Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/e2aac5-c04d-4ae0-8bf3-9e3d89d9e617/1/TLIktT7JyLF_MYlbFqjUVx8OaXA.mft
File: TLIktT7JyLF_MYlbFqjUVx8OaXA.mft (raw, json)
Hash identifier: EK8X9IdluWKoZ7xzLtyc6Ij/xRgroptfsXNCQ+dIjiA=
Subject key identifier: 76:86:3D:69:ED:AF:71:DA:F4:67:36:09:4A:8B:B6:D6:69:B7:E7:95
Authority key identifier: 4C:B2:24:B5:3E:C9:C8:B1:7F:31:89:5B:16:A8:D4:57:1F:0E:69:70
Certificate issuer: /CN=4cb224b53ec9c8b17f31895b16a8d4571f0e6970
Certificate serial: 019D38D3838085A0CDBD00EE43F58B5EDF0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TLIktT7JyLF_MYlbFqjUVx8OaXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/e2aac5-c04d-4ae0-8bf3-9e3d89d9e617/1/TLIktT7JyLF_MYlbFqjUVx8OaXA.mft
Manifest number: 062A
Signing time: Sun 29 Mar 2026 09:01:18 +0000
Manifest this update: Sun 29 Mar 2026 09:01:18 +0000
Manifest next update: Mon 30 Mar 2026 09:01:18 +0000
Files and hashes: 1: OmNYh4uARDq1ZHJac3Gy8m3tuys.roa (hash: FCrDfeFT2pJ/Q6YRp1wjXdR8Urjp7+4nxbesJ1y96Mg=)
2: TLIktT7JyLF_MYlbFqjUVx8OaXA.crl (hash: 2qD9b8WGLAmbooMX6Mey5cyQxe5QAfUwK8QdL/VbRqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/e2aac5-c04d-4ae0-8bf3-9e3d89d9e617/1/TLIktT7JyLF_MYlbFqjUVx8OaXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/e2aac5-c04d-4ae0-8bf3-9e3d89d9e617/1/TLIktT7JyLF_MYlbFqjUVx8OaXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TLIktT7JyLF_MYlbFqjUVx8OaXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:83:80:85:a0:cd:bd:00:ee:43:f5:8b:5e:df:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cb224b53ec9c8b17f31895b16a8d4571f0e6970
Validity
Not Before: Mar 29 09:01:18 2026 GMT
Not After : Mar 30 09:01:18 2026 GMT
Subject: CN=76863d69edaf71daf46736094a8bb6d669b7e795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1f:e8:16:c9:52:fa:27:34:9c:7a:d7:86:14:
86:e3:7e:f1:24:72:7f:e6:be:ed:84:a5:8e:1d:c2:
e3:91:a6:94:6f:59:a0:94:eb:ce:03:4d:b8:ed:f3:
05:7d:21:9e:48:b3:83:98:5e:4e:0a:0b:2a:35:13:
e7:6e:f5:65:c2:e6:e0:69:ea:0c:c7:68:96:6f:76:
e7:6e:b0:0e:62:54:26:68:61:32:fa:69:46:ca:e6:
25:ab:97:a4:5a:81:66:28:8d:a8:13:bc:e1:01:6c:
ec:dd:2d:44:b7:80:96:c0:59:07:09:24:7e:8a:c5:
4d:29:9f:fe:6d:9e:62:ec:9f:a1:42:f7:be:bf:bd:
fd:64:b2:d9:fe:a3:ff:ce:01:9f:22:00:b5:93:20:
bc:17:d4:af:6c:79:6e:ea:87:2b:78:73:26:16:fd:
e6:c2:f0:23:4d:d1:f4:33:cc:e5:4e:05:73:f0:18:
62:5b:fe:bd:53:ac:82:d1:a4:27:2a:a8:5a:00:cb:
15:94:c8:16:a2:8a:ad:fe:4d:e0:3c:69:9b:32:92:
1e:a4:76:8a:41:11:21:c6:f0:0e:35:92:ae:35:5c:
38:40:75:33:5d:ce:c7:26:0b:ad:76:d0:83:8d:4d:
06:5b:8b:5e:f3:f2:82:32:1a:7b:24:40:69:97:f3:
3a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:86:3D:69:ED:AF:71:DA:F4:67:36:09:4A:8B:B6:D6:69:B7:E7:95
X509v3 Authority Key Identifier:
keyid:4C:B2:24:B5:3E:C9:C8:B1:7F:31:89:5B:16:A8:D4:57:1F:0E:69:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TLIktT7JyLF_MYlbFqjUVx8OaXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/e2aac5-c04d-4ae0-8bf3-9e3d89d9e617/1/TLIktT7JyLF_MYlbFqjUVx8OaXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/e2aac5-c04d-4ae0-8bf3-9e3d89d9e617/1/TLIktT7JyLF_MYlbFqjUVx8OaXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:7e:76:da:ac:ed:1e:4d:08:12:7a:98:c5:29:0e:6b:a4:e9:
f0:7e:d6:cf:f4:fa:49:cb:9b:c7:25:a3:56:58:29:26:b0:d1:
44:75:11:45:0a:ac:5a:3c:a8:88:ff:d9:bd:db:0b:2b:8f:8f:
5b:b6:d7:d5:5a:eb:c4:b7:b8:21:7a:30:da:fd:f3:42:82:f8:
b7:fb:3f:ed:be:17:05:bf:9f:20:ee:12:e4:32:b0:73:73:53:
7f:d8:63:06:76:80:a7:51:9b:35:f7:24:47:05:34:36:75:ac:
dc:50:53:1c:ee:7a:32:dc:33:c7:e8:e3:ed:90:e3:39:f5:53:
b9:8a:e0:05:8c:36:24:46:60:3c:b7:e8:29:92:94:8f:10:c5:
ca:ed:61:e7:c0:3c:b9:dc:52:89:a4:d6:f1:fa:fb:23:1b:12:
95:c2:c2:fd:07:d0:f3:9c:02:e0:e6:b3:f8:a7:b2:95:72:9f:
82:ac:4c:d2:ed:91:82:a3:5f:5a:82:1f:67:42:44:ef:64:25:
fe:bf:d0:a5:30:3f:5c:34:45:0b:b3:c1:40:fa:9a:c2:cc:4c:
33:51:84:35:15:35:27:a2:65:4f:00:65:83:f5:d0:b5:f7:f6:
8b:91:84:49:c8:76:42:83:94:9a:c0:34:5e:f7:3c:f9:ad:16:
02:ec:d3:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:23:58 2026 by rpki-client