Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft
File: tLC71kRVeO28e6a1v3ypNo0kF78.mft (raw, json)
Hash identifier: S9s3dmtt7puadZl1iDtM66roFvNv1/53oHgu1faw1YQ=
Subject key identifier: A7:C0:E2:21:CC:69:AC:EE:B3:0C:26:78:3D:5B:C6:4A:EE:E3:1E:45
Authority key identifier: B4:B0:BB:D6:44:55:78:ED:BC:7B:A6:B5:BF:7C:A9:36:8D:24:17:BF
Certificate issuer: /CN=b4b0bbd6445578edbc7ba6b5bf7ca9368d2417bf
Certificate serial: 01A08B68187A8B58DFD66D358DCFEA081015
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tLC71kRVeO28e6a1v3ypNo0kF78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft
Manifest number: 10AB
Signing time: Thu 10 Sep 2026 13:00:50 +0000
Manifest this update: Thu 10 Sep 2026 13:00:50 +0000
Manifest next update: Fri 11 Sep 2026 13:00:50 +0000
Files and hashes: 1: BdxIgcii9AZbDowEljfzUYckHC8.roa (hash: ILwiF18gnTvRp3a0NE/1xK+Rukgr4WGOEG3uBi/izZY=)
2: FWYPQ6WC8Y-fg5sSQlXizSCkIiw.roa (hash: iqx9LdajD80FLscZZE0m7wFZ2v4e15gazl5hqYdyNRs=)
3: sU_POJ-9-KK9BmUg6PP2VC4cLx4.roa (hash: us+W7jv9HagK4mb3PNct2IPVT5f0kZEDdiyJO04+BcU=)
4: tLC71kRVeO28e6a1v3ypNo0kF78.crl (hash: wVJAQIrkl+79p6E+O1Qo1dW2/aV0Y4xV3ZTjKvgm0BY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft
rsync://rpki.ripe.net/repository/DEFAULT/tLC71kRVeO28e6a1v3ypNo0kF78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:68:18:7a:8b:58:df:d6:6d:35:8d:cf:ea:08:10:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4b0bbd6445578edbc7ba6b5bf7ca9368d2417bf
Validity
Not Before: Sep 10 13:00:50 2026 GMT
Not After : Sep 11 13:00:50 2026 GMT
Subject: CN=a7c0e221cc69aceeb30c26783d5bc64aeee31e45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:dc:36:d1:ee:f3:dd:0c:0f:06:30:ea:56:e4:
76:ea:fc:b5:13:3b:af:e1:da:ba:34:c4:f2:e3:80:
d4:30:ed:6f:49:3c:88:19:d1:e6:76:02:60:6d:3c:
d6:a7:04:a1:7b:1f:a1:ff:63:51:6c:78:6a:f1:88:
d6:6a:7e:e9:3c:88:f2:98:db:0c:38:3c:fb:63:4d:
cc:93:c1:28:3c:96:cf:df:4f:6d:0f:1d:38:04:dc:
06:d5:62:59:4f:67:e8:e3:3f:81:91:d2:fb:18:51:
d6:44:8e:95:fe:6d:68:83:6c:11:b6:b1:b6:ed:08:
0f:f3:1e:d6:50:c7:4a:30:5a:53:14:04:eb:95:65:
ea:8c:cc:5f:77:2a:d0:2c:68:69:19:79:66:6f:f3:
e4:0d:97:cf:6d:e4:5d:fc:d3:c0:e6:f8:e1:98:61:
2e:c4:05:86:92:24:da:54:d9:f2:68:47:4a:a1:e2:
74:54:14:e2:65:cd:77:f3:48:5a:7f:fc:14:6a:19:
5e:51:ab:36:22:d3:87:cd:ca:c8:73:10:9c:e3:6d:
fc:f3:48:07:66:91:fd:6a:17:95:9c:25:e9:84:74:
3d:4b:e2:2a:52:6d:db:a7:10:68:15:ca:c3:6b:b6:
6f:42:df:da:a9:02:6f:de:1c:c8:dc:57:b7:3f:d3:
14:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C0:E2:21:CC:69:AC:EE:B3:0C:26:78:3D:5B:C6:4A:EE:E3:1E:45
X509v3 Authority Key Identifier:
keyid:B4:B0:BB:D6:44:55:78:ED:BC:7B:A6:B5:BF:7C:A9:36:8D:24:17:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLC71kRVeO28e6a1v3ypNo0kF78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:3f:d1:b9:2d:5a:3e:20:b1:00:b5:33:4e:9b:6b:6e:74:2b:
f9:1c:66:ba:d4:84:bd:8c:a8:76:0b:01:ee:df:3b:3b:50:f1:
7d:c2:57:02:a2:fb:9b:00:2d:23:62:de:04:51:70:25:cb:9c:
8c:81:3a:5f:61:f7:b0:17:02:ed:ca:12:d2:c9:27:f5:45:ac:
62:a6:fe:22:1d:5a:19:f9:d6:c0:c3:09:f6:4e:0b:a2:5e:7e:
c8:b9:c3:a8:9a:ab:76:1d:75:eb:0e:46:57:95:d0:a8:96:0b:
a1:22:34:cb:93:c5:8e:74:15:76:35:ce:6c:25:c3:3a:05:4b:
f8:db:c4:94:4c:40:94:f3:96:2f:61:d0:6e:3d:2a:30:7f:6a:
9a:d7:32:d4:9b:3f:45:86:ad:71:6c:16:4b:b0:58:29:39:9b:
87:73:b4:47:e3:ed:59:0a:8d:38:0b:d0:0e:d0:d2:d5:42:78:
d0:3a:e9:a3:95:02:22:54:63:9e:c7:29:b3:8d:a3:77:5a:b6:
7f:a8:e0:d5:64:79:bb:d0:4c:75:11:5e:a3:81:07:26:db:fc:
5a:b0:bf:7b:a4:72:19:52:58:9d:2c:d6:e2:0f:1d:74:54:53:
0d:61:01:ef:87:4a:47:bd:be:e5:f7:83:41:02:ce:38:bf:27:
89:85:ae:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCLaBh6i1jf1m01jc/qCBAVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0YjBiYmQ2NDQ1NTc4ZWRiYzdiYTZiNWJmN2NhOTM2OGQy
NDE3YmYwHhcNMjYwOTEwMTMwMDUwWhcNMjYwOTExMTMwMDUwWjAzMTEwLwYDVQQD
EyhhN2MwZTIyMWNjNjlhY2VlYjMwYzI2NzgzZDViYzY0YWVlZTMxZTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdw20e7z3QwPBjDqVuR26vy1Ezuv
4dq6NMTy44DUMO1vSTyIGdHmdgJgbTzWpwShex+h/2NRbHhq8YjWan7pPIjymNsM
ODz7Y03Mk8EoPJbP309tDx04BNwG1WJZT2fo4z+BkdL7GFHWRI6V/m1og2wRtrG2
7QgP8x7WUMdKMFpTFATrlWXqjMxfdyrQLGhpGXlmb/PkDZfPbeRd/NPA5vjhmGEu
xAWGkiTaVNnyaEdKoeJ0VBTiZc1380haf/wUahleUas2ItOHzcrIcxCc423880gH
ZpH9aheVnCXphHQ9S+IqUm3bpxBoFcrDa7ZvQt/aqQJv3hzI3Fe3P9MUcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKfA4iHMaazuswwmeD1bxkru4x5FMB8GA1UdIwQY
MBaAFLSwu9ZEVXjtvHumtb98qTaNJBe/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdExDNzFrUlZlTzI4ZTZhMXYzeXBObzBrRjc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8zNTAyZmMtZDlmNy00ZmE4LWJhZjYt
NzdkNTI5YmU1M2Q3LzEvdExDNzFrUlZlTzI4ZTZhMXYzeXBObzBrRjc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi8zNTAyZmMtZDlmNy00ZmE4LWJhZjYtNzdkNTI5YmU1M2Q3
LzEvdExDNzFrUlZlTzI4ZTZhMXYzeXBObzBrRjc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnT/RuS1a
PiCxALUzTptrbnQr+RxmutSEvYyodgsB7t87O1DxfcJXAqL7mwAtI2LeBFFwJcuc
jIE6X2H3sBcC7coS0skn9UWsYqb+Ih1aGfnWwMMJ9k4Lol5+yLnDqJqrdh116w5G
V5XQqJYLoSI0y5PFjnQVdjXObCXDOgVL+NvElExAlPOWL2HQbj0qMH9qmtcy1Js/
RYatcWwWS7BYKTmbh3O0R+PtWQqNOAvQDtDS1UJ40Drpo5UCIlRjnscps42jd1q2
f6jg1WR5u9BMdRFeo4EHJtv8WrC/e6RyGVJYnSzW4g8ddFRTDWEB74dKR72+5feD
QQLOOL8niYWuaQ==
-----END CERTIFICATE-----
Generated at Thu Sep 10 20:31:27 2026 by rpki-client