Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.mft
File: tlkY8l1WAA-IHamN4yPZGgZOAIc.mft (raw, json)
Hash identifier: KkF7xIDn8v6yLMTbsFxj2nBwOmD4hgNsOp2jvwPfduw=
Subject key identifier: 1E:35:F9:17:B6:B2:0D:AC:AA:B1:2A:66:95:4B:8A:8C:67:AE:C7:04
Authority key identifier: B6:59:18:F2:5D:56:00:0F:88:1D:A9:8D:E3:23:D9:1A:06:4E:00:87
Certificate issuer: /CN=b65918f25d56000f881da98de323d91a064e0087
Certificate serial: 01A18E2F6F03C14C6D726E9932492E839CCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tlkY8l1WAA-IHamN4yPZGgZOAIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.mft
Manifest number: 1AD2
Signing time: Fri 30 Oct 2026 19:00:35 +0000
Manifest this update: Fri 30 Oct 2026 19:00:35 +0000
Manifest next update: Sat 31 Oct 2026 19:00:35 +0000
Files and hashes: 1: A4jAeSOUxnx4vwbriYIE5GCmR5o.roa (hash: b613GUOnj4elC/TmCyjV9WQVEF9eM0NMnIGrwY4cmkM=)
2: cD7FBll6MKk0SBDKbacyHN6_vYE.roa (hash: cJYyYoLcAXlS5p1/xiBLoInLHVf2mQgsRevDWR07J20=)
3: tlkY8l1WAA-IHamN4yPZGgZOAIc.crl (hash: iUbQMuQ5lWVH/9zChhkRoIRGeGnVdoMxtGuFpkXWY20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tlkY8l1WAA-IHamN4yPZGgZOAIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8e:2f:6f:03:c1:4c:6d:72:6e:99:32:49:2e:83:9c:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b65918f25d56000f881da98de323d91a064e0087
Validity
Not Before: Oct 30 19:00:35 2026 GMT
Not After : Oct 31 19:00:35 2026 GMT
Subject: CN=1e35f917b6b20dacaab12a66954b8a8c67aec704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:af:cc:8d:73:ad:8d:f3:2e:b6:db:87:f9:41:
c3:52:3f:77:66:66:7d:d2:93:f0:21:d2:05:6b:55:
1e:4e:78:c8:2d:25:56:0f:c6:24:25:bc:b5:aa:6a:
66:32:36:f5:e0:74:f7:0c:e7:87:aa:14:41:4f:98:
17:1e:6d:20:ad:19:11:d5:57:07:3a:e9:34:74:70:
82:2c:b4:66:e8:bc:83:3c:60:3d:07:97:25:75:a3:
13:54:a5:65:29:c2:57:dd:dd:df:01:e4:12:f5:9e:
d3:42:e5:74:a4:43:c2:9d:7a:0c:93:0d:19:bd:98:
dc:9c:57:c9:88:07:ab:e5:8f:b0:de:b4:47:49:38:
df:61:75:aa:b0:74:74:c0:84:31:c7:e1:d1:4d:46:
27:eb:8f:55:f0:b5:e8:fc:3f:7a:3a:00:20:6a:96:
31:97:4e:bc:9f:e0:79:9f:60:66:4b:bc:cf:14:aa:
6c:16:26:a0:37:e1:e6:72:65:b8:fe:c4:19:c5:db:
53:fc:6a:21:a8:13:8e:ad:09:f5:54:24:a7:5e:7c:
e7:ee:26:1b:14:a4:ca:dc:8c:a1:58:97:69:d3:b7:
71:53:51:92:df:fe:88:c5:0a:38:ff:17:ea:87:6c:
51:85:85:46:0a:4a:ef:be:2b:6f:3d:14:66:0e:10:
d7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:35:F9:17:B6:B2:0D:AC:AA:B1:2A:66:95:4B:8A:8C:67:AE:C7:04
X509v3 Authority Key Identifier:
keyid:B6:59:18:F2:5D:56:00:0F:88:1D:A9:8D:E3:23:D9:1A:06:4E:00:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tlkY8l1WAA-IHamN4yPZGgZOAIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:0c:1c:ea:88:d4:9b:92:db:72:3b:7c:a7:39:6c:1c:b8:fa:
70:b7:97:91:a0:34:f8:ea:7e:93:49:66:0b:50:1d:e0:8f:c0:
2e:71:5b:d4:df:19:e9:b5:12:53:fa:08:af:c6:5d:6b:18:99:
67:11:27:1d:9e:b7:b5:df:1c:c2:c9:3e:c6:33:82:a8:44:a3:
1d:c1:c6:f8:e5:e6:c2:28:96:fc:56:c6:ba:95:03:0f:34:4c:
41:46:03:a1:cf:37:01:44:f0:69:0c:8e:20:69:59:00:8e:a4:
5f:6a:4b:e3:ec:02:ff:0a:21:5f:30:0e:8e:9e:94:dd:26:ee:
0c:00:29:5a:7c:fb:cf:52:b1:4b:97:6c:a7:90:15:9e:32:1f:
b3:06:c5:7d:2f:11:ba:8d:b0:b0:c2:7c:a7:7d:86:51:6b:1a:
de:4a:64:c8:7e:bc:81:a0:2e:8a:9f:8b:d4:24:82:4d:a4:11:
30:b7:d4:4c:d5:d2:0e:23:a9:d5:21:2c:4d:71:cc:6e:cd:ca:
ad:73:e8:ce:6e:22:81:ed:5e:c7:78:72:36:29:59:77:89:4e:
0a:3c:31:d4:53:04:60:f1:9b:38:98:27:b7:92:de:24:72:9c:
aa:61:ff:1a:0e:12:19:02:12:49:59:b2:cc:36:b0:59:39:0e:
05:ac:96:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 02:18:21 2026 by rpki-client