Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft
File: tLC71kRVeO28e6a1v3ypNo0kF78.mft (raw, json)
Hash identifier: XLcLW0MV80W8W9vLxqHEj/3c19mkP52jsGrbXyioyGQ=
Subject key identifier: 20:62:50:23:67:95:7A:B7:7C:E4:20:BA:43:D9:26:2D:49:19:E7:0D
Authority key identifier: B4:B0:BB:D6:44:55:78:ED:BC:7B:A6:B5:BF:7C:A9:36:8D:24:17:BF
Certificate issuer: /CN=b4b0bbd6445578edbc7ba6b5bf7ca9368d2417bf
Certificate serial: 019D284D6E24E7133B1F80642AF103275D28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tLC71kRVeO28e6a1v3ypNo0kF78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft
Manifest number: 0EEA
Signing time: Thu 26 Mar 2026 04:00:56 +0000
Manifest this update: Thu 26 Mar 2026 04:00:56 +0000
Manifest next update: Fri 27 Mar 2026 04:00:56 +0000
Files and hashes: 1: BdxIgcii9AZbDowEljfzUYckHC8.roa (hash: ILwiF18gnTvRp3a0NE/1xK+Rukgr4WGOEG3uBi/izZY=)
2: FWYPQ6WC8Y-fg5sSQlXizSCkIiw.roa (hash: iqx9LdajD80FLscZZE0m7wFZ2v4e15gazl5hqYdyNRs=)
3: sU_POJ-9-KK9BmUg6PP2VC4cLx4.roa (hash: us+W7jv9HagK4mb3PNct2IPVT5f0kZEDdiyJO04+BcU=)
4: tLC71kRVeO28e6a1v3ypNo0kF78.crl (hash: ST7xtSmxxNj2ltCiItn+ilwTP/4QJgAO0qmm4MBicEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft
rsync://rpki.ripe.net/repository/DEFAULT/tLC71kRVeO28e6a1v3ypNo0kF78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:6e:24:e7:13:3b:1f:80:64:2a:f1:03:27:5d:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4b0bbd6445578edbc7ba6b5bf7ca9368d2417bf
Validity
Not Before: Mar 26 04:00:56 2026 GMT
Not After : Mar 27 04:00:56 2026 GMT
Subject: CN=2062502367957ab77ce420ba43d9262d4919e70d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fb:17:4a:04:7d:aa:e7:5a:8c:bd:6e:9b:12:
0c:1c:a7:7f:40:3e:8a:5f:64:10:32:a0:30:ff:b6:
be:00:d4:b5:84:d5:8b:88:55:47:78:bd:06:95:ea:
13:43:a9:38:c3:b0:30:cb:e8:5c:99:30:d1:55:71:
2a:63:20:c6:e1:19:a9:2e:9b:79:ab:c9:67:6c:22:
86:68:ce:33:c1:81:29:b3:ea:66:3d:74:4a:a6:1e:
48:5e:24:cb:87:66:06:32:57:b3:e6:72:d0:e6:ce:
65:45:fc:18:6e:68:62:37:b0:f7:2b:89:21:a5:67:
82:02:34:2f:02:66:70:3d:bc:60:bb:d8:b3:df:e0:
1c:8e:6e:1d:bc:e9:9d:7e:24:9e:f9:67:1f:73:b4:
d0:43:b4:49:f9:12:74:54:0c:ad:17:c6:51:05:e6:
d2:69:0f:1e:fb:91:e2:98:09:73:3f:9f:46:27:5d:
7d:7e:89:71:dd:e9:5b:68:08:38:db:a5:30:3a:56:
5c:a0:12:2f:b2:a6:0f:71:bf:2d:08:f1:a1:17:81:
0d:61:a0:da:11:83:63:cf:1c:00:cb:0c:fc:cb:00:
10:99:b2:dc:7f:20:b7:a9:69:b7:9c:6f:43:5b:74:
ef:a2:01:ed:ab:5e:52:eb:6b:e6:ff:af:27:22:f3:
49:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:62:50:23:67:95:7A:B7:7C:E4:20:BA:43:D9:26:2D:49:19:E7:0D
X509v3 Authority Key Identifier:
keyid:B4:B0:BB:D6:44:55:78:ED:BC:7B:A6:B5:BF:7C:A9:36:8D:24:17:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLC71kRVeO28e6a1v3ypNo0kF78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:79:9c:37:ad:6e:16:68:c1:59:1b:88:b9:e7:47:ea:c7:91:
67:67:bb:9c:a2:52:12:c5:d0:e7:f1:d5:50:0a:e0:af:f2:31:
5c:1c:2f:6c:91:f7:9b:76:80:1c:ba:6d:38:74:a4:a6:f1:ce:
db:84:20:0d:83:00:e0:c9:64:ef:7f:26:d8:18:77:1e:72:0a:
30:47:d8:45:4b:12:37:97:3d:f2:f0:1f:7d:72:96:90:82:77:
cf:f9:a9:da:85:47:55:c6:34:a9:43:e3:4c:9e:2d:ff:18:47:
f4:4f:78:46:52:4e:d4:66:96:fe:26:a3:c6:bc:f6:88:cb:a4:
6e:1a:0d:6a:63:a2:62:39:6a:f2:4b:49:60:46:c5:e1:1a:b1:
1f:9f:ec:a3:87:fb:85:a9:09:c9:48:70:a7:61:7b:c6:f3:10:
34:a0:b8:c9:c3:ac:29:ea:13:06:8f:0d:2e:8d:3f:01:36:1c:
44:1f:2d:86:61:e6:21:82:d5:75:f7:8a:fc:53:79:b7:95:44:
be:df:cd:c7:b3:09:9e:19:1d:bc:2d:16:cc:e7:ba:dd:f9:47:
18:17:2b:2d:94:bc:7d:c6:4f:e2:ab:85:33:18:f2:d5:17:8d:
ea:c4:4e:b0:a7:0d:ee:38:3f:06:66:62:f3:22:6f:da:20:50:
ac:bd:8b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:55:41 2026 by rpki-client