Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft
File: tlMWam8fM-RyDmfSTdMuRFgDUvA.mft (raw, json)
Hash identifier: ZLO5iwAbkBvkxmOLnb4leKylKsGDUAmOVsR31iMbqx8=
Subject key identifier: 12:B4:A7:B6:37:EC:6D:E3:B6:5D:3E:B4:D3:C0:AC:CA:43:DA:EB:97
Authority key identifier: B6:53:16:6A:6F:1F:33:E4:72:0E:67:D2:4D:D3:2E:44:58:03:52:F0
Certificate issuer: /CN=b653166a6f1f33e4720e67d24dd32e44580352f0
Certificate serial: 019F859F1F26DA460460EAB48D08BB06513D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tlMWam8fM-RyDmfSTdMuRFgDUvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft
Manifest number: 19C1
Signing time: Tue 21 Jul 2026 17:00:25 +0000
Manifest this update: Tue 21 Jul 2026 17:00:25 +0000
Manifest next update: Wed 22 Jul 2026 17:00:25 +0000
Files and hashes: 1: 4GYkj_f2Nf46ovAbI9ICl-NUPNk.roa (hash: VIkjYJrRr/vUMXwmdH32EDSuoEreHbJ8GbvjfrFA1JI=)
2: HIq_BdqUCGatF2Rbj9NrkH9Ghjw.roa (hash: 8u28dk9o5BT41xzqo9yKmYyw/VKFKW4yRANeNy2FRA8=)
3: tlMWam8fM-RyDmfSTdMuRFgDUvA.crl (hash: lFRB8xlJ8PIjscdhlwt7NoBzSCGISXODOc5zbdiJ8iE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tlMWam8fM-RyDmfSTdMuRFgDUvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:9f:1f:26:da:46:04:60:ea:b4:8d:08:bb:06:51:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b653166a6f1f33e4720e67d24dd32e44580352f0
Validity
Not Before: Jul 21 17:00:25 2026 GMT
Not After : Jul 22 17:00:25 2026 GMT
Subject: CN=12b4a7b637ec6de3b65d3eb4d3c0acca43daeb97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:40:89:14:0c:67:28:e2:fa:27:ef:e2:f1:59:
30:64:89:16:28:af:b8:82:ad:44:48:25:83:30:6c:
f2:40:44:6c:e8:41:56:c1:f9:fb:09:54:c4:80:ac:
7f:88:c2:a4:50:f1:1e:b8:89:6a:35:90:fc:a2:0e:
e2:da:45:ed:7b:f0:65:75:b2:2c:20:5f:c0:4b:43:
6f:fe:64:8a:c9:c5:d6:d5:82:e3:9e:f2:bb:57:bd:
4d:53:19:8a:af:fb:5d:7b:1c:bb:a1:41:e5:55:55:
1e:fe:7e:1f:62:5c:14:f8:a4:25:ef:83:cc:3d:5c:
15:bd:e6:2a:30:a6:69:69:29:8e:99:34:91:43:cd:
a7:af:a8:25:fb:ef:d8:f5:6d:28:1e:9e:b1:67:08:
26:57:df:a5:b3:13:c5:fc:90:b9:26:98:fa:c7:d1:
ad:1e:85:62:e2:96:09:17:ba:04:46:10:19:c3:3d:
c6:01:a1:ad:af:66:4c:9a:28:9e:e1:56:3a:df:52:
67:ed:61:3c:23:23:91:b5:e3:30:82:3f:48:50:76:
5e:00:36:f2:07:91:6b:9b:62:a3:6e:8a:1f:47:15:
72:66:8d:91:c8:76:ff:e5:56:5b:a2:f9:c7:91:26:
8a:a3:ae:96:ad:d8:20:ae:c2:9d:35:d8:17:77:3a:
8f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:B4:A7:B6:37:EC:6D:E3:B6:5D:3E:B4:D3:C0:AC:CA:43:DA:EB:97
X509v3 Authority Key Identifier:
keyid:B6:53:16:6A:6F:1F:33:E4:72:0E:67:D2:4D:D3:2E:44:58:03:52:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tlMWam8fM-RyDmfSTdMuRFgDUvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:77:07:78:12:0a:58:f3:30:28:6c:82:1f:27:d3:aa:8c:3c:
5b:9e:a3:51:d3:27:a4:21:4d:94:2e:9b:3b:c2:5b:65:14:4e:
b9:11:0e:7b:c3:25:16:74:07:6b:a5:5c:b0:01:bf:ba:35:9f:
63:11:10:21:43:64:e5:2b:a4:65:02:53:a7:21:5e:c7:f9:07:
84:ac:b3:9a:80:95:f0:1a:24:30:98:3d:ad:02:0f:7d:c8:cc:
2a:87:03:c9:38:30:f0:0a:4c:3e:30:71:74:8b:aa:a7:91:f4:
6c:5b:06:99:2a:84:69:47:bf:37:bd:fe:a9:0e:82:8a:ad:1e:
27:cf:a2:77:47:b0:f9:1d:f6:e8:95:ab:e2:49:c1:7c:68:e5:
47:1a:6c:36:3d:56:3b:5e:3b:3b:34:b2:c5:6e:4e:5b:a2:41:
52:21:5f:fa:f1:55:93:bf:37:51:19:aa:6f:46:90:33:90:60:
45:17:76:67:ae:8c:10:a8:7f:4f:37:fe:47:32:5f:7b:3a:98:
96:d7:46:57:65:33:31:f3:72:b4:70:9e:0f:0b:06:df:42:fd:
64:f2:d4:81:f2:ee:31:a1:c1:6e:37:fd:a2:78:a3:11:9e:74:
64:eb:89:9a:09:44:07:06:56:9b:3a:d0:4b:62:55:3d:c1:b5:
7f:7c:09:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:37:59 2026 by rpki-client