Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft
File: tLC71kRVeO28e6a1v3ypNo0kF78.mft (raw, json)
Hash identifier: /xQi1qB500949/tCseq05wkvjnXe3v5VnfDISx4PABo=
Subject key identifier: 9D:02:CA:6D:19:76:EB:15:2C:A2:DF:DF:03:35:DD:C5:A1:7B:A0:AD
Authority key identifier: B4:B0:BB:D6:44:55:78:ED:BC:7B:A6:B5:BF:7C:A9:36:8D:24:17:BF
Certificate issuer: /CN=b4b0bbd6445578edbc7ba6b5bf7ca9368d2417bf
Certificate serial: 01A1DF4C93F91EF01B2B4E7F95DF1B491658
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tLC71kRVeO28e6a1v3ypNo0kF78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft
Manifest number: 115B
Signing time: Sun 15 Nov 2026 13:01:40 +0000
Manifest this update: Sun 15 Nov 2026 13:01:40 +0000
Manifest next update: Mon 16 Nov 2026 13:01:40 +0000
Files and hashes: 1: BdxIgcii9AZbDowEljfzUYckHC8.roa (hash: ILwiF18gnTvRp3a0NE/1xK+Rukgr4WGOEG3uBi/izZY=)
2: FWYPQ6WC8Y-fg5sSQlXizSCkIiw.roa (hash: iqx9LdajD80FLscZZE0m7wFZ2v4e15gazl5hqYdyNRs=)
3: sU_POJ-9-KK9BmUg6PP2VC4cLx4.roa (hash: us+W7jv9HagK4mb3PNct2IPVT5f0kZEDdiyJO04+BcU=)
4: tLC71kRVeO28e6a1v3ypNo0kF78.crl (hash: FkbXjy5iuJOEI8E5+zDTxCbLhn9C9md+OdaZ7Gdfy/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft
rsync://rpki.ripe.net/repository/DEFAULT/tLC71kRVeO28e6a1v3ypNo0kF78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:4c:93:f9:1e:f0:1b:2b:4e:7f:95:df:1b:49:16:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4b0bbd6445578edbc7ba6b5bf7ca9368d2417bf
Validity
Not Before: Nov 15 13:01:40 2026 GMT
Not After : Nov 16 13:01:40 2026 GMT
Subject: CN=9d02ca6d1976eb152ca2dfdf0335ddc5a17ba0ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b2:04:6e:ad:10:ee:07:5a:68:5c:32:7f:20:
b3:8b:c0:59:e3:da:a0:3a:2b:86:50:14:6b:b9:30:
ee:5c:67:7c:d1:5c:eb:e3:24:6f:88:d0:cf:41:2a:
79:9f:34:16:77:8b:93:1d:29:b7:c8:7c:40:2f:e6:
3b:b4:6f:ad:b0:55:8e:b3:5e:ab:94:6c:d7:32:5a:
b8:57:26:6d:5a:be:91:ac:a1:73:0e:53:29:81:b9:
b3:53:53:8c:ec:ca:4f:e2:6e:33:e1:92:c5:a8:46:
62:3c:70:55:d5:02:58:e7:72:ed:2d:c4:41:99:bd:
b2:74:2c:bb:7a:1c:96:c6:6b:36:14:55:d3:0b:98:
8c:ed:8e:b8:94:db:78:4f:81:9c:3d:57:ac:62:aa:
94:17:e7:e6:8f:92:40:a3:40:b9:ae:12:46:f5:62:
ca:a0:f2:aa:87:75:01:38:64:10:fe:d1:18:ad:d2:
2d:b1:a6:32:1b:ef:0e:4a:8c:82:43:ec:e1:86:3c:
27:cd:3c:9b:81:14:30:a2:e1:4b:c7:23:33:ca:bf:
89:09:20:fe:5b:81:f4:37:10:de:fa:22:b1:0f:e0:
f2:e5:ed:15:47:97:ca:73:2c:f4:20:47:70:db:5f:
20:26:00:7d:d5:3a:87:79:93:5d:7c:d5:e9:3a:31:
d0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:02:CA:6D:19:76:EB:15:2C:A2:DF:DF:03:35:DD:C5:A1:7B:A0:AD
X509v3 Authority Key Identifier:
keyid:B4:B0:BB:D6:44:55:78:ED:BC:7B:A6:B5:BF:7C:A9:36:8D:24:17:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLC71kRVeO28e6a1v3ypNo0kF78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:cb:33:6d:83:10:fb:8d:35:90:d6:dc:c2:ac:89:53:7f:5d:
05:5c:83:4f:0c:f2:d5:71:0c:ff:cf:27:b0:3d:d5:90:74:2f:
2a:1f:93:db:70:35:9a:6c:05:eb:da:be:fb:e6:1e:bc:4c:72:
03:1e:53:db:f1:0c:1e:30:62:20:30:69:fa:af:13:40:3e:38:
fc:d0:b0:dd:eb:3a:d7:b8:7a:8c:17:66:25:10:d2:15:fa:26:
23:75:8c:3b:bb:de:55:8a:a6:1e:df:57:be:ee:b0:55:42:55:
9a:47:b0:84:31:d1:31:57:da:f0:3e:ed:16:cd:1a:65:6e:cc:
eb:6e:ae:88:42:9d:c2:10:67:4b:ff:66:a6:ae:81:4a:f9:83:
e3:ef:81:73:b9:c8:1d:e4:16:ee:f5:20:b5:2e:c6:f2:2e:9a:
f6:a5:cc:48:8e:bc:be:cb:1a:50:93:fb:69:b3:9c:db:57:44:
d3:cf:43:24:6c:bd:c0:fb:ef:5a:f2:90:4b:37:c4:1e:cd:a9:
34:85:cc:37:b4:b4:ab:1e:66:29:dc:22:ca:1f:4a:43:06:3a:
d1:b9:0f:88:a3:7d:bb:55:b5:d6:bc:2b:2f:18:53:1c:fc:a8:
df:d2:2a:ce:ee:c4:a9:02:ce:b8:88:63:31:fb:a2:8e:a4:12:
1a:3a:39:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:34:34 2026 by rpki-client