Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft
File: tLC71kRVeO28e6a1v3ypNo0kF78.mft (raw, json)
Hash identifier: oQRV9JH25NBnGN0GBbSE9GQNb9xyGN7NtUMuPAHvQqg=
Subject key identifier: 60:3E:BC:0C:4C:D4:4C:45:F9:EB:0D:52:99:FF:0A:99:61:AB:14:78
Authority key identifier: B4:B0:BB:D6:44:55:78:ED:BC:7B:A6:B5:BF:7C:A9:36:8D:24:17:BF
Certificate issuer: /CN=b4b0bbd6445578edbc7ba6b5bf7ca9368d2417bf
Certificate serial: 019D9A3E6C3581C06CFB27B17069FFD9C52F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tLC71kRVeO28e6a1v3ypNo0kF78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft
Manifest number: 0F25
Signing time: Fri 17 Apr 2026 07:01:15 +0000
Manifest this update: Fri 17 Apr 2026 07:01:15 +0000
Manifest next update: Sat 18 Apr 2026 07:01:15 +0000
Files and hashes: 1: BdxIgcii9AZbDowEljfzUYckHC8.roa (hash: ILwiF18gnTvRp3a0NE/1xK+Rukgr4WGOEG3uBi/izZY=)
2: FWYPQ6WC8Y-fg5sSQlXizSCkIiw.roa (hash: iqx9LdajD80FLscZZE0m7wFZ2v4e15gazl5hqYdyNRs=)
3: sU_POJ-9-KK9BmUg6PP2VC4cLx4.roa (hash: us+W7jv9HagK4mb3PNct2IPVT5f0kZEDdiyJO04+BcU=)
4: tLC71kRVeO28e6a1v3ypNo0kF78.crl (hash: dUi15XxsOdaNx6l0jrLmPQuFZ9kGa2m1OKbvK6OlzqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft
rsync://rpki.ripe.net/repository/DEFAULT/tLC71kRVeO28e6a1v3ypNo0kF78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:6c:35:81:c0:6c:fb:27:b1:70:69:ff:d9:c5:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4b0bbd6445578edbc7ba6b5bf7ca9368d2417bf
Validity
Not Before: Apr 17 07:01:15 2026 GMT
Not After : Apr 18 07:01:15 2026 GMT
Subject: CN=603ebc0c4cd44c45f9eb0d5299ff0a9961ab1478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6a:fa:e5:4b:46:98:49:4d:87:f0:39:26:ae:
84:99:1e:33:1b:ab:dd:bb:3e:db:55:3a:88:7d:1b:
ec:b3:d7:6b:3e:63:56:5c:87:b2:44:9d:5e:ef:79:
05:85:bd:3d:e4:1c:c3:c7:e7:20:5a:a6:e0:cf:67:
b0:8f:43:61:1c:43:c1:7d:0b:9d:6e:9b:b2:79:98:
1a:bb:58:e7:0a:ec:21:e5:f6:f8:5f:43:d6:ba:94:
af:98:2a:fb:62:cc:f5:e2:73:aa:dc:fa:bd:64:58:
bf:b2:2a:d1:62:e0:ea:28:ab:57:56:b3:e9:57:81:
76:73:27:cf:8d:2d:08:b5:92:22:28:88:95:ed:ca:
62:ff:50:d3:74:38:00:7d:cd:a4:9f:38:5a:c1:a8:
b7:a9:28:67:0c:b6:97:cb:e8:56:37:f8:f5:00:c8:
41:91:81:e6:eb:3b:5d:3e:50:b6:f6:ac:ab:f6:f9:
87:d5:56:61:48:e9:ba:a8:2f:38:02:70:fb:5f:a5:
74:ce:31:b1:49:69:49:1d:8d:b4:3b:07:18:cf:cd:
8c:0e:99:1d:bf:61:97:5d:45:80:4b:a2:7e:92:83:
18:b3:e5:cf:04:48:42:81:c4:9f:86:93:da:b2:c1:
ae:52:47:d4:35:a9:72:12:f0:db:be:a0:0b:3c:21:
1e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:3E:BC:0C:4C:D4:4C:45:F9:EB:0D:52:99:FF:0A:99:61:AB:14:78
X509v3 Authority Key Identifier:
keyid:B4:B0:BB:D6:44:55:78:ED:BC:7B:A6:B5:BF:7C:A9:36:8D:24:17:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLC71kRVeO28e6a1v3ypNo0kF78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:d0:4b:11:8b:6f:65:f9:bb:84:48:e2:cd:cb:8a:da:21:b1:
62:04:ca:f5:b1:b2:61:e9:de:af:ff:22:4e:80:52:8c:48:a6:
bd:e5:5f:20:13:2b:ac:6c:fa:d9:be:8e:d9:77:31:91:e9:71:
fa:be:66:64:05:84:32:7d:15:1d:c2:10:8e:4b:71:f9:e0:fd:
1c:db:e1:81:1c:ca:97:41:b4:44:48:e3:7a:e2:f0:2e:7c:ff:
ac:67:68:d0:23:2a:0e:9e:9b:ac:9f:68:89:6e:aa:ca:0f:70:
39:de:d3:9a:31:64:43:e4:9e:6a:4b:b2:e1:f5:3c:38:a5:13:
c3:88:64:88:fc:0b:26:66:ed:55:7d:83:74:31:bf:e3:fe:f7:
2e:f8:03:55:d9:7f:9b:5e:49:99:61:d6:13:ad:5d:94:ef:a6:
e5:9b:b5:f0:46:ae:f5:48:c1:f8:18:d7:44:de:3d:f9:d9:7f:
4f:96:62:13:1a:1b:e6:38:ec:69:3b:1a:b4:f8:e3:67:14:e9:
fd:85:6f:43:5c:a9:68:eb:a4:70:5b:1d:52:b3:4e:0d:c4:73:
f6:a8:6b:e8:a2:e3:04:d6:08:2e:47:f0:c1:bf:63:17:d3:55:
7a:27:47:e8:f7:24:9c:14:a6:01:e8:b5:39:67:4e:02:11:28:
fb:42:fd:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPmw1gcBs+yexcGn/2cUvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0YjBiYmQ2NDQ1NTc4ZWRiYzdiYTZiNWJmN2NhOTM2OGQy
NDE3YmYwHhcNMjYwNDE3MDcwMTE1WhcNMjYwNDE4MDcwMTE1WjAzMTEwLwYDVQQD
Eyg2MDNlYmMwYzRjZDQ0YzQ1ZjllYjBkNTI5OWZmMGE5OTYxYWIxNDc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmr65UtGmElNh/A5Jq6EmR4zG6vd
uz7bVTqIfRvss9drPmNWXIeyRJ1e73kFhb095BzDx+cgWqbgz2ewj0NhHEPBfQud
bpuyeZgau1jnCuwh5fb4X0PWupSvmCr7Ysz14nOq3Pq9ZFi/sirRYuDqKKtXVrPp
V4F2cyfPjS0ItZIiKIiV7cpi/1DTdDgAfc2knzhawai3qShnDLaXy+hWN/j1AMhB
kYHm6ztdPlC29qyr9vmH1VZhSOm6qC84AnD7X6V0zjGxSWlJHY20OwcYz82MDpkd
v2GXXUWAS6J+koMYs+XPBEhCgcSfhpPassGuUkfUNalyEvDbvqALPCEeXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGA+vAxM1ExF+esNUpn/CplhqxR4MB8GA1UdIwQY
MBaAFLSwu9ZEVXjtvHumtb98qTaNJBe/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdExDNzFrUlZlTzI4ZTZhMXYzeXBObzBrRjc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8zNTAyZmMtZDlmNy00ZmE4LWJhZjYt
NzdkNTI5YmU1M2Q3LzEvdExDNzFrUlZlTzI4ZTZhMXYzeXBObzBrRjc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi8zNTAyZmMtZDlmNy00ZmE4LWJhZjYtNzdkNTI5YmU1M2Q3
LzEvdExDNzFrUlZlTzI4ZTZhMXYzeXBObzBrRjc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe9BLEYtv
Zfm7hEjizcuK2iGxYgTK9bGyYener/8iToBSjEimveVfIBMrrGz62b6O2Xcxkelx
+r5mZAWEMn0VHcIQjktx+eD9HNvhgRzKl0G0REjjeuLwLnz/rGdo0CMqDp6brJ9o
iW6qyg9wOd7TmjFkQ+Seakuy4fU8OKUTw4hkiPwLJmbtVX2DdDG/4/73LvgDVdl/
m15JmWHWE61dlO+m5Zu18Eau9UjB+BjXRN49+dl/T5ZiExob5jjsaTsatPjjZxTp
/YVvQ1ypaOukcFsdUrNODcRz9qhr6KLjBNYILkfwwb9jF9NVeidH6PcknBSmAei1
OWdOAhEo+0L9/A==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:44:57 2026 by rpki-client