Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft
File: liqjLr7JzqHJPEvVX4XvfgpdT5I.mft (raw, json)
Hash identifier: NXMUtwK58cx+TIbAdBo3Ld6vYmltgf1c1Jeh+09yLZA=
Subject key identifier: 87:3C:F9:09:59:54:49:B3:51:22:AB:6D:63:B3:3D:E6:78:E8:8E:B5
Authority key identifier: 96:2A:A3:2E:BE:C9:CE:A1:C9:3C:4B:D5:5F:85:EF:7E:0A:5D:4F:92
Certificate issuer: /CN=962aa32ebec9cea1c93c4bd55f85ef7e0a5d4f92
Certificate serial: 019F905A44A0B1FCD6A3F23CB452E6B03656
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/liqjLr7JzqHJPEvVX4XvfgpdT5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft
Manifest number: 0D88
Signing time: Thu 23 Jul 2026 19:01:02 +0000
Manifest this update: Thu 23 Jul 2026 19:01:02 +0000
Manifest next update: Fri 24 Jul 2026 19:01:02 +0000
Files and hashes: 1: 1-3zUelmkTSgTStRjVWxjNNQBiM4.roa (hash: HmKxIUYZnOTiOcoe1j/2oHqq1Af7hqG1JDavmuwUScA=)
2: 2W_yiasSlHxMzGvCseIvYg5Ozd4.roa (hash: KtoflOTIZ2ZK45JBs/qFK0YOESeh/OnZjIbaMrPqgdU=)
3: liqjLr7JzqHJPEvVX4XvfgpdT5I.crl (hash: EOBLbp8hABwUjYs/Q3C1TybKRa8fE2KHpiQWCDJrgHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/liqjLr7JzqHJPEvVX4XvfgpdT5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:44:a0:b1:fc:d6:a3:f2:3c:b4:52:e6:b0:36:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962aa32ebec9cea1c93c4bd55f85ef7e0a5d4f92
Validity
Not Before: Jul 23 19:01:02 2026 GMT
Not After : Jul 24 19:01:02 2026 GMT
Subject: CN=873cf909595449b35122ab6d63b33de678e88eb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:eb:8a:b5:67:69:70:83:6a:a8:59:c7:c8:76:
d4:9b:3e:e4:82:82:7a:8a:73:49:e1:da:83:90:af:
4a:a6:93:d1:9a:5c:1f:d2:68:b7:82:a1:5e:4f:e9:
8a:b7:78:4d:5a:1b:bc:0d:2a:e1:06:e3:74:2e:da:
25:6f:9d:46:3f:e3:4d:41:86:f6:1b:08:52:f2:50:
ae:6d:f9:e8:70:ab:c4:8f:61:eb:87:a2:dd:34:fe:
d1:a7:fa:f2:58:0b:8d:6d:0f:d1:23:26:bf:ac:e0:
21:2a:e0:45:2f:c6:e2:81:7a:66:4e:fa:08:0a:2b:
5c:f7:8e:63:7b:a0:b1:ae:b7:d8:b7:2e:58:d7:f6:
4c:16:23:a6:81:bc:a2:be:80:e6:6b:42:e1:d4:c7:
4a:36:67:70:eb:db:f1:fc:62:5f:a1:9a:45:69:5c:
6c:d5:c1:b3:de:7d:04:1a:17:08:46:b2:3d:63:54:
b1:36:c6:a1:72:e7:9c:17:47:ce:7e:c1:17:d5:99:
88:3e:35:ee:b5:0a:d4:a0:ab:b6:fb:d3:ac:1d:62:
16:a3:c5:f5:4f:14:60:f0:82:7f:1a:08:be:66:35:
89:bd:78:2f:a6:71:53:43:a4:cf:3c:bb:9f:d5:91:
27:f4:b5:7d:42:36:f1:1f:f6:00:0e:77:11:22:b1:
8f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:3C:F9:09:59:54:49:B3:51:22:AB:6D:63:B3:3D:E6:78:E8:8E:B5
X509v3 Authority Key Identifier:
keyid:96:2A:A3:2E:BE:C9:CE:A1:C9:3C:4B:D5:5F:85:EF:7E:0A:5D:4F:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/liqjLr7JzqHJPEvVX4XvfgpdT5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:72:13:58:61:c5:98:65:8b:c5:27:92:d9:a9:e3:09:3d:97:
e1:13:9f:98:58:ac:d8:88:e4:6e:4b:77:60:13:85:fb:fb:f9:
2b:bd:cf:1e:94:00:0b:a5:f5:1b:32:03:89:73:9f:8f:31:6c:
2b:53:d0:47:0e:fd:de:5e:6a:55:97:01:53:31:c5:72:85:4f:
66:79:03:ef:86:eb:a8:28:be:15:60:f0:ef:c0:76:17:96:1a:
e4:ac:c5:04:cb:57:08:2e:46:88:a0:50:b6:72:bc:90:4d:a7:
42:91:19:3e:ac:02:90:0a:cb:14:48:60:86:2e:66:2c:64:5c:
96:c5:da:23:fc:70:25:84:6a:86:84:72:8f:22:9b:fe:6a:7a:
c6:17:e1:da:f9:4f:68:c2:cd:13:e9:fa:66:ba:c1:af:fc:a2:
77:51:4f:51:92:92:a9:6d:65:3c:fb:2f:e6:ac:25:f8:b5:df:
a4:bd:88:91:ab:5c:3f:f0:88:5c:ab:28:28:a1:55:23:e1:fb:
6c:08:75:46:07:79:5e:30:f0:8a:51:06:09:57:dd:02:8b:46:
f1:fb:d4:80:be:d3:e1:cc:9e:89:6a:05:06:b1:a2:f9:fa:f7:
f0:e3:3a:00:00:9d:b0:b0:df:dd:4d:6e:0a:d1:4a:62:d8:b2:
fa:b4:99:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:43:09 2026 by rpki-client