Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/8b14a3-190f-41a4-b66c-bdf1ba08d5fe/1/tltl1ApY9eFCwAss67gU4XpNHM4.mft
File: tltl1ApY9eFCwAss67gU4XpNHM4.mft (raw, json)
Hash identifier: lTFwngs1/Sx+uyeS/SO/UFC8rJEBNekQDCiILgCpMD0=
Subject key identifier: 23:8B:62:56:42:CF:6F:CC:B4:49:BD:5F:22:C1:92:B4:76:F4:38:74
Authority key identifier: B6:5B:65:D4:0A:58:F5:E1:42:C0:0B:2C:EB:B8:14:E1:7A:4D:1C:CE
Certificate issuer: /CN=b65b65d40a58f5e142c00b2cebb814e17a4d1cce
Certificate serial: 019FA9AC54FF8BF3C3ECF60AA65E6602CD55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tltl1ApY9eFCwAss67gU4XpNHM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/8b14a3-190f-41a4-b66c-bdf1ba08d5fe/1/tltl1ApY9eFCwAss67gU4XpNHM4.mft
Manifest number: 01EC
Signing time: Tue 28 Jul 2026 17:01:11 +0000
Manifest this update: Tue 28 Jul 2026 17:01:11 +0000
Manifest next update: Wed 29 Jul 2026 17:01:11 +0000
Files and hashes: 1: LwZw57KRcsSlFCkevmi86lLELNg.roa (hash: GnI2zO7N9aow5t6/as/HPtUeoPLxUymlPVs+tJmlDwE=)
2: XjSNL--AGv2RohzwC7S-Qp8mmh0.roa (hash: clDhjF0Ylt17QbqIBE+8qKYkZ8/cSocUrgMK4Nq5Jzk=)
3: tltl1ApY9eFCwAss67gU4XpNHM4.crl (hash: 1jLJ5Vtt+7P0eO6Y2+r7hA6uquuIfThp8VzBv18lWvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/8b14a3-190f-41a4-b66c-bdf1ba08d5fe/1/tltl1ApY9eFCwAss67gU4XpNHM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/8b14a3-190f-41a4-b66c-bdf1ba08d5fe/1/tltl1ApY9eFCwAss67gU4XpNHM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tltl1ApY9eFCwAss67gU4XpNHM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ac:54:ff:8b:f3:c3:ec:f6:0a:a6:5e:66:02:cd:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b65b65d40a58f5e142c00b2cebb814e17a4d1cce
Validity
Not Before: Jul 28 17:01:11 2026 GMT
Not After : Jul 29 17:01:11 2026 GMT
Subject: CN=238b625642cf6fccb449bd5f22c192b476f43874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e7:9e:8f:aa:10:86:0d:fe:16:95:69:22:ad:
03:f4:51:fa:09:ab:6f:33:81:78:23:63:ec:aa:c6:
19:a5:57:c9:6c:f8:ee:bc:5b:ae:c7:59:89:02:31:
df:91:a2:6d:67:c4:7a:4a:f1:f6:ac:78:23:de:38:
7a:59:5d:85:bf:db:88:3a:39:fb:71:70:8d:15:97:
67:1a:75:7c:5b:1e:fd:4e:41:d2:14:6e:ff:c0:65:
9b:17:fa:1b:50:9b:22:b7:78:67:0c:7f:58:0e:4e:
ff:2a:58:bd:f6:ab:76:aa:0d:02:fb:c5:7a:24:a5:
5d:b7:45:91:fa:26:6c:ec:62:48:37:24:de:13:2e:
60:3a:76:61:fa:1a:af:03:6e:57:e0:e6:4c:98:78:
ba:80:d2:7b:d4:1c:76:9d:6b:ca:59:8f:8e:dd:f3:
67:c0:6c:95:4c:0c:18:f3:cb:2a:aa:98:bc:93:b3:
21:38:40:8d:7b:ee:7d:2e:c2:67:5f:78:86:25:90:
c1:b5:cf:d1:35:5d:88:d0:87:e5:05:cc:15:58:d1:
41:3b:bc:87:25:ea:05:6d:f2:25:04:82:1e:d3:f8:
2c:b0:22:4e:1b:c0:c2:bf:31:ed:15:a0:ec:74:fb:
97:23:5d:43:ad:b0:35:9c:2e:e5:2d:b1:fd:b1:8f:
48:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:8B:62:56:42:CF:6F:CC:B4:49:BD:5F:22:C1:92:B4:76:F4:38:74
X509v3 Authority Key Identifier:
keyid:B6:5B:65:D4:0A:58:F5:E1:42:C0:0B:2C:EB:B8:14:E1:7A:4D:1C:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tltl1ApY9eFCwAss67gU4XpNHM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8b14a3-190f-41a4-b66c-bdf1ba08d5fe/1/tltl1ApY9eFCwAss67gU4XpNHM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8b14a3-190f-41a4-b66c-bdf1ba08d5fe/1/tltl1ApY9eFCwAss67gU4XpNHM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:15:46:25:1d:7f:70:35:1a:28:74:4a:a5:ea:fb:49:aa:ef:
6e:3e:3b:2f:7d:ba:95:f2:ce:9b:29:94:6a:cd:ae:dc:3c:2a:
0e:77:93:38:d4:0b:b3:24:e6:11:bf:00:23:3e:98:f9:b8:2b:
14:fe:1d:07:c3:c4:75:48:c6:06:9e:b1:a4:27:ca:2d:56:74:
74:39:8f:ff:c9:fd:7d:8a:8a:10:13:a6:4b:57:c7:65:d0:fe:
0d:8a:06:02:99:aa:52:2c:27:c8:22:f1:c8:9c:ed:7a:d0:99:
75:59:dc:90:00:f6:4f:e2:1a:31:1f:2e:ae:2a:00:e7:1f:ea:
8e:df:7e:0c:1a:27:c4:c3:34:39:c2:db:98:d3:70:d2:b8:9f:
1f:47:ff:e2:4c:d3:e7:2b:bd:4f:cf:4f:f7:ae:93:78:24:1a:
eb:bd:9c:39:08:41:fa:1d:da:b8:73:93:ad:2a:b1:db:a9:09:
b1:89:02:be:84:93:7f:38:a8:77:c2:40:09:87:8b:6b:3f:16:
38:fc:84:b5:78:74:64:2f:f9:43:5f:dd:51:31:14:75:80:d4:
95:f9:91:23:f1:30:55:a8:3d:fc:d6:4f:fb:f9:4a:a1:69:52:
71:20:5a:79:19:81:f6:da:dc:94:9b:36:98:22:be:45:68:08:
ad:ad:b9:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:43:01 2026 by rpki-client