Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft
File: liqjLr7JzqHJPEvVX4XvfgpdT5I.mft (raw, json)
Hash identifier: i//6qHA62/53EXdyVp/Bb17PeRQSXFMokJXZZDVsL78=
Subject key identifier: F8:27:BA:2B:AD:BE:42:17:C7:98:77:E7:37:BD:3D:2D:D6:91:0D:EA
Authority key identifier: 96:2A:A3:2E:BE:C9:CE:A1:C9:3C:4B:D5:5F:85:EF:7E:0A:5D:4F:92
Certificate issuer: /CN=962aa32ebec9cea1c93c4bd55f85ef7e0a5d4f92
Certificate serial: 019D265FBF25CD37AF31E0C72C2129300D40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/liqjLr7JzqHJPEvVX4XvfgpdT5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft
Manifest number: 0C48
Signing time: Wed 25 Mar 2026 19:01:41 +0000
Manifest this update: Wed 25 Mar 2026 19:01:41 +0000
Manifest next update: Thu 26 Mar 2026 19:01:41 +0000
Files and hashes: 1: 1-3zUelmkTSgTStRjVWxjNNQBiM4.roa (hash: HmKxIUYZnOTiOcoe1j/2oHqq1Af7hqG1JDavmuwUScA=)
2: 2W_yiasSlHxMzGvCseIvYg5Ozd4.roa (hash: KtoflOTIZ2ZK45JBs/qFK0YOESeh/OnZjIbaMrPqgdU=)
3: liqjLr7JzqHJPEvVX4XvfgpdT5I.crl (hash: djJ5zaUgc4hfUZKkxQfLhVuMLQjaN4Vuw29eIsAckco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/liqjLr7JzqHJPEvVX4XvfgpdT5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:bf:25:cd:37:af:31:e0:c7:2c:21:29:30:0d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962aa32ebec9cea1c93c4bd55f85ef7e0a5d4f92
Validity
Not Before: Mar 25 19:01:41 2026 GMT
Not After : Mar 26 19:01:41 2026 GMT
Subject: CN=f827ba2badbe4217c79877e737bd3d2dd6910dea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:1e:5f:d6:c8:59:a9:ee:b5:67:8c:34:db:24:
8a:17:5c:c5:cc:f0:1a:8a:60:29:d3:78:4c:aa:47:
f9:57:08:a7:1e:7c:46:1e:80:2d:e8:50:2d:39:95:
bc:1e:43:c4:bc:5b:16:f4:bc:96:1a:e9:b4:d0:6d:
f5:6f:61:2e:67:95:b9:2e:6f:72:65:11:5a:60:88:
cd:7e:2a:b0:34:7e:1a:ee:af:c0:a3:9f:26:ed:5d:
e5:50:78:a5:9b:3e:2e:97:77:e5:f4:9b:aa:0a:3c:
ef:7f:dc:a3:66:ee:14:4a:e6:56:5a:ee:f7:00:59:
c2:a3:68:91:8a:23:41:9c:4e:f2:17:4b:11:cc:6d:
f0:4e:87:2e:2c:9c:b1:7f:05:33:a0:75:fb:6e:4c:
b5:05:df:60:3a:3c:c6:71:ad:47:a2:df:68:83:e4:
ae:6e:a8:bb:b7:a5:c1:9d:ac:86:9e:46:14:66:da:
b4:e5:b3:80:0a:bf:df:99:ef:0a:86:9c:a3:d1:30:
6f:8a:a2:55:6a:06:7e:3b:bc:22:73:77:ee:e5:49:
e6:13:cf:0a:ac:ff:2f:5a:b7:95:dd:29:c4:28:d7:
f1:86:26:1b:ca:a5:54:6f:8d:a0:21:cf:0f:2c:ec:
fd:97:c5:27:55:62:3f:17:04:a0:73:c2:90:25:01:
fe:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:27:BA:2B:AD:BE:42:17:C7:98:77:E7:37:BD:3D:2D:D6:91:0D:EA
X509v3 Authority Key Identifier:
keyid:96:2A:A3:2E:BE:C9:CE:A1:C9:3C:4B:D5:5F:85:EF:7E:0A:5D:4F:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/liqjLr7JzqHJPEvVX4XvfgpdT5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:99:a8:9a:47:f5:ad:ba:9e:c3:ce:26:08:3b:c6:83:fd:6b:
af:31:2d:30:e9:f5:89:28:53:35:f5:f1:63:dd:13:bc:6d:d0:
85:50:5f:55:04:70:54:cc:10:a5:8c:f7:54:e2:3b:ef:a3:d4:
7a:05:e4:07:c3:98:ec:fc:26:88:68:1b:8c:ca:c7:4e:a3:16:
3e:58:60:aa:bf:a9:4b:98:66:ef:31:b5:45:68:71:92:51:c0:
a2:25:e8:db:82:12:e7:97:c1:8d:0f:e2:1b:a9:83:fb:11:78:
43:c3:cc:c9:ed:5a:f6:2a:2e:c7:5d:29:0d:a7:a1:62:e7:a4:
2d:30:c8:ac:90:40:16:66:7c:7a:a7:76:9e:b6:9e:3a:49:d8:
80:27:5f:f9:15:79:df:1a:25:cb:04:1b:81:01:26:78:b2:68:
50:ee:b6:34:d0:44:4a:38:eb:63:87:90:4f:98:96:75:0e:b7:
08:3d:b0:b9:65:83:65:65:eb:f9:b5:c7:fc:04:d0:b4:83:73:
10:d4:d6:0b:2e:e2:df:8a:72:4b:83:0f:1e:32:e6:b5:a5:ff:
f0:27:ee:0e:c0:aa:3c:fe:fc:0a:e7:13:71:02:6c:b4:0b:aa:
f8:5d:d6:29:51:dd:87:a3:41:65:79:66:e2:88:a8:fb:93:11:
8c:66:7d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:41 2026 by rpki-client