Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft
File: liqjLr7JzqHJPEvVX4XvfgpdT5I.mft (raw, json)
Hash identifier: 1PA1j1k2YEjk6H5Sx9J/Bzcj7iPQBWHqlyddtIQH7Uo=
Subject key identifier: 5C:96:1D:13:18:28:47:42:08:2E:5C:3B:B4:BA:F7:90:92:7C:8D:AD
Authority key identifier: 96:2A:A3:2E:BE:C9:CE:A1:C9:3C:4B:D5:5F:85:EF:7E:0A:5D:4F:92
Certificate issuer: /CN=962aa32ebec9cea1c93c4bd55f85ef7e0a5d4f92
Certificate serial: 019E1D90CCB0776F68C93A8B80EDC4669956
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/liqjLr7JzqHJPEvVX4XvfgpdT5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft
Manifest number: 0CC8
Signing time: Tue 12 May 2026 19:01:29 +0000
Manifest this update: Tue 12 May 2026 19:01:29 +0000
Manifest next update: Wed 13 May 2026 19:01:29 +0000
Files and hashes: 1: 1-3zUelmkTSgTStRjVWxjNNQBiM4.roa (hash: HmKxIUYZnOTiOcoe1j/2oHqq1Af7hqG1JDavmuwUScA=)
2: 2W_yiasSlHxMzGvCseIvYg5Ozd4.roa (hash: KtoflOTIZ2ZK45JBs/qFK0YOESeh/OnZjIbaMrPqgdU=)
3: liqjLr7JzqHJPEvVX4XvfgpdT5I.crl (hash: xZ1w+ZFrWkg6T5+vPjyy3gMU681QswzZJ5lrwIgbdF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/liqjLr7JzqHJPEvVX4XvfgpdT5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:cc:b0:77:6f:68:c9:3a:8b:80:ed:c4:66:99:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962aa32ebec9cea1c93c4bd55f85ef7e0a5d4f92
Validity
Not Before: May 12 19:01:29 2026 GMT
Not After : May 13 19:01:29 2026 GMT
Subject: CN=5c961d1318284742082e5c3bb4baf790927c8dad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:75:f0:b8:21:6c:84:52:93:6d:99:2d:23:d3:
dc:5f:7b:0e:bc:0b:a2:b0:35:64:97:b3:4e:97:3e:
1d:25:17:de:c8:97:b4:42:a9:70:54:3e:2d:69:2c:
47:79:25:4e:dd:d6:c6:c3:9f:69:49:45:3d:06:54:
1f:58:04:1d:4d:22:e1:64:77:20:ca:7b:d5:b5:09:
72:b2:3d:bd:93:75:30:c0:0a:52:e0:51:21:23:cf:
22:1e:e1:fd:55:53:59:28:1d:e0:51:71:d0:1f:50:
24:00:42:f5:d7:30:83:71:76:6e:c1:f9:56:66:8a:
22:a3:5f:52:3d:57:a0:4b:90:c8:01:9f:2b:c1:07:
fe:bb:5e:ad:c2:6a:92:ba:12:79:53:4e:eb:be:8c:
4e:0f:75:3a:6b:18:99:67:9b:2a:0c:8d:f3:c2:87:
5e:ff:cb:0b:ec:94:a8:10:c7:e4:6b:15:f1:41:19:
ca:fb:c0:57:08:d0:7b:be:7f:e2:b0:c1:df:69:20:
5f:49:92:bc:1c:95:3b:d3:83:29:c8:44:f8:d2:93:
52:47:da:49:af:7e:4b:8b:08:b4:39:db:90:a4:83:
c6:62:4d:c8:dd:9c:94:f6:12:04:bb:da:45:ef:95:
5d:ab:d3:72:b2:07:47:35:75:71:1f:85:85:df:7b:
68:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:96:1D:13:18:28:47:42:08:2E:5C:3B:B4:BA:F7:90:92:7C:8D:AD
X509v3 Authority Key Identifier:
keyid:96:2A:A3:2E:BE:C9:CE:A1:C9:3C:4B:D5:5F:85:EF:7E:0A:5D:4F:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/liqjLr7JzqHJPEvVX4XvfgpdT5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:21:76:59:7d:c3:5e:07:9c:42:ff:f8:7e:76:55:aa:2a:fe:
3e:6a:66:59:1c:11:68:45:9a:8e:e8:5a:9e:15:f9:00:ba:96:
c9:dd:1c:f3:ea:7f:29:5f:0d:14:30:ef:e2:91:34:6d:66:25:
40:22:e7:10:e6:e6:64:74:32:02:f0:46:f5:18:de:3c:15:7e:
53:f5:fb:9a:ff:72:f2:fc:3d:58:9b:0c:c1:f5:2d:db:fc:84:
04:01:41:0e:51:0c:00:73:1a:28:4e:4c:a0:70:64:2e:26:52:
f0:b4:f7:71:d2:d3:18:83:4c:25:93:e7:85:64:9e:47:c1:90:
44:40:a3:b0:df:e8:6c:a7:58:80:2f:61:91:90:a8:01:4d:2a:
d3:63:ca:e1:01:a8:4f:19:d6:48:5b:e7:f8:d1:b1:77:80:9f:
16:1c:ef:fe:c1:cb:88:1b:0c:98:48:de:67:dc:bb:c5:fb:15:
6e:fb:2f:b2:16:00:e7:2d:a4:82:85:f7:05:38:5a:1e:4b:ec:
60:24:73:32:5d:29:4c:77:b7:cb:0f:20:8f:b8:26:a7:80:be:
f2:ce:e6:40:3b:f8:d8:85:42:4f:b0:44:aa:c1:52:0a:77:f1:
22:4a:ec:db:e1:6a:81:42:2f:7a:90:40:0a:bf:90:64:ec:80:
1f:25:3c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:36:03 2026 by rpki-client