/enU6blE89NaEQgomxDU3g=)
10: ILu_AnT71_jqTT1HhE40TqJOdBo.roa (hash: v+T9evuaFhdkdWDw60Q6K5Wai2JKqCPu6+wdTxjVZWA=)
11: INMig3Zy-dQgwfBhoGL01YH4fc8.roa (hash: leDHQRzQxheOPvwkn7FM2wxNIq/5wYwXFgbHaxmfmCI=)
12: JC85WxCaKuEyR6NXwu3_DF8LXLA.roa (hash: rER8RkdciS0Rr7SHnwB7GhEy6V2AmgP4zYhE0MPpy5E=)
13: KeqImmzvqvUw699BI75ZaQ7ioDw.roa (hash: VHvGEdrea3UPh7EJODxEgR688m3Nrv3k0gMHJv5zc0k=)
14: Klm1nGj_LSMBfKkyGJjvAIaeok0.roa (hash: +VWNIbC6wBoyYfO8f7wueYZjrJvM5UfplemzFp8SVEk=)
15: MUNO72hvtYB3fmRkFtv1rgwIrrI.roa (hash: 0+JybXCQqdEUu6rd5Vuvg6qO6FA4ju/4j8EDsdhl/m4=)
16: MYydd3R4Y9vwrgnnxpOHm9Sf_mU.roa (hash: 4CrwudFLN29ynwGmSG8gQhxSRQhVd7AqzZeF9S6O/UU=)
17: Tn5ng77xX18Flj7EQ7YaizP0HfA.roa (hash: CHCJga4qHQGdS7XPRJpja8I3f/1aSKKQiYWwpS8klg8=)
18: U0Zw7nxZcY6li2EowQpo7GWvwRw.roa (hash: W83oCNCWNdwCZPqO8EuYCWEQ9TVK20LIVtEgGqY7xpE=)
19: VSwkJ0GTbsZyHHuEwJjk5eyLLVo.roa (hash: q7NhUna+Yr8hoQULMRHTcRxkkh3p5fNlwvhMsBuSNTo=)
20: YZbCezesixGK-5MW0VqY6oAGzr8.roa (hash: LnOZHLS4IEDjVPpbQKeCImMc1ehQ/d37mLM38R6989s=)
21: elTx126yBsA7dCzExkxDADRceX0.roa (hash: jjGMv6aGadJUsAbEJBuS7OfBzf4SwmuImpVeMEodGKw=)
22: hHSi4PfsUyyK5t-rXYcHJcCojHE.roa (hash: Knyezx/2va6jD7IAu94rMYimek7OiBeNMohqO9LmNvE=)
23: lUYFhgrgYwzzCnla_INuymemYAw.roa (hash: T2RgN54GjvPAK2/1QFgutmjyYI2lIMsPl9ROZAL8Td0=)
24: livXalysKD7OCg-OqyyXAhQB-4k.crl (hash: o5Wn24WVmBGu2gssBOJhjdTEHddoyvuHOoT38XoP2TU=)
25: qMqM7n6f-KPTo3oe2dq3OGpBM4A.roa (hash: not8eC9n1FQaCMdRnuKBK1UZKvUW8ljbh5d4usrwdB4=)
26: raYhTrbA7AoozsXURA3QDIX0YBc.roa (hash: B+Xtv54fCZUAtknXOZ9mXLkVpBJk+ZPCTEYDeFWV1/Y=)
27: wJ9Qk8tBAILIT2MzqFz67oY-ihg.roa (hash: cE8692Fre2vK3h5ac8/c3SU5xGg2cihxJaN+/QF2FJY=)
28: winPsxerfHGMkrLr9l0fOmV2KSs.roa (hash: arn2Fc0z0hyb7bzwb+vfTUpY+WA5EJjzLxDCgG/O35E=)
29: yE8_O8Q4IwHJTINRIt0LbeP-GOY.roa (hash: 6l3rgcL1TxtnHd0pNzPe7Ddtbuc1oQAiArSsH/nUS34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:58:64:24:7c:e5:84:2f:b9:14:e2:bd:fe:be:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962bd76a5cac283ece0a0f8eab2c97021401fb89
Validity
Not Before: Jul 24 09:01:04 2026 GMT
Not After : Jul 25 09:01:04 2026 GMT
Subject: CN=98ef723d21902071eea2623d7fb4a6387e3d89bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c8:00:46:a2:79:38:da:ce:7d:59:f3:d6:d3:
c1:05:77:ff:df:06:54:26:da:ed:18:e5:6b:db:7f:
78:41:ab:b7:63:48:d1:ba:ff:08:5e:c3:70:b7:41:
13:e3:db:bd:77:7e:b0:3f:df:85:79:e6:01:99:5d:
78:3f:7e:4d:67:90:7f:a8:c9:7c:d2:65:2e:33:46:
76:be:af:c9:07:42:9d:7d:db:8e:73:1b:37:7a:93:
c0:66:5a:f8:6b:bf:a9:a3:c0:e6:b1:0a:71:5c:2c:
a1:de:7a:73:16:da:b0:e8:14:29:a6:b2:c3:85:99:
08:ab:cb:5c:d7:d0:db:6f:d1:81:4f:57:32:21:e2:
43:e8:0f:00:0d:4d:2f:b8:87:0c:88:f3:89:8c:3a:
83:24:ed:b0:93:49:47:42:00:33:f4:a4:9f:b6:49:
b3:e7:f8:74:8f:be:69:53:bf:9f:53:64:78:6e:04:
a6:00:cb:f6:c4:d5:ba:38:7d:78:7d:87:ce:bf:79:
c5:61:c6:3d:9e:51:ca:98:c7:b8:2a:05:e9:08:f7:
16:2d:98:24:87:89:56:d7:86:2e:93:69:3a:07:71:
e0:ab:79:64:23:bb:dc:fc:6d:07:aa:3c:2d:e9:6b:
15:fd:a1:ed:4b:a4:61:6d:7a:e8:dd:9b:4e:48:3f:
b2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:EF:72:3D:21:90:20:71:EE:A2:62:3D:7F:B4:A6:38:7E:3D:89:BB
X509v3 Authority Key Identifier:
keyid:96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:e4:56:d7:5f:87:d0:cc:c0:b3:e5:89:8b:69:42:83:d5:55:
94:b7:46:33:b1:95:e9:6d:c8:8a:01:4d:df:e8:2c:56:1a:c6:
71:dd:7d:35:be:8e:cd:9e:3d:34:5c:2f:e2:af:70:38:7c:7a:
b0:67:d6:e5:27:31:f6:11:dc:03:ef:f8:2e:f1:23:1e:8a:3d:
e1:af:89:e1:e0:d3:e5:e8:b3:4b:ec:3c:e6:6e:40:b2:d5:64:
33:a1:8b:81:1b:8d:b9:b8:ba:cc:c5:a0:a8:c0:c2:e2:d6:7e:
f6:3e:9b:f3:cc:d9:39:48:e8:71:43:10:34:61:8f:c2:10:cf:
ce:c7:ab:06:0d:8c:b4:57:43:57:6c:de:6a:8e:32:83:9a:81:
64:ac:03:24:bf:90:b1:cc:4f:59:d2:ff:75:6a:3b:46:47:90:
b1:6c:7d:81:5f:07:4e:10:60:a6:4d:e3:c4:68:ee:d4:f4:67:
cd:67:33:b3:4e:d6:bd:9c:2b:d8:8f:30:9f:91:b4:48:06:92:
eb:33:a8:0e:6d:41:2e:8b:d9:17:da:a3:bf:ca:88:05:47:17:
21:41:41:2d:10:1b:57:61:c8:b3:46:ce:0f:73:e2:0e:a3:6c:
9d:c2:83:1a:b9:19:34:3c:88:37:d0:05:3a:2c:01:de:36:59:
1a:8b:04:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:41:01 2026 by rpki-client