Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/8b14a3-190f-41a4-b66c-bdf1ba08d5fe/1/tltl1ApY9eFCwAss67gU4XpNHM4.mft
File: tltl1ApY9eFCwAss67gU4XpNHM4.mft (raw, json)
Hash identifier: y9GpARA4lIoXUZmosFL5xsr0SF813dz1OlZxftaoHjQ=
Subject key identifier: 57:5F:43:F4:D2:2C:6A:92:D8:B8:8B:E3:CE:FD:FA:F7:7E:EB:D5:7C
Authority key identifier: B6:5B:65:D4:0A:58:F5:E1:42:C0:0B:2C:EB:B8:14:E1:7A:4D:1C:CE
Certificate issuer: /CN=b65b65d40a58f5e142c00b2cebb814e17a4d1cce
Certificate serial: 01A17739AE3106851B30E3D55854CCC0C31F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tltl1ApY9eFCwAss67gU4XpNHM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/8b14a3-190f-41a4-b66c-bdf1ba08d5fe/1/tltl1ApY9eFCwAss67gU4XpNHM4.mft
Manifest number: 02DB
Signing time: Mon 26 Oct 2026 08:00:31 +0000
Manifest this update: Mon 26 Oct 2026 08:00:31 +0000
Manifest next update: Tue 27 Oct 2026 08:00:31 +0000
Files and hashes: 1: LwZw57KRcsSlFCkevmi86lLELNg.roa (hash: GnI2zO7N9aow5t6/as/HPtUeoPLxUymlPVs+tJmlDwE=)
2: XjSNL--AGv2RohzwC7S-Qp8mmh0.roa (hash: clDhjF0Ylt17QbqIBE+8qKYkZ8/cSocUrgMK4Nq5Jzk=)
3: tltl1ApY9eFCwAss67gU4XpNHM4.crl (hash: TrZXJJCfy6PTlk9zAi3S277XtNAd2smvLkruPEIqmx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/8b14a3-190f-41a4-b66c-bdf1ba08d5fe/1/tltl1ApY9eFCwAss67gU4XpNHM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/8b14a3-190f-41a4-b66c-bdf1ba08d5fe/1/tltl1ApY9eFCwAss67gU4XpNHM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tltl1ApY9eFCwAss67gU4XpNHM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:39:ae:31:06:85:1b:30:e3:d5:58:54:cc:c0:c3:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b65b65d40a58f5e142c00b2cebb814e17a4d1cce
Validity
Not Before: Oct 26 08:00:31 2026 GMT
Not After : Oct 27 08:00:31 2026 GMT
Subject: CN=575f43f4d22c6a92d8b88be3cefdfaf77eebd57c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:39:54:83:16:1a:5a:e6:46:42:06:42:ee:16:
44:09:73:ac:ed:d1:86:76:ef:1a:e3:17:cf:69:8c:
49:e4:79:ef:7f:4e:fa:99:ab:42:5f:d6:c9:0e:87:
73:58:3f:af:80:dc:fa:b3:bd:69:08:51:ba:14:3e:
13:68:b7:00:6b:41:d4:94:73:6d:37:1c:cb:83:ef:
e5:b6:f2:d8:40:e8:de:4e:08:fa:d0:62:45:e9:5b:
cb:a0:34:3e:f3:8d:66:bc:d5:45:1e:85:90:d4:4e:
28:cf:64:d7:7d:40:15:0b:c3:35:d0:7d:b7:01:c1:
fe:69:e3:42:a5:41:10:d1:15:83:45:66:07:35:5e:
54:5b:04:74:2f:67:29:d8:ce:b1:bb:59:11:b6:97:
9b:3a:c6:30:22:1b:76:f4:d7:e8:bf:62:3e:42:61:
2f:59:ea:a6:82:70:49:96:c8:d3:4b:9c:79:92:5a:
d1:b2:3d:f8:f9:6e:fe:0d:87:e3:33:17:45:82:a0:
cb:d6:20:2a:d7:08:17:7b:53:6b:11:ef:32:79:1d:
46:8c:ea:b8:91:e8:6d:82:bf:ad:28:e1:a0:31:37:
fa:fe:18:ab:a9:cc:87:fc:db:15:61:d2:21:92:e2:
29:47:9f:ec:13:06:9e:bb:c9:b9:a6:64:60:26:46:
73:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:5F:43:F4:D2:2C:6A:92:D8:B8:8B:E3:CE:FD:FA:F7:7E:EB:D5:7C
X509v3 Authority Key Identifier:
keyid:B6:5B:65:D4:0A:58:F5:E1:42:C0:0B:2C:EB:B8:14:E1:7A:4D:1C:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tltl1ApY9eFCwAss67gU4XpNHM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8b14a3-190f-41a4-b66c-bdf1ba08d5fe/1/tltl1ApY9eFCwAss67gU4XpNHM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8b14a3-190f-41a4-b66c-bdf1ba08d5fe/1/tltl1ApY9eFCwAss67gU4XpNHM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:91:2c:95:ef:47:b4:f0:72:45:43:0d:7a:6c:06:62:e6:60:
cf:a5:a7:fa:fa:5c:8a:96:e1:bd:a0:b9:fb:45:06:d4:77:98:
24:8a:8d:10:b4:3f:70:fa:5f:26:09:27:77:c6:09:76:80:c2:
5b:f3:9e:4a:f7:c6:ae:15:b0:24:95:80:1c:60:77:7c:b2:62:
c0:4f:f0:96:04:30:5e:ff:54:cd:13:98:79:30:28:7d:bd:a1:
f4:d9:a9:48:2d:8b:6a:9e:fb:1d:79:21:08:07:77:70:76:07:
2b:c1:4d:52:2c:9e:7e:ed:df:86:5d:0c:c1:73:9a:3a:c5:e4:
52:51:51:75:1d:ac:e2:fb:2e:2b:a8:e5:1e:e5:76:64:13:88:
03:54:93:1e:0d:f0:ef:e1:95:9b:6d:40:85:ba:14:53:73:36:
42:83:f3:10:b5:a2:f7:77:fe:45:3d:1c:48:50:bf:7f:60:ae:
89:17:ed:a4:80:75:c5:37:0c:56:08:fa:96:ec:7f:60:6b:63:
a4:35:ca:12:07:8d:b0:05:f0:7e:c9:ed:9d:d2:e3:1e:40:f3:
a5:4f:0c:14:8c:3b:dc:5b:2e:1f:e7:1c:80:34:5d:d9:7e:a5:
d4:6c:9e:4c:78:5b:dd:d8:a8:ec:a7:9c:38:93:0c:29:1f:61:
32:90:b0:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 13:16:38 2026 by rpki-client