Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft
File: liqjLr7JzqHJPEvVX4XvfgpdT5I.mft (raw, json)
Hash identifier: 7Iry5O5tY1qhNoaEvIkdPnlvU7JO5MFi/vna8GJ/2zU=
Subject key identifier: 98:6C:00:59:8B:F5:A5:C4:3C:2B:72:6E:E3:D6:14:80:7F:DB:DF:00
Authority key identifier: 96:2A:A3:2E:BE:C9:CE:A1:C9:3C:4B:D5:5F:85:EF:7E:0A:5D:4F:92
Certificate issuer: /CN=962aa32ebec9cea1c93c4bd55f85ef7e0a5d4f92
Certificate serial: 01A0DE73E1BA1D1B4026D34E6459B3818BEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/liqjLr7JzqHJPEvVX4XvfgpdT5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft
Manifest number: 0E35
Signing time: Sat 26 Sep 2026 16:02:11 +0000
Manifest this update: Sat 26 Sep 2026 16:02:11 +0000
Manifest next update: Sun 27 Sep 2026 16:02:11 +0000
Files and hashes: 1: 1-3zUelmkTSgTStRjVWxjNNQBiM4.roa (hash: HmKxIUYZnOTiOcoe1j/2oHqq1Af7hqG1JDavmuwUScA=)
2: 2W_yiasSlHxMzGvCseIvYg5Ozd4.roa (hash: KtoflOTIZ2ZK45JBs/qFK0YOESeh/OnZjIbaMrPqgdU=)
3: liqjLr7JzqHJPEvVX4XvfgpdT5I.crl (hash: OJJnzoUgyJh2pRFRctbKXyMkgffQtOEGufaBwPu1fU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/liqjLr7JzqHJPEvVX4XvfgpdT5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 16:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:73:e1:ba:1d:1b:40:26:d3:4e:64:59:b3:81:8b:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962aa32ebec9cea1c93c4bd55f85ef7e0a5d4f92
Validity
Not Before: Sep 26 16:02:11 2026 GMT
Not After : Sep 27 16:02:11 2026 GMT
Subject: CN=986c00598bf5a5c43c2b726ee3d614807fdbdf00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5e:42:1e:7f:72:a2:28:e0:c4:3f:73:93:5d:
dd:11:30:27:f2:df:75:6d:62:de:1a:cb:f2:11:29:
81:08:c5:b9:ed:00:ee:dd:c8:c5:ac:96:cd:c9:47:
e8:f1:e1:89:4b:16:d6:8f:6f:ec:b4:1b:ae:62:12:
e1:74:43:cb:c0:9b:17:3b:21:a2:e5:bf:e3:91:bb:
9a:2e:7d:97:d4:c9:25:1b:b4:20:5b:53:7d:89:f1:
86:23:12:41:b6:68:38:f2:5f:4c:03:94:75:3c:df:
b0:58:b2:f3:1d:5b:87:d9:29:42:b9:ce:c0:ca:0b:
1c:85:2f:18:48:ec:cf:da:89:38:fa:70:c8:fe:b6:
52:f9:b7:0c:40:d9:91:55:f3:45:3e:78:56:14:c6:
bb:43:a2:06:df:ee:04:07:83:dd:79:ee:1d:69:dc:
3a:d2:0d:d6:8c:70:57:41:9d:fa:c0:de:64:fb:80:
89:86:dc:51:f5:48:52:02:74:7b:07:dd:fa:ce:da:
50:f6:21:bc:9f:82:ab:2b:f5:42:78:29:d0:3a:0b:
0e:f9:11:1e:19:5c:8c:6b:39:41:66:fc:2d:7d:b5:
0a:b7:b9:81:22:d8:6e:2b:60:c6:db:80:53:fe:e9:
72:f8:57:57:ed:47:7b:31:3f:91:44:e7:cb:b8:73:
86:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:6C:00:59:8B:F5:A5:C4:3C:2B:72:6E:E3:D6:14:80:7F:DB:DF:00
X509v3 Authority Key Identifier:
keyid:96:2A:A3:2E:BE:C9:CE:A1:C9:3C:4B:D5:5F:85:EF:7E:0A:5D:4F:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/liqjLr7JzqHJPEvVX4XvfgpdT5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:50:77:8e:68:46:1c:1a:12:04:2a:d1:aa:30:b4:c4:b4:35:
a5:7e:d1:b2:3b:29:2c:41:2b:bb:25:4a:d4:4b:65:ea:f6:b8:
d4:e6:66:d9:3b:64:9f:7a:ac:59:fd:87:a7:32:d9:5d:6d:89:
da:69:83:cc:2e:2d:a2:a4:a4:b6:2a:dd:7b:22:66:06:43:80:
5a:ec:69:9a:aa:13:59:98:3a:bd:c9:41:b7:77:3b:48:cb:c4:
56:89:e4:64:45:04:c1:34:f5:09:9f:e4:f5:df:bb:6e:c8:e2:
6f:5d:0b:6f:b1:49:44:7f:60:4f:32:b7:b4:63:78:47:ac:58:
87:c7:63:59:6a:6e:87:17:4a:f2:1b:09:6b:be:10:3b:98:4c:
b3:71:df:12:09:b8:4d:ba:15:11:fe:04:d9:ec:e0:88:c9:ef:
7b:c3:91:5e:7e:06:2c:34:b2:94:aa:ea:0e:68:e6:a1:ba:47:
66:f8:fc:08:db:cc:56:34:2f:2e:c9:57:5e:93:3e:a9:32:70:
d9:a3:5a:be:64:29:f7:c1:bc:57:f1:78:cd:b0:e7:bb:89:f6:
6f:2d:be:97:0f:db:39:00:7d:36:ce:9b:aa:0d:99:6f:05:de:
dd:5b:61:dc:20:d1:ba:c6:7a:15:e8:08:98:9d:de:27:a6:a3:
20:52:f2:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 01:55:06 2026 by rpki-client