Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.mft
File: tlkY8l1WAA-IHamN4yPZGgZOAIc.mft (raw, json)
Hash identifier: dAhLHRQZa2q7ZceFHtnaGAHMyXh/gV0cAcaHRG/JpFA=
Subject key identifier: F6:2D:A3:E5:79:2E:D8:6F:6C:23:09:1A:50:47:FE:FB:6D:AA:4C:7C
Authority key identifier: B6:59:18:F2:5D:56:00:0F:88:1D:A9:8D:E3:23:D9:1A:06:4E:00:87
Certificate issuer: /CN=b65918f25d56000f881da98de323d91a064e0087
Certificate serial: 019FA1BC1B77F64379CC15FB112FA9A4E253
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tlkY8l1WAA-IHamN4yPZGgZOAIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.mft
Manifest number: 19D3
Signing time: Mon 27 Jul 2026 04:01:27 +0000
Manifest this update: Mon 27 Jul 2026 04:01:27 +0000
Manifest next update: Tue 28 Jul 2026 04:01:27 +0000
Files and hashes: 1: A4jAeSOUxnx4vwbriYIE5GCmR5o.roa (hash: b613GUOnj4elC/TmCyjV9WQVEF9eM0NMnIGrwY4cmkM=)
2: cD7FBll6MKk0SBDKbacyHN6_vYE.roa (hash: cJYyYoLcAXlS5p1/xiBLoInLHVf2mQgsRevDWR07J20=)
3: tlkY8l1WAA-IHamN4yPZGgZOAIc.crl (hash: j4/Ue2l1W/j3+mWjXyViDxh4guVGeU/eGMbsHEXF9rQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tlkY8l1WAA-IHamN4yPZGgZOAIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 04:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:bc:1b:77:f6:43:79:cc:15:fb:11:2f:a9:a4:e2:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b65918f25d56000f881da98de323d91a064e0087
Validity
Not Before: Jul 27 04:01:27 2026 GMT
Not After : Jul 28 04:01:27 2026 GMT
Subject: CN=f62da3e5792ed86f6c23091a5047fefb6daa4c7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:fb:04:f3:01:2b:0f:38:a2:ee:71:38:7d:a2:
31:eb:c3:6b:f8:98:83:8a:da:c8:b9:ef:2c:ea:fd:
9f:f6:d0:e0:f0:a8:b9:07:6d:d3:82:01:82:9e:a2:
68:e5:1c:93:04:86:e8:60:46:bf:1a:34:cd:4a:24:
72:29:ed:78:af:7f:5a:a1:5e:47:c4:f7:85:ea:56:
1b:23:ca:69:a5:58:12:b4:69:89:28:c8:e8:43:95:
70:4e:ed:0c:a1:63:77:37:29:53:bf:52:df:49:5d:
4a:99:b0:1b:99:1c:bb:a6:5a:76:b0:3f:36:72:09:
e8:cc:e3:f3:bb:d0:e5:fa:ee:11:5e:d2:07:51:ac:
29:99:5d:13:41:d1:a1:55:ab:35:77:a0:9b:76:10:
8a:14:b3:ea:75:0c:4f:6d:9d:a4:26:f2:a2:a5:3d:
00:ec:35:67:56:59:32:b2:cf:60:49:4b:a8:0a:c4:
44:3b:94:69:0f:0b:2f:a2:78:87:68:ff:cd:b6:5d:
20:00:9e:cb:ea:6d:29:53:e4:c0:88:14:48:cb:e2:
0a:57:40:ab:d0:6a:48:e5:91:87:74:9b:2c:fd:12:
ca:42:b4:e5:31:fa:a7:e7:3b:11:ed:7d:32:23:ae:
ea:78:f7:10:eb:92:6a:52:06:a7:29:bb:35:81:12:
42:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:2D:A3:E5:79:2E:D8:6F:6C:23:09:1A:50:47:FE:FB:6D:AA:4C:7C
X509v3 Authority Key Identifier:
keyid:B6:59:18:F2:5D:56:00:0F:88:1D:A9:8D:E3:23:D9:1A:06:4E:00:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tlkY8l1WAA-IHamN4yPZGgZOAIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:71:92:7a:45:e4:11:ab:b7:ff:c2:56:51:cb:02:25:1b:4b:
8a:56:5d:5a:34:49:04:d1:87:d8:b9:f4:68:11:6e:d9:c7:4e:
0b:27:1c:38:cf:fd:41:96:f0:ad:38:5e:8b:96:17:15:8d:ce:
61:b5:cc:79:08:ff:64:e0:f9:ae:20:ac:ee:29:73:26:c7:1f:
67:8f:8a:cd:10:f9:e9:fe:fc:bb:9a:8f:20:30:ee:7d:28:93:
1b:a3:76:29:c0:ee:d3:8a:de:b1:a1:ab:57:2f:18:9b:b4:d6:
2a:33:81:b4:a9:89:5a:69:d0:29:df:49:07:59:ee:a1:43:5e:
dd:e1:46:1d:f0:97:36:ae:c9:61:5f:be:1f:48:47:03:4c:2a:
17:a5:7a:15:4a:43:db:29:69:47:34:47:e8:82:3e:17:db:ec:
74:61:99:18:ed:34:9a:c8:e3:11:70:20:05:fb:7c:7d:35:8e:
8e:d2:41:b1:1d:77:ba:ca:09:d7:2f:f7:3e:50:03:30:6c:34:
59:44:1c:a8:6a:fe:6e:7a:48:b3:a5:78:12:00:87:df:2a:55:
82:c9:61:43:ab:ce:a1:ef:46:97:ea:4e:fa:b1:df:7f:3b:c8:
bb:60:ef:ee:d3:0c:0f:fb:d2:3a:19:b2:2e:44:4d:b5:b7:cd:
3b:d2:a1:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+hvBt39kN5zBX7ES+ppOJTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2NTkxOGYyNWQ1NjAwMGY4ODFkYTk4ZGUzMjNkOTFhMDY0
ZTAwODcwHhcNMjYwNzI3MDQwMTI3WhcNMjYwNzI4MDQwMTI3WjAzMTEwLwYDVQQD
EyhmNjJkYTNlNTc5MmVkODZmNmMyMzA5MWE1MDQ3ZmVmYjZkYWE0YzdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2/sE8wErDzii7nE4faIx68Nr+JiD
itrIue8s6v2f9tDg8Ki5B23TggGCnqJo5RyTBIboYEa/GjTNSiRyKe14r39aoV5H
xPeF6lYbI8pppVgStGmJKMjoQ5VwTu0MoWN3NylTv1LfSV1KmbAbmRy7plp2sD82
cgnozOPzu9Dl+u4RXtIHUawpmV0TQdGhVas1d6CbdhCKFLPqdQxPbZ2kJvKipT0A
7DVnVlkyss9gSUuoCsREO5RpDwsvoniHaP/Ntl0gAJ7L6m0pU+TAiBRIy+IKV0Cr
0GpI5ZGHdJss/RLKQrTlMfqn5zsR7X0yI67qePcQ65JqUganKbs1gRJCzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPYto+V5LthvbCMJGlBH/vttqkx8MB8GA1UdIwQY
MBaAFLZZGPJdVgAPiB2pjeMj2RoGTgCHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGxrWThsMVdBQS1JSGFtTjR5UFpHZ1pPQUljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC81NTA2ZGUtMGIxYS00N2VlLTk5ZDEt
YTUyMGQ0MzQ2NTRhLzEvdGxrWThsMVdBQS1JSGFtTjR5UFpHZ1pPQUljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC81NTA2ZGUtMGIxYS00N2VlLTk5ZDEtYTUyMGQ0MzQ2NTRh
LzEvdGxrWThsMVdBQS1JSGFtTjR5UFpHZ1pPQUljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG3GSekXk
Eau3/8JWUcsCJRtLilZdWjRJBNGH2Ln0aBFu2cdOCyccOM/9QZbwrThei5YXFY3O
YbXMeQj/ZOD5riCs7ilzJscfZ4+KzRD56f78u5qPIDDufSiTG6N2KcDu04resaGr
Vy8Ym7TWKjOBtKmJWmnQKd9JB1nuoUNe3eFGHfCXNq7JYV++H0hHA0wqF6V6FUpD
2ylpRzRH6II+F9vsdGGZGO00msjjEXAgBft8fTWOjtJBsR13usoJ1y/3PlADMGw0
WUQcqGr+bnpIs6V4EgCH3ypVgslhQ6vOoe9Gl+pO+rHffzvIu2Dv7tMMD/vSOhmy
LkRNtbfNO9KhXQ==
-----END CERTIFICATE-----
Generated at Mon Jul 27 10:26:40 2026 by rpki-client