Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/8b14a3-190f-41a4-b66c-bdf1ba08d5fe/1/tltl1ApY9eFCwAss67gU4XpNHM4.mft
File: tltl1ApY9eFCwAss67gU4XpNHM4.mft (raw, json)
Hash identifier: 9z7F+khnHZNNTJ5wU04bVI21OjyyrxHRxzt9IO9G+j4=
Subject key identifier: AA:D7:13:A0:87:E9:A2:1E:0B:76:15:B3:C0:41:EF:5E:FD:FC:D2:DE
Authority key identifier: B6:5B:65:D4:0A:58:F5:E1:42:C0:0B:2C:EB:B8:14:E1:7A:4D:1C:CE
Certificate issuer: /CN=b65b65d40a58f5e142c00b2cebb814e17a4d1cce
Certificate serial: 019CE4ECD6B17EF1F89CD3974B9C2522C3AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tltl1ApY9eFCwAss67gU4XpNHM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/8b14a3-190f-41a4-b66c-bdf1ba08d5fe/1/tltl1ApY9eFCwAss67gU4XpNHM4.mft
Manifest number: 7D
Signing time: Fri 13 Mar 2026 02:00:52 +0000
Manifest this update: Fri 13 Mar 2026 02:00:52 +0000
Manifest next update: Sat 14 Mar 2026 02:00:52 +0000
Files and hashes: 1: LwZw57KRcsSlFCkevmi86lLELNg.roa (hash: GnI2zO7N9aow5t6/as/HPtUeoPLxUymlPVs+tJmlDwE=)
2: XjSNL--AGv2RohzwC7S-Qp8mmh0.roa (hash: clDhjF0Ylt17QbqIBE+8qKYkZ8/cSocUrgMK4Nq5Jzk=)
3: tltl1ApY9eFCwAss67gU4XpNHM4.crl (hash: XWnwe6MT7BcJGIn2S4r6bVWdF8ShwZnTw63ts+wnrSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/8b14a3-190f-41a4-b66c-bdf1ba08d5fe/1/tltl1ApY9eFCwAss67gU4XpNHM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/8b14a3-190f-41a4-b66c-bdf1ba08d5fe/1/tltl1ApY9eFCwAss67gU4XpNHM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tltl1ApY9eFCwAss67gU4XpNHM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:ec:d6:b1:7e:f1:f8:9c:d3:97:4b:9c:25:22:c3:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b65b65d40a58f5e142c00b2cebb814e17a4d1cce
Validity
Not Before: Mar 13 02:00:52 2026 GMT
Not After : Mar 14 02:00:52 2026 GMT
Subject: CN=aad713a087e9a21e0b7615b3c041ef5efdfcd2de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:8a:f3:77:c9:c7:52:c5:fe:a1:cc:6f:76:3c:
ae:f5:3d:eb:82:61:07:c7:90:d5:3a:ed:0b:9c:e3:
06:56:b8:5d:53:87:f9:18:b8:2f:e6:c8:f8:7c:eb:
53:b0:8f:58:a2:b2:1e:64:44:84:d7:07:e7:1c:9d:
21:e2:7e:bb:dc:fb:d8:44:0e:11:80:24:10:70:ea:
5c:28:a2:49:cd:d3:79:16:9d:41:00:38:ff:cb:07:
41:d8:da:69:06:6f:60:52:6e:54:f1:2f:93:68:f1:
a4:e0:99:35:c9:d4:d4:b1:4a:3d:95:8f:8b:42:6c:
b6:3b:f1:39:b8:7f:f9:64:04:a2:4c:a1:46:6d:0b:
f2:fb:12:6b:a9:3d:1b:00:d9:be:98:2a:68:d8:71:
e0:4d:33:20:8a:74:32:5b:a0:08:bf:05:75:6c:9d:
01:9b:cc:12:26:2c:80:7c:7c:2d:dc:a3:7e:b2:b3:
df:66:cc:06:93:a2:0c:7a:4c:e9:82:7e:57:87:3d:
d6:a2:ee:a8:85:d3:8c:11:f4:a3:10:ce:68:10:05:
53:f2:81:c1:4a:f7:c5:48:dc:1f:3c:bd:5f:ba:32:
d2:b7:2a:a5:34:80:e2:87:47:1b:c6:95:03:d7:fe:
fd:35:b7:fb:00:54:a2:f3:a1:53:ab:15:7a:fd:c6:
4a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D7:13:A0:87:E9:A2:1E:0B:76:15:B3:C0:41:EF:5E:FD:FC:D2:DE
X509v3 Authority Key Identifier:
keyid:B6:5B:65:D4:0A:58:F5:E1:42:C0:0B:2C:EB:B8:14:E1:7A:4D:1C:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tltl1ApY9eFCwAss67gU4XpNHM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8b14a3-190f-41a4-b66c-bdf1ba08d5fe/1/tltl1ApY9eFCwAss67gU4XpNHM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8b14a3-190f-41a4-b66c-bdf1ba08d5fe/1/tltl1ApY9eFCwAss67gU4XpNHM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:2e:84:4e:3e:0c:4a:7c:ff:b7:55:57:d5:e1:1f:92:f0:57:
d6:65:cd:1c:b6:98:27:f4:9c:cf:b2:79:d9:66:43:af:7f:8a:
6e:7d:c3:84:3b:33:4d:d2:94:d7:1e:8c:64:86:b7:d7:30:c2:
90:28:71:77:dd:66:bd:9d:d3:ac:15:ce:66:81:2f:74:c0:1e:
12:98:9b:2f:46:a1:cf:15:07:62:9d:4b:45:9b:4f:a3:aa:04:
f7:c9:7c:d9:9c:71:f7:b9:89:89:97:46:65:ee:94:3e:23:fe:
52:02:b9:6d:fa:6c:80:07:2b:3d:72:f7:6c:44:d5:e6:1b:19:
ef:95:fe:4b:19:97:cb:2c:f8:31:04:10:24:3e:4e:e5:d0:48:
da:49:e0:f8:de:0a:2c:92:42:84:11:cb:c5:2e:c3:64:95:fa:
f2:e1:19:84:3f:03:ee:88:b5:d3:e2:21:7d:08:cc:49:6b:59:
3b:c1:14:41:a0:11:3a:e4:28:2b:b1:8c:9a:84:d4:2c:3f:f1:
f3:13:6d:fc:7d:30:00:3b:0b:69:5c:47:52:0a:89:d1:29:fa:
e8:33:8c:13:0c:6f:2e:16:40:d3:5d:cb:4e:13:8c:20:df:9f:
74:35:fb:bb:6f:c7:0e:8c:23:04:34:c2:7d:ca:75:ae:96:2f:
80:38:a4:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 04:55:03 2026 by rpki-client