Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft
File: tlMWam8fM-RyDmfSTdMuRFgDUvA.mft (raw, json)
Hash identifier: Fp1GyoMscafFaNqpxgooUmcjW7/0A9I3aOtAuLcXRgs=
Subject key identifier: 89:01:0A:50:38:71:F0:7F:FB:E5:77:A2:53:7A:18:45:40:04:0F:70
Authority key identifier: B6:53:16:6A:6F:1F:33:E4:72:0E:67:D2:4D:D3:2E:44:58:03:52:F0
Certificate issuer: /CN=b653166a6f1f33e4720e67d24dd32e44580352f0
Certificate serial: 019E31BBFAC61050D101E60F6B8C9F2352FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tlMWam8fM-RyDmfSTdMuRFgDUvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft
Manifest number: 1911
Signing time: Sat 16 May 2026 17:01:03 +0000
Manifest this update: Sat 16 May 2026 17:01:03 +0000
Manifest next update: Sun 17 May 2026 17:01:03 +0000
Files and hashes: 1: 4GYkj_f2Nf46ovAbI9ICl-NUPNk.roa (hash: VIkjYJrRr/vUMXwmdH32EDSuoEreHbJ8GbvjfrFA1JI=)
2: HIq_BdqUCGatF2Rbj9NrkH9Ghjw.roa (hash: 8u28dk9o5BT41xzqo9yKmYyw/VKFKW4yRANeNy2FRA8=)
3: tlMWam8fM-RyDmfSTdMuRFgDUvA.crl (hash: cgIoBvWYiFBdnZLPzVZJUpaQdOyHCLP3zN+MYffTRZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tlMWam8fM-RyDmfSTdMuRFgDUvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:bb:fa:c6:10:50:d1:01:e6:0f:6b:8c:9f:23:52:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b653166a6f1f33e4720e67d24dd32e44580352f0
Validity
Not Before: May 16 17:01:03 2026 GMT
Not After : May 17 17:01:03 2026 GMT
Subject: CN=89010a503871f07ffbe577a2537a184540040f70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b0:5c:07:59:01:88:f1:74:ba:20:ee:c6:89:
5a:ae:0f:54:f5:2a:73:a2:8c:58:71:9e:c5:39:b5:
d9:79:12:84:d5:f3:2f:8e:e8:a4:6b:1f:b2:08:86:
51:97:0e:de:f5:2d:80:db:ea:82:21:c8:4c:7d:d1:
5a:1d:4e:33:a4:b7:c8:3f:27:96:04:29:d8:31:21:
f5:f6:07:f9:73:52:77:ef:1e:75:e5:dc:23:7a:4d:
4f:83:46:79:00:5e:66:d8:47:72:15:62:40:d3:af:
10:8c:d6:4f:d4:cd:43:ad:d6:03:d2:9f:94:a3:42:
aa:0c:6b:e7:f6:ae:e9:b4:c2:7c:51:f1:51:23:14:
f4:bb:e8:7f:ee:dc:b8:88:df:23:ac:20:96:af:09:
bb:36:cd:23:cd:a4:74:0b:05:03:1d:bd:6f:a2:3b:
e6:50:16:2e:92:4d:02:aa:7b:7f:0d:6d:1f:1f:ad:
bf:6f:13:ee:10:df:ce:37:cc:ef:21:47:ba:21:0d:
68:d5:b2:81:ba:eb:41:78:49:06:e4:1b:70:08:a6:
aa:87:77:91:b3:66:9a:f0:4f:7e:10:47:b3:3b:a2:
8b:6a:6b:a9:30:52:9b:ea:0e:db:9d:ee:d1:a8:04:
3a:90:bd:8b:c3:8d:33:20:9b:21:3a:0e:87:50:7b:
fc:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:01:0A:50:38:71:F0:7F:FB:E5:77:A2:53:7A:18:45:40:04:0F:70
X509v3 Authority Key Identifier:
keyid:B6:53:16:6A:6F:1F:33:E4:72:0E:67:D2:4D:D3:2E:44:58:03:52:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tlMWam8fM-RyDmfSTdMuRFgDUvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:8a:02:f9:26:4d:0f:16:20:50:92:04:b5:e4:57:3b:28:4b:
08:fc:7a:8a:d0:60:cf:08:e6:37:7d:64:15:c1:93:6c:fa:70:
65:f9:51:63:92:f0:84:5f:ad:b5:69:d9:af:dd:cd:22:63:91:
d8:88:42:ce:8c:96:4d:e5:4c:2f:52:98:b5:02:5a:c9:3e:20:
be:be:d0:13:ab:5f:a5:d2:c3:fd:d8:b8:13:16:e2:5a:cb:1a:
6a:d3:ea:ed:b7:26:f1:b6:54:74:8b:a8:a8:3a:57:34:e8:9b:
77:e8:41:b4:f2:06:2d:44:21:1a:b0:c5:86:96:ea:6c:6d:e2:
88:d9:5f:67:be:c3:6d:20:08:3c:d9:9b:33:df:f0:1d:db:b2:
41:ca:76:c1:d1:33:25:6e:4c:5c:79:9b:dc:5d:e8:8f:c8:40:
da:68:ef:9a:62:e0:b4:ef:79:95:c0:e6:19:c9:bb:c6:4e:f5:
5f:7f:5e:7e:79:bd:85:98:0e:08:90:8d:63:df:4d:b7:a0:b5:
a0:c1:cd:a1:59:fc:c9:84:ab:30:3b:ce:a4:5f:77:7a:21:16:
4a:2c:aa:1b:a0:03:b0:bb:c7:db:df:06:af:bf:65:56:a2:c1:
8e:f9:29:fa:06:b6:9b:4a:d3:70:4c:87:7a:39:69:3c:b1:f3:
b2:a5:13:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 00:27:47 2026 by rpki-client