Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft
File: tLC71kRVeO28e6a1v3ypNo0kF78.mft (raw, json)
Hash identifier: 2K5WU3jZxxcmNgHarASGDVj85pjecw4ZNVazafApQSs=
Subject key identifier: 71:F5:B3:A5:41:F8:4A:A5:1C:CC:D8:0F:FB:57:59:2E:5C:B0:F9:D8
Authority key identifier: B4:B0:BB:D6:44:55:78:ED:BC:7B:A6:B5:BF:7C:A9:36:8D:24:17:BF
Certificate issuer: /CN=b4b0bbd6445578edbc7ba6b5bf7ca9368d2417bf
Certificate serial: 01A18C41D896514FC99335F7AA7860839C43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tLC71kRVeO28e6a1v3ypNo0kF78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft
Manifest number: 1130
Signing time: Fri 30 Oct 2026 10:01:27 +0000
Manifest this update: Fri 30 Oct 2026 10:01:27 +0000
Manifest next update: Sat 31 Oct 2026 10:01:27 +0000
Files and hashes: 1: BdxIgcii9AZbDowEljfzUYckHC8.roa (hash: ILwiF18gnTvRp3a0NE/1xK+Rukgr4WGOEG3uBi/izZY=)
2: FWYPQ6WC8Y-fg5sSQlXizSCkIiw.roa (hash: iqx9LdajD80FLscZZE0m7wFZ2v4e15gazl5hqYdyNRs=)
3: sU_POJ-9-KK9BmUg6PP2VC4cLx4.roa (hash: us+W7jv9HagK4mb3PNct2IPVT5f0kZEDdiyJO04+BcU=)
4: tLC71kRVeO28e6a1v3ypNo0kF78.crl (hash: HwuLWCAJGzdeYImo4XzzUQE461+cfyAKyrRMdctn5KU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft
rsync://rpki.ripe.net/repository/DEFAULT/tLC71kRVeO28e6a1v3ypNo0kF78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 08:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8c:41:d8:96:51:4f:c9:93:35:f7:aa:78:60:83:9c:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4b0bbd6445578edbc7ba6b5bf7ca9368d2417bf
Validity
Not Before: Oct 30 10:01:27 2026 GMT
Not After : Oct 31 10:01:27 2026 GMT
Subject: CN=71f5b3a541f84aa51cccd80ffb57592e5cb0f9d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ea:cf:76:01:5e:97:9a:c2:30:16:7e:6f:48:
cf:ef:e1:23:43:c5:c4:c0:88:d8:36:fc:2d:7b:e0:
04:e5:c2:59:70:19:4b:e2:15:7c:41:e7:1f:a4:48:
42:7c:0c:f2:58:e5:34:b0:3c:73:da:ea:54:18:bf:
77:a8:63:4c:a0:3f:d0:82:ad:bd:5f:56:1f:2d:51:
a3:51:55:4d:0d:3c:07:8f:98:9b:36:83:d9:61:1d:
85:27:0e:f2:d5:37:75:07:b0:9d:2a:49:1d:72:b8:
28:73:8d:72:b2:58:ba:8a:70:35:bb:65:51:b2:e7:
c1:63:9c:ce:95:42:89:1a:45:59:42:14:6c:ac:53:
b7:46:00:70:da:a9:78:b6:83:c3:7b:24:cb:ac:5d:
00:e9:e0:90:47:8d:e6:86:f0:ed:f3:92:04:17:53:
f2:ee:67:89:4e:1a:8d:ec:a4:7e:a4:d5:ef:e9:f5:
d4:60:67:8a:1f:6d:4b:d9:0c:ae:21:6d:35:b1:70:
a4:5b:d3:31:b1:ba:24:14:3a:66:21:48:bd:ed:06:
1d:05:b8:21:e2:99:47:3c:6e:cb:06:ac:81:4d:f2:
6b:9f:47:b8:72:89:e0:f5:22:2b:66:6f:93:03:6b:
2f:e0:d4:ca:50:b2:48:f5:2f:d0:e6:2e:6f:e7:3a:
ca:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:F5:B3:A5:41:F8:4A:A5:1C:CC:D8:0F:FB:57:59:2E:5C:B0:F9:D8
X509v3 Authority Key Identifier:
keyid:B4:B0:BB:D6:44:55:78:ED:BC:7B:A6:B5:BF:7C:A9:36:8D:24:17:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLC71kRVeO28e6a1v3ypNo0kF78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:57:1a:ea:b0:55:d8:44:be:c0:7f:b3:98:7b:96:46:70:ba:
a4:3b:81:ff:a1:57:c5:da:57:cb:23:ba:01:18:bd:33:ff:a1:
02:9d:ad:cb:12:82:fb:44:15:3d:fc:94:a0:48:bb:53:a5:4f:
5f:bb:a1:f5:48:fe:6a:18:c8:fc:ec:ac:33:01:89:f6:ec:8d:
18:34:7b:40:5e:59:ab:8e:e6:95:88:e9:36:3b:7b:d9:9c:97:
44:5f:60:a5:9f:f1:8b:51:cf:94:9b:68:cc:c5:e9:58:bd:01:
72:52:d3:31:53:9d:e8:25:a5:d1:0a:c5:6f:2a:33:c2:95:77:
3f:59:7c:de:10:b4:ea:f1:d3:b0:a8:fd:00:86:31:d6:32:ba:
ab:cb:87:80:1a:9e:34:f5:1b:66:3b:fc:00:96:0c:c0:9a:fc:
10:17:a4:a7:7a:8b:d2:c2:b6:36:79:be:b6:d4:54:70:06:d0:
33:26:a8:13:57:b1:ea:33:db:21:b2:0e:0e:28:54:31:70:a1:
c2:b4:6d:04:b2:09:4a:27:63:95:9d:dd:77:ef:7d:e1:86:e3:
f6:49:01:77:6b:59:b5:a1:32:13:07:9f:f7:8d:17:cf:25:32:
86:b7:5c:65:c9:5c:d9:7b:55:fa:57:93:cb:a9:0c:33:42:99:
b6:62:07:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 14:24:08 2026 by rpki-client