Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.mft
File: tlkY8l1WAA-IHamN4yPZGgZOAIc.mft (raw, json)
Hash identifier: aKeD3Wu5oBIsUA70MGHs+4P5NG+HUBExmeTQYMOIx1M=
Subject key identifier: A1:E6:BC:5F:46:BF:E4:0E:6D:F1:D8:E4:F9:ED:5E:4B:4E:23:A0:74
Authority key identifier: B6:59:18:F2:5D:56:00:0F:88:1D:A9:8D:E3:23:D9:1A:06:4E:00:87
Certificate issuer: /CN=b65918f25d56000f881da98de323d91a064e0087
Certificate serial: 01A08D56E61EA2C8477838C1C4B53472B9B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tlkY8l1WAA-IHamN4yPZGgZOAIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.mft
Manifest number: 1A4D
Signing time: Thu 10 Sep 2026 22:01:17 +0000
Manifest this update: Thu 10 Sep 2026 22:01:17 +0000
Manifest next update: Fri 11 Sep 2026 22:01:17 +0000
Files and hashes: 1: A4jAeSOUxnx4vwbriYIE5GCmR5o.roa (hash: b613GUOnj4elC/TmCyjV9WQVEF9eM0NMnIGrwY4cmkM=)
2: cD7FBll6MKk0SBDKbacyHN6_vYE.roa (hash: cJYyYoLcAXlS5p1/xiBLoInLHVf2mQgsRevDWR07J20=)
3: tlkY8l1WAA-IHamN4yPZGgZOAIc.crl (hash: UomsINd4gRimfip5c1nGt2WKgeDnsOVASHYwJuPQlCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tlkY8l1WAA-IHamN4yPZGgZOAIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 22:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:56:e6:1e:a2:c8:47:78:38:c1:c4:b5:34:72:b9:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b65918f25d56000f881da98de323d91a064e0087
Validity
Not Before: Sep 10 22:01:17 2026 GMT
Not After : Sep 11 22:01:17 2026 GMT
Subject: CN=a1e6bc5f46bfe40e6df1d8e4f9ed5e4b4e23a074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:98:4c:48:e8:58:65:0d:0c:77:d1:b4:05:0d:
e6:ba:8c:68:e4:df:a1:47:49:71:e7:b7:55:5b:21:
08:5c:e8:62:5a:b8:41:8f:b8:10:f8:e5:2e:f8:56:
38:12:15:ef:db:fd:2d:39:b4:40:f0:97:d5:42:4f:
89:2f:92:8b:8f:55:55:90:7f:a0:0d:09:ef:39:a1:
a7:43:ee:f9:c4:62:9e:10:f2:7c:83:43:22:60:d4:
ec:e3:fa:e9:58:8a:9e:b0:6d:20:0c:5f:f4:99:a0:
11:46:3e:8f:4e:c0:a5:33:e6:0c:9b:76:6b:d2:e4:
e7:75:38:ae:62:c9:9a:2e:ff:40:12:d1:73:a2:1d:
0e:d7:64:5d:25:cf:bf:3f:8b:93:e6:cf:bd:4f:78:
e7:a8:09:51:8e:5f:c3:2d:5d:1a:d6:92:9a:c5:ed:
1c:5c:61:c8:59:90:d6:7c:ec:35:6c:be:1d:bc:19:
34:1b:d5:f3:0c:bb:78:d8:eb:94:00:92:4a:a2:88:
82:67:1c:88:1c:7a:6a:2c:59:5d:24:70:7c:59:ac:
7e:02:60:d7:43:54:aa:14:72:ec:e8:f2:86:c2:98:
2d:cb:0e:c5:63:91:07:11:6e:81:75:45:73:77:d0:
b8:2d:02:c5:27:92:d3:cd:d1:36:da:18:75:23:bf:
e7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:E6:BC:5F:46:BF:E4:0E:6D:F1:D8:E4:F9:ED:5E:4B:4E:23:A0:74
X509v3 Authority Key Identifier:
keyid:B6:59:18:F2:5D:56:00:0F:88:1D:A9:8D:E3:23:D9:1A:06:4E:00:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tlkY8l1WAA-IHamN4yPZGgZOAIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:3c:5f:34:80:06:74:ae:0d:cc:4c:df:3f:38:6e:39:79:8f:
95:fc:21:a9:10:98:9c:10:5c:2f:8a:9b:59:27:87:a9:bc:ea:
66:34:44:7b:f9:15:a9:d8:b7:50:25:42:94:27:96:18:92:5e:
b5:92:18:ef:db:6b:ce:3d:ed:b2:e4:db:be:83:eb:ea:21:72:
43:bc:f4:29:07:37:e0:19:d9:c0:47:1b:71:ef:89:1d:d9:df:
dc:c2:f2:fe:10:23:09:7f:0b:13:1d:3e:3b:47:9d:56:64:6a:
da:04:b5:87:25:eb:75:2a:31:92:80:28:5b:c5:e8:46:6c:43:
b3:d5:cd:4a:a2:1d:35:45:ae:7f:2a:c0:32:a0:0f:bf:19:ca:
a3:7a:81:7c:a9:29:a4:63:4a:00:9f:11:e2:c7:bd:e2:ed:0b:
cb:0a:96:86:cd:b0:2e:5d:e4:3c:d4:8c:98:ae:2d:45:34:0f:
06:a0:a3:ea:02:8f:23:ec:14:d2:d6:39:16:7b:ec:50:fe:ac:
59:cb:d3:a2:84:0c:38:b7:0a:c3:a6:2d:1f:57:9b:5d:a9:7a:
6e:d8:86:56:69:35:ab:42:e6:9d:a4:fe:2b:37:81:76:8b:0e:
92:d1:4d:6e:db:11:df:f6:1e:d1:da:be:a1:d0:5c:08:ad:5c:
36:24:30:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCNVuYeoshHeDjBxLU0crm1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2NTkxOGYyNWQ1NjAwMGY4ODFkYTk4ZGUzMjNkOTFhMDY0
ZTAwODcwHhcNMjYwOTEwMjIwMTE3WhcNMjYwOTExMjIwMTE3WjAzMTEwLwYDVQQD
EyhhMWU2YmM1ZjQ2YmZlNDBlNmRmMWQ4ZTRmOWVkNWU0YjRlMjNhMDc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5hMSOhYZQ0Md9G0BQ3muoxo5N+h
R0lx57dVWyEIXOhiWrhBj7gQ+OUu+FY4EhXv2/0tObRA8JfVQk+JL5KLj1VVkH+g
DQnvOaGnQ+75xGKeEPJ8g0MiYNTs4/rpWIqesG0gDF/0maARRj6PTsClM+YMm3Zr
0uTndTiuYsmaLv9AEtFzoh0O12RdJc+/P4uT5s+9T3jnqAlRjl/DLV0a1pKaxe0c
XGHIWZDWfOw1bL4dvBk0G9XzDLt42OuUAJJKooiCZxyIHHpqLFldJHB8Wax+AmDX
Q1SqFHLs6PKGwpgtyw7FY5EHEW6BdUVzd9C4LQLFJ5LTzdE22hh1I7/nSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKHmvF9Gv+QObfHY5PntXktOI6B0MB8GA1UdIwQY
MBaAFLZZGPJdVgAPiB2pjeMj2RoGTgCHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGxrWThsMVdBQS1JSGFtTjR5UFpHZ1pPQUljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC81NTA2ZGUtMGIxYS00N2VlLTk5ZDEt
YTUyMGQ0MzQ2NTRhLzEvdGxrWThsMVdBQS1JSGFtTjR5UFpHZ1pPQUljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC81NTA2ZGUtMGIxYS00N2VlLTk5ZDEtYTUyMGQ0MzQ2NTRh
LzEvdGxrWThsMVdBQS1JSGFtTjR5UFpHZ1pPQUljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfDxfNIAG
dK4NzEzfPzhuOXmPlfwhqRCYnBBcL4qbWSeHqbzqZjREe/kVqdi3UCVClCeWGJJe
tZIY79trzj3tsuTbvoPr6iFyQ7z0KQc34BnZwEcbce+JHdnf3MLy/hAjCX8LEx0+
O0edVmRq2gS1hyXrdSoxkoAoW8XoRmxDs9XNSqIdNUWufyrAMqAPvxnKo3qBfKkp
pGNKAJ8R4se94u0LywqWhs2wLl3kPNSMmK4tRTQPBqCj6gKPI+wU0tY5FnvsUP6s
WcvTooQMOLcKw6YtH1ebXal6btiGVmk1q0LmnaT+KzeBdosOktFNbtsR3/Ye0dq+
odBcCK1cNiQwnQ==
-----END CERTIFICATE-----
Generated at Fri Sep 11 04:15:14 2026 by rpki-client