Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8450a1-66db-48c6-93b8-947859c0ecc4/1/mmLiahyv_1UwpwGQyNAAwQ8kuWY.mft
File: mmLiahyv_1UwpwGQyNAAwQ8kuWY.mft (raw, json)
Hash identifier: DDL/7VpnZueoWF477Up8EjPw+bJFMwQx+X14bq3rUno=
Subject key identifier: D1:0E:B9:F2:8F:D2:82:09:43:F3:F7:0E:96:6A:20:50:BD:F9:01:C9
Authority key identifier: 9A:62:E2:6A:1C:AF:FF:55:30:A7:01:90:C8:D0:00:C1:0F:24:B9:66
Certificate issuer: /CN=9a62e26a1cafff5530a70190c8d000c10f24b966
Certificate serial: 019D29CE6CB651A6BF197496AB5232D2442E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mmLiahyv_1UwpwGQyNAAwQ8kuWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/8450a1-66db-48c6-93b8-947859c0ecc4/1/mmLiahyv_1UwpwGQyNAAwQ8kuWY.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 11:01:27 +0000
Manifest this update: Thu 26 Mar 2026 11:01:27 +0000
Manifest next update: Fri 27 Mar 2026 11:01:27 +0000
Files and hashes: 1: PzE7Xo74WSE5IepeAcF3qHZnsjo.roa (hash: DmGaRaKHvP4r6YlqDGNyrpBgSveCtDMrds7C4QXYmAE=)
2: mmLiahyv_1UwpwGQyNAAwQ8kuWY.crl (hash: Xud+yDTF8LBDKxZOP5PIsPN7g+xurwnpwmlh9qk85JI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/8450a1-66db-48c6-93b8-947859c0ecc4/1/mmLiahyv_1UwpwGQyNAAwQ8kuWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/8450a1-66db-48c6-93b8-947859c0ecc4/1/mmLiahyv_1UwpwGQyNAAwQ8kuWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mmLiahyv_1UwpwGQyNAAwQ8kuWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:6c:b6:51:a6:bf:19:74:96:ab:52:32:d2:44:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a62e26a1cafff5530a70190c8d000c10f24b966
Validity
Not Before: Mar 26 11:01:27 2026 GMT
Not After : Mar 27 11:01:27 2026 GMT
Subject: CN=d10eb9f28fd2820943f3f70e966a2050bdf901c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:a8:d9:87:20:b1:b1:ef:a5:a6:17:71:e7:9c:
be:b7:e4:f4:47:9e:55:53:61:11:ea:5d:03:f1:e3:
64:a0:63:25:aa:18:01:f6:4e:90:71:12:79:29:f5:
c4:2d:8c:60:25:09:b9:f6:6d:02:10:17:68:6b:b3:
1f:59:54:a6:5b:04:5e:33:26:31:61:7c:e8:d8:58:
0d:0c:27:50:d3:10:dc:c9:d1:ae:0a:32:12:f1:68:
16:e7:79:ba:a2:11:f6:b3:01:df:0d:a7:ea:ac:df:
f3:3f:9a:43:ac:56:da:4d:c3:1c:d5:54:0d:d5:ff:
2d:71:1d:60:72:1a:69:ac:52:78:a7:4d:91:6d:27:
b2:77:a7:3d:06:85:83:53:43:6a:0c:22:2a:b4:ab:
af:4c:e1:3d:dc:0b:62:81:a8:03:9e:ea:82:b6:0d:
4d:18:ec:02:1f:16:7b:84:16:0f:2a:34:68:b8:e4:
e0:eb:09:20:c5:29:46:2d:a0:cc:8e:a2:26:fa:8d:
a7:b6:4a:6e:e9:f2:12:4b:8f:16:85:4c:23:01:74:
77:a2:e7:6a:9b:a4:9a:01:7c:a6:ae:bf:da:92:20:
74:3e:85:9d:d5:f1:8c:86:65:9c:84:25:08:bf:2e:
c3:1f:4a:92:ad:0c:1b:5b:7e:f5:9d:09:db:41:4a:
22:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:0E:B9:F2:8F:D2:82:09:43:F3:F7:0E:96:6A:20:50:BD:F9:01:C9
X509v3 Authority Key Identifier:
keyid:9A:62:E2:6A:1C:AF:FF:55:30:A7:01:90:C8:D0:00:C1:0F:24:B9:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmLiahyv_1UwpwGQyNAAwQ8kuWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8450a1-66db-48c6-93b8-947859c0ecc4/1/mmLiahyv_1UwpwGQyNAAwQ8kuWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8450a1-66db-48c6-93b8-947859c0ecc4/1/mmLiahyv_1UwpwGQyNAAwQ8kuWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:76:4e:be:71:4f:63:60:43:8f:b3:49:5e:7f:63:02:0c:93:
df:0d:e5:5f:9d:de:f8:58:96:3d:01:80:bf:22:6f:4a:72:d9:
05:91:4c:b4:94:ff:e5:ae:2d:a1:a3:a3:15:b1:07:9e:e4:ce:
db:3f:e9:5e:1c:48:a5:d5:b9:75:67:b2:34:6b:cd:21:47:68:
95:1f:b2:1f:60:bf:9b:c3:19:b2:42:f3:8a:f5:97:73:83:89:
d5:a5:a7:5e:00:ad:3c:fd:0c:13:54:66:42:e4:2f:7f:63:29:
49:d4:61:da:1d:2f:ca:a3:00:b2:1c:85:a4:cf:6c:78:7f:21:
e3:ee:e1:79:19:92:7d:9f:3e:3f:36:de:a0:db:84:cd:fe:24:
89:94:44:d3:20:d8:29:87:af:b9:73:69:2f:e8:29:37:0c:b5:
aa:ea:59:27:8f:ce:69:ac:8e:54:f2:f7:35:d0:ff:23:96:3f:
30:7f:f1:e0:39:db:c7:c0:9d:7b:0a:4f:d4:4e:2c:db:f7:5c:
d3:34:95:ae:44:3d:7c:0f:47:7e:3e:9b:86:25:c6:7e:d8:19:
ed:b3:ec:03:a5:0c:63:7e:b0:33:db:f3:5a:85:ae:fa:aa:f0:
7d:a7:db:cd:e9:b2:a0:5e:5a:b9:23:53:bc:74:1a:da:e3:52:
46:7a:0a:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pzmy2Uaa/GXSWq1Iy0kQuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhNjJlMjZhMWNhZmZmNTUzMGE3MDE5MGM4ZDAwMGMxMGYy
NGI5NjYwHhcNMjYwMzI2MTEwMTI3WhcNMjYwMzI3MTEwMTI3WjAzMTEwLwYDVQQD
EyhkMTBlYjlmMjhmZDI4MjA5NDNmM2Y3MGU5NjZhMjA1MGJkZjkwMWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA46jZhyCxse+lphdx55y+t+T0R55V
U2ER6l0D8eNkoGMlqhgB9k6QcRJ5KfXELYxgJQm59m0CEBdoa7MfWVSmWwReMyYx
YXzo2FgNDCdQ0xDcydGuCjIS8WgW53m6ohH2swHfDafqrN/zP5pDrFbaTcMc1VQN
1f8tcR1gchpprFJ4p02RbSeyd6c9BoWDU0NqDCIqtKuvTOE93AtigagDnuqCtg1N
GOwCHxZ7hBYPKjRouOTg6wkgxSlGLaDMjqIm+o2ntkpu6fISS48WhUwjAXR3oudq
m6SaAXymrr/akiB0PoWd1fGMhmWchCUIvy7DH0qSrQwbW371nQnbQUoibQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNEOufKP0oIJQ/P3DpZqIFC9+QHJMB8GA1UdIwQY
MBaAFJpi4mocr/9VMKcBkMjQAMEPJLlmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbW1MaWFoeXZfMVV3cHdHUXlOQUF3UThrdVdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy84NDUwYTEtNjZkYi00OGM2LTkzYjgt
OTQ3ODU5YzBlY2M0LzEvbW1MaWFoeXZfMVV3cHdHUXlOQUF3UThrdVdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy84NDUwYTEtNjZkYi00OGM2LTkzYjgtOTQ3ODU5YzBlY2M0
LzEvbW1MaWFoeXZfMVV3cHdHUXlOQUF3UThrdVdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZXZOvnFP
Y2BDj7NJXn9jAgyT3w3lX53e+FiWPQGAvyJvSnLZBZFMtJT/5a4toaOjFbEHnuTO
2z/pXhxIpdW5dWeyNGvNIUdolR+yH2C/m8MZskLzivWXc4OJ1aWnXgCtPP0ME1Rm
QuQvf2MpSdRh2h0vyqMAshyFpM9seH8h4+7heRmSfZ8+PzbeoNuEzf4kiZRE0yDY
KYevuXNpL+gpNwy1qupZJ4/OaayOVPL3NdD/I5Y/MH/x4Dnbx8CdewpP1E4s2/dc
0zSVrkQ9fA9Hfj6bhiXGftgZ7bPsA6UMY36wM9vzWoWu+qrwfafbzemyoF5auSNT
vHQa2uNSRnoKew==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:58:22 2026 by rpki-client