Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft
File: tLC71kRVeO28e6a1v3ypNo0kF78.mft (raw, json)
Hash identifier: sg0mVC2AjKqS7FjLpMt6YFsvh83EENl5pPifhYP6VAo=
Subject key identifier: 5D:5C:A9:8E:98:29:7D:38:13:A5:BD:D7:F9:22:7A:0C:9B:F0:60:EE
Authority key identifier: B4:B0:BB:D6:44:55:78:ED:BC:7B:A6:B5:BF:7C:A9:36:8D:24:17:BF
Certificate issuer: /CN=b4b0bbd6445578edbc7ba6b5bf7ca9368d2417bf
Certificate serial: 019FA1BB7A48750E515C838AF7C77C43B68D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tLC71kRVeO28e6a1v3ypNo0kF78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft
Manifest number: 1032
Signing time: Mon 27 Jul 2026 04:00:46 +0000
Manifest this update: Mon 27 Jul 2026 04:00:46 +0000
Manifest next update: Tue 28 Jul 2026 04:00:46 +0000
Files and hashes: 1: BdxIgcii9AZbDowEljfzUYckHC8.roa (hash: ILwiF18gnTvRp3a0NE/1xK+Rukgr4WGOEG3uBi/izZY=)
2: FWYPQ6WC8Y-fg5sSQlXizSCkIiw.roa (hash: iqx9LdajD80FLscZZE0m7wFZ2v4e15gazl5hqYdyNRs=)
3: sU_POJ-9-KK9BmUg6PP2VC4cLx4.roa (hash: us+W7jv9HagK4mb3PNct2IPVT5f0kZEDdiyJO04+BcU=)
4: tLC71kRVeO28e6a1v3ypNo0kF78.crl (hash: d4yVE+AlefgHDleSfgzZkrUoRGbIj2P8YXgClPRF+DM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft
rsync://rpki.ripe.net/repository/DEFAULT/tLC71kRVeO28e6a1v3ypNo0kF78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:bb:7a:48:75:0e:51:5c:83:8a:f7:c7:7c:43:b6:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4b0bbd6445578edbc7ba6b5bf7ca9368d2417bf
Validity
Not Before: Jul 27 04:00:46 2026 GMT
Not After : Jul 28 04:00:46 2026 GMT
Subject: CN=5d5ca98e98297d3813a5bdd7f9227a0c9bf060ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0c:0e:23:43:8b:0c:59:2c:30:7c:fd:22:65:
d3:cf:93:d2:c4:bb:b1:99:87:9a:26:bf:19:9b:45:
f2:58:b0:3e:27:01:3f:05:c2:17:2e:d1:ca:23:a8:
d3:c0:3d:0f:87:39:a5:ab:82:ee:90:d2:de:8d:7c:
12:56:dd:92:66:18:1a:ce:8b:56:d6:20:ce:60:6c:
7d:c2:c7:9d:cc:ae:a8:3f:2c:41:89:55:f4:d0:a7:
bd:8b:f9:b9:0d:f5:23:f9:d3:f7:96:08:58:25:f9:
76:5f:85:54:03:db:f6:81:6a:9f:f8:75:d0:66:9c:
8a:4e:38:42:79:e2:1c:48:d7:06:27:8c:37:d5:d0:
39:20:d8:5e:aa:09:0a:7f:f5:0b:4b:2b:48:70:1e:
d9:7b:37:ff:fc:71:0d:8e:66:d5:10:5b:60:a0:5b:
8e:b0:5e:df:d0:69:65:48:8e:91:8d:32:3e:1c:cf:
54:17:7d:db:44:ab:55:21:0b:0a:00:15:1a:d6:e1:
4b:a1:7e:c1:32:0d:d1:19:33:85:0c:ce:e7:b8:0a:
0f:92:ca:17:b0:cb:98:63:9d:57:30:e1:4c:13:4e:
b0:21:93:de:40:0c:9e:d2:57:bf:8d:71:55:a6:0a:
32:c1:3c:da:91:c2:76:91:d8:85:f2:5a:97:a6:4c:
dd:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:5C:A9:8E:98:29:7D:38:13:A5:BD:D7:F9:22:7A:0C:9B:F0:60:EE
X509v3 Authority Key Identifier:
keyid:B4:B0:BB:D6:44:55:78:ED:BC:7B:A6:B5:BF:7C:A9:36:8D:24:17:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLC71kRVeO28e6a1v3ypNo0kF78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:e6:f4:df:3b:fb:19:1f:b1:e7:c5:ef:b3:bb:e5:08:9f:aa:
67:25:7f:c4:ea:d9:09:b1:6a:5c:b5:9d:26:e7:d1:3c:b1:44:
5c:25:ec:13:37:f9:45:89:ca:05:14:93:1b:b4:ef:4f:2c:69:
07:99:ed:8b:14:99:ea:60:c9:73:52:d3:3d:f4:85:4b:d2:11:
12:d3:7d:ee:8d:4d:82:5d:11:d2:62:26:0d:f4:b2:de:ac:a4:
fd:66:7d:85:26:aa:cb:cb:21:c7:d7:89:5b:81:2e:d9:3c:6f:
d9:08:0f:0e:e3:53:83:4c:a9:bf:0f:fc:d5:1b:2b:f4:55:3f:
7d:fb:15:60:9f:cd:e5:65:fd:95:fb:bf:29:16:72:bc:f5:84:
a1:d8:04:72:80:7d:91:95:bc:85:f9:99:2e:a1:a4:84:04:ae:
93:4d:d4:24:4e:ae:a3:b6:66:07:11:c1:0e:03:d8:70:84:1b:
7a:a2:e4:5e:83:56:0f:ad:51:11:93:e2:f6:5c:12:14:9d:3a:
4d:d6:d1:58:54:8a:f2:ed:ef:a6:1a:42:01:a5:0f:8c:ba:50:
cc:b8:76:0f:98:27:5f:04:12:2a:6c:dd:fb:83:c7:c8:35:1d:
74:e6:ea:6e:b1:0f:63:73:e6:6d:dc:e7:71:55:a5:4b:2e:3e:
e9:32:17:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 05:46:39 2026 by rpki-client