Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/8b14a3-190f-41a4-b66c-bdf1ba08d5fe/1/tltl1ApY9eFCwAss67gU4XpNHM4.mft
File: tltl1ApY9eFCwAss67gU4XpNHM4.mft (raw, json)
Hash identifier: tgVqD8QIocCLXCiHh47tH+fxwRhyf+slkj8th3qcX2Y=
Subject key identifier: 67:25:91:70:08:B3:D9:B8:6A:A6:B4:96:1F:C6:4C:97:D9:2C:0E:D9
Authority key identifier: B6:5B:65:D4:0A:58:F5:E1:42:C0:0B:2C:EB:B8:14:E1:7A:4D:1C:CE
Certificate issuer: /CN=b65b65d40a58f5e142c00b2cebb814e17a4d1cce
Certificate serial: 019DCCAA9D3CB161CA9594CF726AF58E6349
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tltl1ApY9eFCwAss67gU4XpNHM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/8b14a3-190f-41a4-b66c-bdf1ba08d5fe/1/tltl1ApY9eFCwAss67gU4XpNHM4.mft
Manifest number: F5
Signing time: Mon 27 Apr 2026 02:00:26 +0000
Manifest this update: Mon 27 Apr 2026 02:00:26 +0000
Manifest next update: Tue 28 Apr 2026 02:00:26 +0000
Files and hashes: 1: LwZw57KRcsSlFCkevmi86lLELNg.roa (hash: GnI2zO7N9aow5t6/as/HPtUeoPLxUymlPVs+tJmlDwE=)
2: XjSNL--AGv2RohzwC7S-Qp8mmh0.roa (hash: clDhjF0Ylt17QbqIBE+8qKYkZ8/cSocUrgMK4Nq5Jzk=)
3: tltl1ApY9eFCwAss67gU4XpNHM4.crl (hash: xQjlhCKuYvNbqaUZOmgonuJH53ScpRQeQJIinQ/gDCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/8b14a3-190f-41a4-b66c-bdf1ba08d5fe/1/tltl1ApY9eFCwAss67gU4XpNHM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/8b14a3-190f-41a4-b66c-bdf1ba08d5fe/1/tltl1ApY9eFCwAss67gU4XpNHM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tltl1ApY9eFCwAss67gU4XpNHM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 02:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:aa:9d:3c:b1:61:ca:95:94:cf:72:6a:f5:8e:63:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b65b65d40a58f5e142c00b2cebb814e17a4d1cce
Validity
Not Before: Apr 27 02:00:26 2026 GMT
Not After : Apr 28 02:00:26 2026 GMT
Subject: CN=6725917008b3d9b86aa6b4961fc64c97d92c0ed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:52:84:c9:b5:a0:a1:fa:ba:3f:fa:8c:56:34:
70:a6:b1:68:84:32:98:01:18:c3:b9:50:be:29:3e:
49:5d:21:d6:73:74:5e:4f:bb:7b:8a:f1:cc:0f:12:
06:4e:24:a2:3a:10:ff:c6:f0:9e:b2:86:cf:fa:6f:
7c:5d:75:c1:ee:bd:cf:40:44:b1:87:7e:ec:ab:16:
46:40:d9:b4:08:cc:e4:8c:c5:3e:22:1f:6b:41:7f:
cb:97:95:a4:bb:02:cb:93:f2:7e:41:fa:09:85:84:
a6:46:44:16:c8:c2:b8:83:7f:59:1e:ac:43:41:0c:
f5:91:2a:11:80:d6:a5:3c:28:38:74:eb:af:b1:c0:
e4:97:25:5f:df:c3:15:20:ca:5b:26:86:68:2d:bc:
b6:d5:c4:7d:5d:94:37:24:f0:1c:df:07:c3:7b:89:
31:99:13:ef:4f:d6:63:21:2d:10:5f:b7:07:e0:6c:
5e:6c:fd:f5:03:2b:5d:a9:fe:cc:93:20:69:8f:d6:
bf:fe:e2:0a:d7:fc:da:c7:92:eb:57:24:df:7b:de:
66:e8:00:af:48:b0:c6:a0:98:c1:91:69:ce:60:63:
a0:d8:22:5f:b0:38:b9:e0:de:d8:3b:c4:40:54:71:
1b:e5:41:63:6c:44:10:6b:19:ef:ad:62:36:c5:86:
f9:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:25:91:70:08:B3:D9:B8:6A:A6:B4:96:1F:C6:4C:97:D9:2C:0E:D9
X509v3 Authority Key Identifier:
keyid:B6:5B:65:D4:0A:58:F5:E1:42:C0:0B:2C:EB:B8:14:E1:7A:4D:1C:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tltl1ApY9eFCwAss67gU4XpNHM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8b14a3-190f-41a4-b66c-bdf1ba08d5fe/1/tltl1ApY9eFCwAss67gU4XpNHM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8b14a3-190f-41a4-b66c-bdf1ba08d5fe/1/tltl1ApY9eFCwAss67gU4XpNHM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:fe:88:56:c1:29:e4:73:ff:73:e7:89:74:3e:17:5b:87:fe:
60:41:a4:24:a0:09:ca:05:f3:4e:ce:2c:ce:68:30:9f:da:2e:
a8:ab:68:dd:9d:04:81:76:95:27:98:9c:65:66:8b:cb:9a:6f:
ab:35:72:34:52:fd:42:24:f9:11:1e:08:60:88:cf:b3:05:44:
48:b7:54:7a:c9:1a:e9:36:4d:17:e4:32:59:0c:a8:95:df:e6:
07:ff:d6:0f:91:e9:c7:51:58:02:b3:47:46:ec:7b:66:d4:ba:
0a:98:a2:82:c4:87:94:b9:8f:4a:53:00:f5:b0:5a:18:6c:05:
11:84:01:6a:31:b9:da:b2:1f:4c:01:e4:9c:a1:45:12:38:96:
3b:d3:fd:25:aa:9c:cb:5d:b2:c2:65:6e:64:53:07:c2:ce:aa:
c6:58:ce:ec:a3:bf:fc:94:3e:ab:99:50:e0:ba:b1:a0:1d:2b:
2b:80:c2:46:88:a8:f1:aa:d7:9d:c5:f2:bc:90:3d:41:0c:fc:
89:a5:3a:e3:86:45:37:b2:96:99:c7:c7:23:7b:3e:88:67:6c:
ae:22:20:00:20:3b:8f:54:07:23:05:4a:97:ac:16:d3:a5:09:
7a:46:99:f2:31:39:98:a0:37:9a:37:a8:ce:fd:67:10:89:19:
e6:d6:2c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:54:11 2026 by rpki-client