Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft
File: tLC71kRVeO28e6a1v3ypNo0kF78.mft (raw, json)
Hash identifier: 8GRIoQPMchZK72/FVlJozWw429CJDa6+n96Kc1Ta3Cg=
Subject key identifier: 00:5C:8D:99:5F:64:A9:29:4C:34:E8:63:21:72:A8:15:F7:00:A8:58
Authority key identifier: B4:B0:BB:D6:44:55:78:ED:BC:7B:A6:B5:BF:7C:A9:36:8D:24:17:BF
Certificate issuer: /CN=b4b0bbd6445578edbc7ba6b5bf7ca9368d2417bf
Certificate serial: 01A0C74632C0582EF383C1B8E96B24229410
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tLC71kRVeO28e6a1v3ypNo0kF78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft
Manifest number: 10CA
Signing time: Tue 22 Sep 2026 04:01:01 +0000
Manifest this update: Tue 22 Sep 2026 04:01:01 +0000
Manifest next update: Wed 23 Sep 2026 04:01:01 +0000
Files and hashes: 1: BdxIgcii9AZbDowEljfzUYckHC8.roa (hash: ILwiF18gnTvRp3a0NE/1xK+Rukgr4WGOEG3uBi/izZY=)
2: FWYPQ6WC8Y-fg5sSQlXizSCkIiw.roa (hash: iqx9LdajD80FLscZZE0m7wFZ2v4e15gazl5hqYdyNRs=)
3: sU_POJ-9-KK9BmUg6PP2VC4cLx4.roa (hash: us+W7jv9HagK4mb3PNct2IPVT5f0kZEDdiyJO04+BcU=)
4: tLC71kRVeO28e6a1v3ypNo0kF78.crl (hash: W6oB/dYXaXJqLdkTJAhMH9dgsdY24CVC9IGw23QkMgM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft
rsync://rpki.ripe.net/repository/DEFAULT/tLC71kRVeO28e6a1v3ypNo0kF78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 04:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:46:32:c0:58:2e:f3:83:c1:b8:e9:6b:24:22:94:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4b0bbd6445578edbc7ba6b5bf7ca9368d2417bf
Validity
Not Before: Sep 22 04:01:01 2026 GMT
Not After : Sep 23 04:01:01 2026 GMT
Subject: CN=005c8d995f64a9294c34e8632172a815f700a858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:09:4a:ba:a8:96:3c:16:f1:81:ff:00:ba:d2:
d3:99:1b:b5:c8:be:76:d2:6e:95:32:a5:73:55:a1:
b5:62:84:f7:07:70:4a:47:7f:e5:da:1c:b2:57:3a:
56:13:4b:ad:96:82:e1:5d:24:93:d2:c5:16:71:3e:
c0:77:30:b3:4e:03:73:e5:84:8c:22:dd:43:c5:b0:
25:ed:7a:94:71:3b:e2:90:01:dc:cc:11:40:e8:44:
0a:0a:6d:15:15:b0:9c:c1:76:71:a8:72:23:3a:69:
8a:af:9f:b5:50:08:c2:4d:2a:e2:1d:2e:2b:16:31:
92:c3:56:c1:bc:d3:1d:0d:31:88:6c:6e:ff:32:bc:
61:52:9f:15:fc:11:5c:a2:b9:89:1f:a4:ae:f6:84:
b8:87:61:88:1a:bc:22:3a:bb:52:bb:e2:4a:9a:3c:
37:6c:95:da:1b:8e:f1:d9:1e:96:43:0a:5e:49:fb:
eb:54:95:39:a8:5f:d4:ad:e4:3e:4e:9c:1a:38:ab:
c9:6a:63:7f:16:94:ab:12:2c:e3:36:f6:a8:26:15:
db:0e:6c:44:6a:07:09:5f:55:cb:6f:df:44:26:37:
5c:c4:1d:a4:46:6b:cb:51:04:0d:ea:de:c4:ff:a6:
16:93:18:0a:93:12:54:8f:03:f6:82:0f:5f:00:76:
49:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:5C:8D:99:5F:64:A9:29:4C:34:E8:63:21:72:A8:15:F7:00:A8:58
X509v3 Authority Key Identifier:
keyid:B4:B0:BB:D6:44:55:78:ED:BC:7B:A6:B5:BF:7C:A9:36:8D:24:17:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLC71kRVeO28e6a1v3ypNo0kF78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:95:05:0a:9b:89:4d:ec:6f:48:0f:e9:e4:69:61:6a:47:a3:
e3:56:ec:83:40:a3:6c:d4:4c:90:47:a2:61:9b:0d:3f:9f:f2:
33:69:ce:63:f8:18:eb:77:a8:f5:06:e2:98:8c:35:6c:68:12:
55:9f:e3:3b:a9:15:fc:a2:81:cf:35:3f:83:df:6d:aa:f4:33:
f2:5f:b5:0e:92:fc:41:f8:95:14:16:a2:aa:70:2a:4f:4a:dc:
3d:66:6d:84:f1:bd:21:b0:7e:f6:31:e1:d5:0d:00:c2:df:97:
70:f6:0a:47:97:a6:2a:6e:fa:38:54:59:af:af:ca:32:2a:51:
70:13:89:ed:03:26:46:69:e4:99:71:36:13:ef:85:6b:2f:b0:
7b:ae:bd:25:5d:fb:ee:66:12:d3:2f:fa:cc:84:7f:73:ae:74:
70:6c:3d:e1:59:2c:57:ae:9c:52:c4:f2:d3:10:fb:d7:7a:96:
82:77:60:ca:82:11:3d:90:88:fe:f6:98:31:75:59:d9:a7:87:
ed:9b:07:a3:e4:ee:24:aa:b5:68:23:f4:85:6e:c0:60:49:be:
81:73:88:8e:4f:c5:48:ae:ed:43:9b:b7:17:dd:61:f5:d0:85:
69:87:5e:20:49:cc:26:98:cc:81:4b:bd:7b:f3:04:b4:1f:57:
f9:89:a8:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:59:41 2026 by rpki-client