Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/8b14a3-190f-41a4-b66c-bdf1ba08d5fe/1/tltl1ApY9eFCwAss67gU4XpNHM4.mft
File: tltl1ApY9eFCwAss67gU4XpNHM4.mft (raw, json)
Hash identifier: 8jbALMU94/QfqifEGveDfb88QC7BRtX3vmR3x9Qwc0k=
Subject key identifier: D3:32:09:21:C9:C4:F2:70:C0:BF:16:54:74:72:76:64:25:5E:7C:00
Authority key identifier: B6:5B:65:D4:0A:58:F5:E1:42:C0:0B:2C:EB:B8:14:E1:7A:4D:1C:CE
Certificate issuer: /CN=b65b65d40a58f5e142c00b2cebb814e17a4d1cce
Certificate serial: 01A0C96B7E507FEA2931E6979B01B9633692
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tltl1ApY9eFCwAss67gU4XpNHM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/8b14a3-190f-41a4-b66c-bdf1ba08d5fe/1/tltl1ApY9eFCwAss67gU4XpNHM4.mft
Manifest number: 0281
Signing time: Tue 22 Sep 2026 14:01:00 +0000
Manifest this update: Tue 22 Sep 2026 14:01:00 +0000
Manifest next update: Wed 23 Sep 2026 14:01:00 +0000
Files and hashes: 1: LwZw57KRcsSlFCkevmi86lLELNg.roa (hash: GnI2zO7N9aow5t6/as/HPtUeoPLxUymlPVs+tJmlDwE=)
2: XjSNL--AGv2RohzwC7S-Qp8mmh0.roa (hash: clDhjF0Ylt17QbqIBE+8qKYkZ8/cSocUrgMK4Nq5Jzk=)
3: tltl1ApY9eFCwAss67gU4XpNHM4.crl (hash: KM9IdHsGqigBG4cGBk8CdLKY1cLppYCLZSc/U1OfHrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/8b14a3-190f-41a4-b66c-bdf1ba08d5fe/1/tltl1ApY9eFCwAss67gU4XpNHM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/8b14a3-190f-41a4-b66c-bdf1ba08d5fe/1/tltl1ApY9eFCwAss67gU4XpNHM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tltl1ApY9eFCwAss67gU4XpNHM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:6b:7e:50:7f:ea:29:31:e6:97:9b:01:b9:63:36:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b65b65d40a58f5e142c00b2cebb814e17a4d1cce
Validity
Not Before: Sep 22 14:01:00 2026 GMT
Not After : Sep 23 14:01:00 2026 GMT
Subject: CN=d3320921c9c4f270c0bf165474727664255e7c00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1a:95:d4:35:16:84:b2:44:b0:bc:05:67:5c:
e8:27:b8:0f:36:e4:d3:f5:e7:21:5c:57:82:e2:6a:
ae:43:aa:59:1c:1b:79:26:1c:f5:83:c6:6f:9c:26:
12:b9:fa:16:29:ad:1d:33:59:7b:b3:9c:73:a3:a5:
89:f6:0c:df:28:fb:68:87:3a:ce:06:a5:90:c3:97:
ec:b1:2e:f4:b1:24:4c:24:96:b6:c8:8a:a3:b7:85:
37:db:27:92:80:71:0a:cd:a0:e5:17:76:e6:a0:00:
c4:3a:c6:3d:e5:60:80:d8:b7:d5:9e:92:db:4f:a2:
45:ec:6d:03:1a:94:f8:39:af:e9:70:f7:1f:80:09:
96:ec:c8:a7:52:08:88:5c:1f:27:16:89:1e:87:62:
f5:4e:b9:e4:e9:3a:b9:4d:72:1c:0d:4d:9c:1e:14:
09:97:14:b5:70:61:aa:d5:b0:a7:04:b3:18:09:a7:
54:b1:76:a0:71:15:4f:88:36:80:6e:18:53:60:e9:
46:a7:68:22:7b:2d:f4:70:b8:be:c4:7e:1d:2c:78:
f7:68:89:ca:e1:ee:82:cf:72:79:f1:66:18:c8:bb:
01:91:35:73:cd:32:ff:d7:1f:07:25:be:0f:72:3d:
db:79:e9:6b:3b:2f:6a:e5:18:29:52:a6:3d:12:58:
94:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:32:09:21:C9:C4:F2:70:C0:BF:16:54:74:72:76:64:25:5E:7C:00
X509v3 Authority Key Identifier:
keyid:B6:5B:65:D4:0A:58:F5:E1:42:C0:0B:2C:EB:B8:14:E1:7A:4D:1C:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tltl1ApY9eFCwAss67gU4XpNHM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8b14a3-190f-41a4-b66c-bdf1ba08d5fe/1/tltl1ApY9eFCwAss67gU4XpNHM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8b14a3-190f-41a4-b66c-bdf1ba08d5fe/1/tltl1ApY9eFCwAss67gU4XpNHM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:1a:82:96:7c:6f:86:c8:fe:4f:17:bc:38:d9:df:cc:cb:25:
91:96:bc:09:b0:32:1b:67:26:fd:76:af:e1:47:58:1f:82:1c:
b9:58:d9:17:bc:98:68:e8:71:66:3f:8b:a4:2a:6b:96:d9:6d:
b2:97:77:e9:78:37:87:fb:74:e2:d5:e2:cc:8e:4d:f1:cc:ca:
84:1f:7d:c8:83:55:a5:e8:9a:44:c5:ff:b2:3e:89:69:3a:3c:
85:1d:07:41:6b:3e:d7:16:60:cc:fe:24:94:62:8d:93:e7:b6:
01:e8:eb:b6:6e:29:63:76:c5:1e:e0:dd:62:a8:6f:e4:c6:21:
03:a5:a6:ba:30:d9:ea:99:5c:ba:7d:41:df:0d:04:0f:1f:74:
13:3e:46:04:49:bf:e3:78:f4:94:ff:29:a7:f4:b6:16:cf:3b:
83:b2:b4:3b:9c:71:02:b7:b8:28:0d:e8:12:ea:7b:f7:10:2c:
89:04:83:9d:dc:89:da:57:f8:de:0e:9b:4a:1c:08:eb:9b:b4:
4b:1c:ac:0f:b5:39:66:42:33:34:c6:13:3a:f2:c1:6e:89:be:
b4:6d:cc:61:1e:ee:e1:6d:c9:cf:4f:c1:cd:2a:84:5b:cd:7e:
43:2b:8f:d9:77:ca:e2:d5:e4:ef:1a:b9:dc:26:d3:f0:95:5f:
4e:6e:a6:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:42:20 2026 by rpki-client