Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft
File: tLC71kRVeO28e6a1v3ypNo0kF78.mft (raw, json)
Hash identifier: NYNb8oQPBjh2bVpycO1hg6MkhYQpdtMgihmYy8MaWRQ=
Subject key identifier: 54:17:57:CE:EB:F4:80:7B:F2:3C:85:84:63:AA:92:BB:56:5A:D2:C2
Authority key identifier: B4:B0:BB:D6:44:55:78:ED:BC:7B:A6:B5:BF:7C:A9:36:8D:24:17:BF
Certificate issuer: /CN=b4b0bbd6445578edbc7ba6b5bf7ca9368d2417bf
Certificate serial: 019CAAC68A62B56354040FA613074E197571
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tLC71kRVeO28e6a1v3ypNo0kF78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft
Manifest number: 0EA9
Signing time: Sun 01 Mar 2026 19:01:04 +0000
Manifest this update: Sun 01 Mar 2026 19:01:04 +0000
Manifest next update: Mon 02 Mar 2026 19:01:04 +0000
Files and hashes: 1: BdxIgcii9AZbDowEljfzUYckHC8.roa (hash: ILwiF18gnTvRp3a0NE/1xK+Rukgr4WGOEG3uBi/izZY=)
2: FWYPQ6WC8Y-fg5sSQlXizSCkIiw.roa (hash: iqx9LdajD80FLscZZE0m7wFZ2v4e15gazl5hqYdyNRs=)
3: sU_POJ-9-KK9BmUg6PP2VC4cLx4.roa (hash: us+W7jv9HagK4mb3PNct2IPVT5f0kZEDdiyJO04+BcU=)
4: tLC71kRVeO28e6a1v3ypNo0kF78.crl (hash: P4jJSsocZ6GAqvMcbpqI2Rgc42GkpEz/n+of5gp4BOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft
rsync://rpki.ripe.net/repository/DEFAULT/tLC71kRVeO28e6a1v3ypNo0kF78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:8a:62:b5:63:54:04:0f:a6:13:07:4e:19:75:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4b0bbd6445578edbc7ba6b5bf7ca9368d2417bf
Validity
Not Before: Mar 1 19:01:04 2026 GMT
Not After : Mar 2 19:01:04 2026 GMT
Subject: CN=541757ceebf4807bf23c858463aa92bb565ad2c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:87:c3:d5:34:ee:17:50:b1:1d:ee:f8:bf:83:
56:4b:c5:4c:9b:66:c7:2e:8c:46:26:de:63:bf:52:
d9:d6:c2:47:f0:67:79:c3:ea:ca:bd:55:df:31:25:
2f:bb:38:d7:78:ae:95:36:eb:47:58:57:e2:33:7f:
e0:ca:71:21:6c:82:e3:49:d2:a5:cb:84:e3:d5:af:
d2:a4:ef:fb:b8:07:b4:7e:97:73:bb:49:d8:76:cc:
8c:b8:c2:b5:e9:f6:eb:0b:eb:4f:2c:81:c6:02:3c:
f5:eb:cf:72:d7:00:46:d1:38:7d:17:5a:7d:a6:95:
27:2f:e4:00:41:50:6d:1b:50:f1:e2:67:fc:5d:fc:
11:da:77:e0:4f:9b:5d:2e:da:b2:f4:70:29:87:54:
73:aa:fd:12:ea:96:fe:82:0f:cc:c1:62:d1:68:f2:
87:f2:0e:0e:1a:c8:40:52:41:8c:94:da:47:b1:b5:
cb:dd:f5:34:f1:e6:23:d6:ad:0d:ef:5f:c6:7d:de:
7c:c6:30:df:d4:ac:dd:c3:d6:56:47:45:2d:5c:26:
87:04:6a:29:bc:30:0b:48:e9:c8:71:95:a8:40:11:
bc:a6:d8:09:04:4c:43:3f:f0:a8:99:8a:6e:23:9f:
9d:c3:29:18:37:d2:8b:8d:2b:48:c8:cf:a5:c6:41:
f4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:17:57:CE:EB:F4:80:7B:F2:3C:85:84:63:AA:92:BB:56:5A:D2:C2
X509v3 Authority Key Identifier:
keyid:B4:B0:BB:D6:44:55:78:ED:BC:7B:A6:B5:BF:7C:A9:36:8D:24:17:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLC71kRVeO28e6a1v3ypNo0kF78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:7d:22:aa:1d:c7:af:28:e2:55:d0:91:84:15:aa:cb:4b:41:
d2:29:80:6e:18:42:61:aa:b9:0e:b8:90:a3:27:b7:13:05:33:
b0:bb:d2:10:5f:cb:9a:c8:8c:8c:ea:8c:2b:8f:bc:12:9f:28:
a2:ea:ab:c4:88:8e:e6:26:10:78:9a:ee:11:8a:cd:e1:0e:f2:
96:31:ef:da:a2:d8:96:ef:c1:3b:26:c8:b5:3f:fd:1d:2b:6d:
03:f4:d7:57:da:01:8b:c3:3d:01:a4:f3:fc:cb:27:75:51:83:
d6:12:70:5e:ba:ba:e1:05:1b:6e:1f:41:f9:93:e7:52:af:5c:
cc:e6:a6:53:ba:dd:31:47:a0:4a:9e:de:79:ef:7c:09:58:05:
a1:8f:91:6b:c5:86:f9:63:82:f4:9b:ca:2f:03:09:d5:a4:d3:
c4:af:30:b6:68:1f:1a:9b:e3:84:3d:73:9f:4d:75:42:11:d5:
d6:13:8c:91:1d:30:db:0d:4f:88:54:73:4c:0e:9f:4a:e1:80:
33:ad:72:d0:95:b8:74:12:d0:11:eb:a4:7f:59:35:2d:64:2c:
6e:15:89:2b:05:40:44:0d:20:da:79:66:1b:f4:cc:41:d2:5c:
52:60:7f:28:50:67:51:6a:8a:85:1f:0b:1a:30:1f:3a:3b:16:
18:b3:86:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:52 2026 by rpki-client