
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.mft
File: livXalysKD7OCg-OqyyXAhQB-4k.mft (raw, json)
Hash identifier: hO+cVsOJ6OLQTYrVdiWnHAvkYyMiIFyK7bx5n6JwwtM=
Subject key identifier: 06:A5:6F:0E:8F:C3:F9:97:1D:A9:8A:0C:B6:98:E9:F7:12:B1:BB:C8
Authority key identifier: 96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89
Certificate issuer: /CN=962bd76a5cac283ece0a0f8eab2c97021401fb89
Certificate serial: 019D2B4E2E244C6674ED6D47A9960620B641
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.mft
Manifest number: 0248
Signing time: Thu 26 Mar 2026 18:00:37 +0000
Manifest this update: Thu 26 Mar 2026 18:00:37 +0000
Manifest next update: Fri 27 Mar 2026 18:00:37 +0000
Files and hashes: 1: 1-8B1HJiBNZt2mLa484DWmBMQSFU.roa (hash: oP/xM98/RPfu/5TqpnGJmxNimUeay7qqliPVccblTpQ=)
2: 1-Qeq6hhgmsnV9dwc9CM4x2DEp_o.roa (hash: hqKeYIw+K+XvdJwrb3vT/mCOwu7/uLLr532kYdiZTtk=)
3: 1-Xz0ckI9CBVF034QnylUqVKCJ2k.roa (hash: ZY5qyuJzGWTMv1saHpay6f1Y6Lu8rpI6Q1Iz7J18iUs=)
4: 1-aH8x_etPHb7N5lZxH2EJ06tejk.roa (hash: 4D8bZL+jOKZy7BZQ0lGHl4mnZyTD+EOB54zTxO+almE=)
5: 4qUkTKGm6pGhy2LKyNsE9JLEu9s.roa (hash: n8RFY9wAkRTw92IGWmg3oXl6nw20aGymGHPFNpvZX/Q=)
6: 7pVh0pZTEc1E6xJL3InhvltDz2s.roa (hash: MmrKH/vPG61mnh+lBIkFizSc2omHNbwFSetlTBexxRo=)
7: C9KkvhzLL551ZPbXxx1FoBbqXf4.roa (hash: UeCszyUVIZvVTu9aAl83hlN/RDOqN4hXz1ho/Fs2ISc=)
8: DiqaDwrLCUvrlPkP-0eihteOneY.roa (hash: TuifAr8s69JWfjPp9b5i4tGf2xSWW7Ct4OGJ2sDmRwg=)
9: E7dX5V4ZZyskIK6Sp-YQmDZAzFk.roa (hash: 8IC9Nubg/5Jpt50f9l4q2zuXWjF7ZZkCNpKaDWsctR0=)
10: FL-mLisikCniX8ptzn2CQkY1EP4.roa (hash: p99XPLiTd+DQjXuhkl7h+/enU6blE89NaEQgomxDU3g=)
11: ILu_AnT71_jqTT1HhE40TqJOdBo.roa (hash: v+T9evuaFhdkdWDw60Q6K5Wai2JKqCPu6+wdTxjVZWA=)
12: INMig3Zy-dQgwfBhoGL01YH4fc8.roa (hash: leDHQRzQxheOPvwkn7FM2wxNIq/5wYwXFgbHaxmfmCI=)
13: JC85WxCaKuEyR6NXwu3_DF8LXLA.roa (hash: rER8RkdciS0Rr7SHnwB7GhEy6V2AmgP4zYhE0MPpy5E=)
14: KeqImmzvqvUw699BI75ZaQ7ioDw.roa (hash: VHvGEdrea3UPh7EJODxEgR688m3Nrv3k0gMHJv5zc0k=)
15: MUNO72hvtYB3fmRkFtv1rgwIrrI.roa (hash: 0+JybXCQqdEUu6rd5Vuvg6qO6FA4ju/4j8EDsdhl/m4=)
16: MYydd3R4Y9vwrgnnxpOHm9Sf_mU.roa (hash: 4CrwudFLN29ynwGmSG8gQhxSRQhVd7AqzZeF9S6O/UU=)
17: QLEEsVMAnp8yBuh1hcBg5UTekXg.roa (hash: rhepJz5uuPekXjrE3FZCBDFMEp//GBVxeS0QL8Wrygc=)
18: U0Zw7nxZcY6li2EowQpo7GWvwRw.roa (hash: W83oCNCWNdwCZPqO8EuYCWEQ9TVK20LIVtEgGqY7xpE=)
19: VSwkJ0GTbsZyHHuEwJjk5eyLLVo.roa (hash: q7NhUna+Yr8hoQULMRHTcRxkkh3p5fNlwvhMsBuSNTo=)
20: YZbCezesixGK-5MW0VqY6oAGzr8.roa (hash: LnOZHLS4IEDjVPpbQKeCImMc1ehQ/d37mLM38R6989s=)
21: aP6TZ2IqLVgF0VWuJ9T3yCaCqpk.roa (hash: j6iM/mIBztj8GmnOe76w3rlLqYEbhzCf5n/E02uuQng=)
22: elTx126yBsA7dCzExkxDADRceX0.roa (hash: jjGMv6aGadJUsAbEJBuS7OfBzf4SwmuImpVeMEodGKw=)
23: hHSi4PfsUyyK5t-rXYcHJcCojHE.roa (hash: Knyezx/2va6jD7IAu94rMYimek7OiBeNMohqO9LmNvE=)
24: lUYFhgrgYwzzCnla_INuymemYAw.roa (hash: T2RgN54GjvPAK2/1QFgutmjyYI2lIMsPl9ROZAL8Td0=)
25: livXalysKD7OCg-OqyyXAhQB-4k.crl (hash: 4xs+nktPcWv2L9GtKNexUqAwFdjCNtXh7jF6+YEaFRA=)
26: qMqM7n6f-KPTo3oe2dq3OGpBM4A.roa (hash: not8eC9n1FQaCMdRnuKBK1UZKvUW8ljbh5d4usrwdB4=)
27: raYhTrbA7AoozsXURA3QDIX0YBc.roa (hash: B+Xtv54fCZUAtknXOZ9mXLkVpBJk+ZPCTEYDeFWV1/Y=)
28: wJ9Qk8tBAILIT2MzqFz67oY-ihg.roa (hash: cE8692Fre2vK3h5ac8/c3SU5xGg2cihxJaN+/QF2FJY=)
29: winPsxerfHGMkrLr9l0fOmV2KSs.roa (hash: arn2Fc0z0hyb7bzwb+vfTUpY+WA5EJjzLxDCgG/O35E=)
30: yE8_O8Q4IwHJTINRIt0LbeP-GOY.roa (hash: 6l3rgcL1TxtnHd0pNzPe7Ddtbuc1oQAiArSsH/nUS34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:2e:24:4c:66:74:ed:6d:47:a9:96:06:20:b6:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962bd76a5cac283ece0a0f8eab2c97021401fb89
Validity
Not Before: Mar 26 18:00:37 2026 GMT
Not After : Mar 27 18:00:37 2026 GMT
Subject: CN=06a56f0e8fc3f9971da98a0cb698e9f712b1bbc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d7:1a:33:82:94:8d:fc:e7:46:47:1c:7c:ec:
0a:26:07:7c:56:3b:c4:2e:83:70:24:ae:38:31:41:
91:65:52:e6:67:c2:02:85:da:c3:8e:a1:ef:69:85:
4b:2a:53:be:ff:5d:e7:03:b0:15:8c:05:c7:7f:4f:
ab:81:77:05:d0:68:15:93:75:4d:dc:c4:a0:f8:14:
17:c7:06:22:c5:f4:c4:bd:ff:7b:9d:a9:fd:bd:74:
09:58:91:0e:f6:cd:78:34:37:d7:af:47:52:9f:e9:
18:a7:83:cb:69:89:4a:f9:9a:04:55:06:85:ba:2c:
ea:00:1d:7d:e8:68:22:99:fb:52:97:36:fb:b9:9b:
b4:73:c2:94:d2:45:5f:15:3b:21:52:d8:b9:1a:cf:
a8:6b:7d:fc:03:d2:d0:7f:ab:61:7e:60:a2:07:34:
1c:8b:be:ae:83:c9:9a:1e:24:20:a0:49:63:8b:1c:
17:b1:5a:f3:1e:45:6d:dc:f8:2f:a2:7e:96:ca:8f:
71:d4:2f:81:2a:68:05:51:1f:d1:ac:e0:80:4a:79:
0a:40:e4:b5:f8:b7:bf:07:5d:51:e5:c6:37:99:de:
71:3b:86:dd:7c:e6:cd:75:04:b3:4d:d8:e1:41:6b:
9c:07:1f:fd:36:c0:6e:8a:60:b9:8d:2b:26:15:5d:
49:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:A5:6F:0E:8F:C3:F9:97:1D:A9:8A:0C:B6:98:E9:F7:12:B1:BB:C8
X509v3 Authority Key Identifier:
keyid:96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:84:68:e6:bf:c4:5f:ec:79:60:09:2e:f8:50:b9:71:57:ed:
d1:1c:93:fc:d5:b4:30:bf:76:77:20:18:08:44:1e:a1:ca:aa:
0c:70:0e:52:35:4a:64:7d:fb:7d:6f:8c:f2:a1:b7:46:73:81:
87:f2:47:89:89:95:8a:58:90:4c:3e:fe:31:d8:cf:88:e9:ca:
ae:3e:80:38:ec:7c:a1:00:67:2f:0d:0a:01:cc:67:24:25:9a:
b4:52:4a:f1:15:44:64:71:d6:e5:ff:8f:d0:c1:dc:0f:32:ed:
d0:7b:87:9f:16:7a:d3:e3:46:ba:8f:44:3f:cf:7b:4c:0e:7a:
75:a7:22:76:c9:d9:86:c1:5f:bf:e0:e2:74:28:03:d4:73:0f:
ad:61:33:de:f8:70:92:b5:0d:eb:0d:16:ee:21:e3:2e:35:be:
a1:e2:14:fd:bf:41:d3:ec:39:b4:16:da:74:65:79:03:7e:4f:
e9:d4:fc:68:ca:5d:64:75:14:e6:3c:bf:0c:c5:3a:e8:a5:52:
49:04:f1:cc:9a:1a:bd:c8:bb:2c:37:d9:8e:35:6f:0b:83:bc:
da:c0:4e:52:aa:a5:09:f8:9a:0c:40:9c:c1:b1:bb:61:6f:0c:
38:81:42:24:e1:0b:19:29:4e:20:60:d3:fe:ac:21:11:f5:f5:
8c:06:da:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:12:45 2026 by rpki-client