Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft
File: tlMWam8fM-RyDmfSTdMuRFgDUvA.mft (raw, json)
Hash identifier: TmS+7rMvsEEOVwHY++IKxeSG9mNy5v5ZzjUGUBwqjgI=
Subject key identifier: 70:89:4C:BF:0E:DE:4A:65:C2:F5:27:44:1D:7E:67:B7:F2:A1:90:BD
Authority key identifier: B6:53:16:6A:6F:1F:33:E4:72:0E:67:D2:4D:D3:2E:44:58:03:52:F0
Certificate issuer: /CN=b653166a6f1f33e4720e67d24dd32e44580352f0
Certificate serial: 01A18D1D22E4DECB584E6DD3751ED15CEBA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tlMWam8fM-RyDmfSTdMuRFgDUvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft
Manifest number: 1ACE
Signing time: Fri 30 Oct 2026 14:00:59 +0000
Manifest this update: Fri 30 Oct 2026 14:00:59 +0000
Manifest next update: Sat 31 Oct 2026 14:00:59 +0000
Files and hashes: 1: 4GYkj_f2Nf46ovAbI9ICl-NUPNk.roa (hash: VIkjYJrRr/vUMXwmdH32EDSuoEreHbJ8GbvjfrFA1JI=)
2: HIq_BdqUCGatF2Rbj9NrkH9Ghjw.roa (hash: 8u28dk9o5BT41xzqo9yKmYyw/VKFKW4yRANeNy2FRA8=)
3: tlMWam8fM-RyDmfSTdMuRFgDUvA.crl (hash: Ekg4zTK82+i0HVZaaQPM+XaS/q1d2ekOsBu1NzF3sN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tlMWam8fM-RyDmfSTdMuRFgDUvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 08:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8d:1d:22:e4:de:cb:58:4e:6d:d3:75:1e:d1:5c:eb:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b653166a6f1f33e4720e67d24dd32e44580352f0
Validity
Not Before: Oct 30 14:00:59 2026 GMT
Not After : Oct 31 14:00:59 2026 GMT
Subject: CN=70894cbf0ede4a65c2f527441d7e67b7f2a190bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a2:82:3b:39:36:c1:49:07:b5:f2:86:f4:76:
7a:7b:dc:66:19:fd:bb:32:c0:4c:cb:a7:a3:df:2a:
5c:2c:1e:eb:f7:2e:6d:b0:68:f3:a9:fa:c9:53:05:
7f:7c:d7:9c:ea:75:46:fe:13:fd:b2:cc:70:70:c6:
a9:bc:0d:d6:dc:95:5b:28:8c:ed:48:37:80:2f:dc:
cf:7d:ab:fd:4e:4b:20:7e:ae:d7:10:54:a9:59:59:
20:8a:70:30:cb:3a:12:e6:79:aa:1a:2b:1e:07:35:
7f:33:69:e3:fc:cd:21:20:b9:f9:50:19:b5:f8:59:
24:80:b0:4c:d2:75:2d:65:a4:f4:d6:e8:5e:cd:38:
6d:94:3d:b0:de:d7:eb:0a:d7:1f:0c:f3:c9:d6:67:
3a:4b:81:54:6c:81:36:70:40:0d:d8:df:f5:a4:fd:
e4:1d:1b:43:83:a1:18:ea:e4:c9:a2:d5:d5:e6:4d:
f7:bf:23:37:4e:42:7d:4c:74:c4:3e:5f:c1:cb:ef:
cd:99:95:b7:25:f5:df:11:9b:11:ad:93:e6:2d:34:
cd:8c:1d:be:cb:5f:e0:7a:f0:cf:c2:2b:8b:79:26:
75:94:bb:ac:4b:e1:b1:7f:cb:ab:76:e4:7b:66:eb:
c3:d9:1f:6c:8d:3f:eb:5d:ae:f3:9b:d3:a8:17:69:
51:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:89:4C:BF:0E:DE:4A:65:C2:F5:27:44:1D:7E:67:B7:F2:A1:90:BD
X509v3 Authority Key Identifier:
keyid:B6:53:16:6A:6F:1F:33:E4:72:0E:67:D2:4D:D3:2E:44:58:03:52:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tlMWam8fM-RyDmfSTdMuRFgDUvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:e7:ee:4c:01:e8:f1:47:c0:4c:a1:56:09:f3:0c:77:39:e4:
dd:ec:d3:49:7b:e4:ec:4b:f2:0e:7e:07:c5:ab:82:d7:11:95:
ad:1b:21:5a:0c:ab:95:de:7e:74:83:a6:0b:ae:db:99:64:b4:
77:21:78:9d:fa:81:4e:26:a6:40:a6:ea:1f:84:c9:14:28:02:
14:d1:b5:e3:f9:e9:e5:17:39:cd:6d:6b:0b:96:be:35:b0:ff:
a5:a3:cc:3c:a6:cc:15:28:6f:6e:84:9c:f8:d2:0c:cb:ae:19:
5f:d1:09:71:8d:f7:7b:8e:82:db:27:65:56:4c:67:f0:58:c0:
57:d4:d6:92:ce:7d:38:8b:8c:6e:72:0e:b4:a9:8c:82:f1:fc:
13:b6:bd:6e:69:5e:fa:87:5b:8b:be:1a:70:b1:18:8a:e5:e0:
73:2d:13:23:a1:29:8e:9d:ab:5e:11:dd:92:31:a3:69:00:fd:
ec:d4:da:9d:f4:ea:35:9c:0e:f8:45:79:56:5f:59:36:43:8f:
0f:f9:88:38:a8:d3:16:84:5d:55:2d:3f:bc:1d:5f:c7:ef:d6:
7e:56:38:6b:ee:74:4a:93:3d:28:30:cf:06:63:b9:68:4f:ef:
25:8e:7f:39:d9:58:00:10:f9:9d:54:d8:50:f3:60:9e:29:ee:
72:38:3f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 18:04:19 2026 by rpki-client