Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft
File: tLC71kRVeO28e6a1v3ypNo0kF78.mft (raw, json)
Hash identifier: QdxJ+Nr9LTsXSwSho9mIzOVGDmjvNkRLK5yQUjoKhsg=
Subject key identifier: 87:7B:8B:1E:2B:A5:BF:2A:46:AD:48:60:1E:F0:EE:75:BF:D0:73:24
Authority key identifier: B4:B0:BB:D6:44:55:78:ED:BC:7B:A6:B5:BF:7C:A9:36:8D:24:17:BF
Certificate issuer: /CN=b4b0bbd6445578edbc7ba6b5bf7ca9368d2417bf
Certificate serial: 019FAB63400E74C74880D811796688D5A9A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tLC71kRVeO28e6a1v3ypNo0kF78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft
Manifest number: 1037
Signing time: Wed 29 Jul 2026 01:00:36 +0000
Manifest this update: Wed 29 Jul 2026 01:00:36 +0000
Manifest next update: Thu 30 Jul 2026 01:00:36 +0000
Files and hashes: 1: BdxIgcii9AZbDowEljfzUYckHC8.roa (hash: ILwiF18gnTvRp3a0NE/1xK+Rukgr4WGOEG3uBi/izZY=)
2: FWYPQ6WC8Y-fg5sSQlXizSCkIiw.roa (hash: iqx9LdajD80FLscZZE0m7wFZ2v4e15gazl5hqYdyNRs=)
3: sU_POJ-9-KK9BmUg6PP2VC4cLx4.roa (hash: us+W7jv9HagK4mb3PNct2IPVT5f0kZEDdiyJO04+BcU=)
4: tLC71kRVeO28e6a1v3ypNo0kF78.crl (hash: z1DkFaeWjHcP9rWUa4Lup+/w1IRflKzYg1u2FX+0vCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft
rsync://rpki.ripe.net/repository/DEFAULT/tLC71kRVeO28e6a1v3ypNo0kF78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:40:0e:74:c7:48:80:d8:11:79:66:88:d5:a9:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4b0bbd6445578edbc7ba6b5bf7ca9368d2417bf
Validity
Not Before: Jul 29 01:00:36 2026 GMT
Not After : Jul 30 01:00:36 2026 GMT
Subject: CN=877b8b1e2ba5bf2a46ad48601ef0ee75bfd07324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4d:40:d2:04:98:94:ca:58:14:9f:c0:ac:82:
9a:0a:50:cd:e1:94:c0:e6:86:df:64:f3:37:59:12:
6d:ff:26:5b:f3:84:7b:30:5d:e3:9b:94:a9:15:4b:
c5:d7:b9:c1:d8:7d:a7:cc:d1:b6:dc:53:09:8a:9e:
2b:b0:77:a8:e8:c5:8b:da:1c:7e:8b:98:dd:dc:42:
e7:30:e8:dd:3d:e3:1e:f2:e2:0f:b4:cc:d9:08:b3:
f0:b0:bb:24:03:5e:b0:a0:5a:7a:8f:d5:bb:00:b1:
b3:b1:8e:6e:e9:ca:a7:45:64:c5:73:4c:a8:16:49:
3f:5c:f0:63:2c:cd:21:f3:28:df:19:f4:99:2f:ea:
ab:bf:02:a1:8b:40:37:b3:65:c0:c9:d8:85:2c:8c:
a0:fa:ad:39:89:d9:85:ed:31:4b:13:d6:25:60:c1:
f3:27:36:63:5d:74:db:26:97:6c:16:4e:c0:04:44:
02:0e:8c:a5:ea:29:0c:69:b0:c3:cc:13:8b:e7:9e:
fa:22:7f:02:5b:c3:13:9a:01:c4:9f:14:c1:b6:56:
a5:9c:66:b2:7f:93:bc:a4:49:b8:97:eb:78:d6:3a:
d3:c1:c6:d2:b3:9e:1d:f3:d6:18:1a:05:57:26:aa:
b0:35:14:f2:54:11:0d:a9:1d:f2:e2:e9:72:62:d8:
7a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:7B:8B:1E:2B:A5:BF:2A:46:AD:48:60:1E:F0:EE:75:BF:D0:73:24
X509v3 Authority Key Identifier:
keyid:B4:B0:BB:D6:44:55:78:ED:BC:7B:A6:B5:BF:7C:A9:36:8D:24:17:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLC71kRVeO28e6a1v3ypNo0kF78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:8a:a7:f2:ed:10:fa:4e:5f:c5:07:f3:3d:c1:e9:c9:29:2e:
e1:e3:8b:25:32:16:62:91:b9:e6:a3:24:6d:3a:22:26:2d:dc:
48:1e:db:5a:cc:bb:b1:74:46:55:51:f1:ce:4f:ba:c1:ec:a0:
47:52:25:57:da:63:fc:92:35:4d:32:fe:97:01:e4:d7:7d:db:
39:50:8f:4a:c3:bf:e4:3f:f1:2b:e9:9a:5e:1b:e7:1d:e5:99:
85:51:d4:14:e8:70:94:9a:bd:42:f0:43:21:dd:d4:36:5c:2b:
d5:5d:f9:11:65:db:4b:ef:25:e0:cb:fb:3e:48:9b:df:90:51:
21:7f:ae:46:ec:fd:0d:c4:f3:5f:e1:1c:7e:54:03:f9:3e:fb:
bb:e5:34:6c:26:7e:00:ef:42:a3:2e:92:ef:0b:fd:0f:b0:ec:
04:ff:09:9f:a6:9b:6d:98:cf:c9:60:39:b0:4d:8d:49:4d:dc:
37:3d:6a:3e:7d:0b:92:e6:1a:bf:29:31:4f:5e:2c:1e:85:b7:
ee:d4:36:9e:e7:5f:2b:b1:87:29:0f:72:3d:36:17:82:36:b7:
77:d3:a7:c0:c2:64:c8:9f:59:56:72:e0:a4:d1:b4:d3:de:db:
4d:7f:f7:12:0f:d0:6a:68:0d:c8:b3:e4:8d:7e:6e:16:e6:fb:
3b:15:e3:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+rY0AOdMdIgNgReWaI1amiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0YjBiYmQ2NDQ1NTc4ZWRiYzdiYTZiNWJmN2NhOTM2OGQy
NDE3YmYwHhcNMjYwNzI5MDEwMDM2WhcNMjYwNzMwMDEwMDM2WjAzMTEwLwYDVQQD
Eyg4NzdiOGIxZTJiYTViZjJhNDZhZDQ4NjAxZWYwZWU3NWJmZDA3MzI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0k1A0gSYlMpYFJ/ArIKaClDN4ZTA
5obfZPM3WRJt/yZb84R7MF3jm5SpFUvF17nB2H2nzNG23FMJip4rsHeo6MWL2hx+
i5jd3ELnMOjdPeMe8uIPtMzZCLPwsLskA16woFp6j9W7ALGzsY5u6cqnRWTFc0yo
Fkk/XPBjLM0h8yjfGfSZL+qrvwKhi0A3s2XAydiFLIyg+q05idmF7TFLE9YlYMHz
JzZjXXTbJpdsFk7ABEQCDoyl6ikMabDDzBOL5576In8CW8MTmgHEnxTBtlalnGay
f5O8pEm4l+t41jrTwcbSs54d89YYGgVXJqqwNRTyVBENqR3y4ulyYth6LQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFId7ix4rpb8qRq1IYB7w7nW/0HMkMB8GA1UdIwQY
MBaAFLSwu9ZEVXjtvHumtb98qTaNJBe/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdExDNzFrUlZlTzI4ZTZhMXYzeXBObzBrRjc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8zNTAyZmMtZDlmNy00ZmE4LWJhZjYt
NzdkNTI5YmU1M2Q3LzEvdExDNzFrUlZlTzI4ZTZhMXYzeXBObzBrRjc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi8zNTAyZmMtZDlmNy00ZmE4LWJhZjYtNzdkNTI5YmU1M2Q3
LzEvdExDNzFrUlZlTzI4ZTZhMXYzeXBObzBrRjc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK4qn8u0Q
+k5fxQfzPcHpySku4eOLJTIWYpG55qMkbToiJi3cSB7bWsy7sXRGVVHxzk+6weyg
R1IlV9pj/JI1TTL+lwHk133bOVCPSsO/5D/xK+maXhvnHeWZhVHUFOhwlJq9QvBD
Id3UNlwr1V35EWXbS+8l4Mv7Pkib35BRIX+uRuz9DcTzX+EcflQD+T77u+U0bCZ+
AO9Coy6S7wv9D7DsBP8Jn6abbZjPyWA5sE2NSU3cNz1qPn0LkuYavykxT14sHoW3
7tQ2nudfK7GHKQ9yPTYXgja3d9OnwMJkyJ9ZVnLgpNG0097bTX/3Eg/QamgNyLPk
jX5uFub7OxXjqg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:54:59 2026 by rpki-client