
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/8b14a3-190f-41a4-b66c-bdf1ba08d5fe/1/tltl1ApY9eFCwAss67gU4XpNHM4.mft
File: tltl1ApY9eFCwAss67gU4XpNHM4.mft (raw, json)
Hash identifier: HXRGs02cE+zb+BN7DowO22o6dsnLxsMiu7M1tjPCRJk=
Subject key identifier: 74:83:9A:7B:0F:A9:E4:3F:1D:CC:7F:69:0B:BF:AD:A4:10:06:03:C4
Authority key identifier: B6:5B:65:D4:0A:58:F5:E1:42:C0:0B:2C:EB:B8:14:E1:7A:4D:1C:CE
Certificate issuer: /CN=b65b65d40a58f5e142c00b2cebb814e17a4d1cce
Certificate serial: 019EBFFF7848E1E2910C394F698DF90D1388
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tltl1ApY9eFCwAss67gU4XpNHM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/8b14a3-190f-41a4-b66c-bdf1ba08d5fe/1/tltl1ApY9eFCwAss67gU4XpNHM4.mft
Manifest number: 0173
Signing time: Sat 13 Jun 2026 08:00:51 +0000
Manifest this update: Sat 13 Jun 2026 08:00:51 +0000
Manifest next update: Sun 14 Jun 2026 08:00:51 +0000
Files and hashes: 1: LwZw57KRcsSlFCkevmi86lLELNg.roa (hash: GnI2zO7N9aow5t6/as/HPtUeoPLxUymlPVs+tJmlDwE=)
2: XjSNL--AGv2RohzwC7S-Qp8mmh0.roa (hash: clDhjF0Ylt17QbqIBE+8qKYkZ8/cSocUrgMK4Nq5Jzk=)
3: tltl1ApY9eFCwAss67gU4XpNHM4.crl (hash: 2epNqI/inDtHe4UoCt4YXYVuy6m2T/3kOyrWSm9lH84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/8b14a3-190f-41a4-b66c-bdf1ba08d5fe/1/tltl1ApY9eFCwAss67gU4XpNHM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/8b14a3-190f-41a4-b66c-bdf1ba08d5fe/1/tltl1ApY9eFCwAss67gU4XpNHM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tltl1ApY9eFCwAss67gU4XpNHM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:ff:78:48:e1:e2:91:0c:39:4f:69:8d:f9:0d:13:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b65b65d40a58f5e142c00b2cebb814e17a4d1cce
Validity
Not Before: Jun 13 08:00:51 2026 GMT
Not After : Jun 14 08:00:51 2026 GMT
Subject: CN=74839a7b0fa9e43f1dcc7f690bbfada4100603c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:79:38:45:03:62:06:61:5a:79:05:29:f1:1a:
f8:f9:08:d5:84:a8:4f:97:8a:2c:c4:37:03:b6:06:
b6:16:11:84:c5:2c:f2:49:4d:d4:b1:d5:03:75:85:
08:9b:2d:cd:ba:aa:e5:77:d3:5b:a5:cd:45:c3:52:
55:e5:ac:39:44:80:13:42:97:f3:ae:bd:2a:1a:ad:
d6:94:a6:36:83:7b:30:2f:09:12:bd:3c:0c:9d:cd:
60:be:0a:1c:97:9a:b1:39:30:a1:d4:75:16:21:24:
ca:bc:99:38:fd:b4:48:8b:b7:9a:e4:68:af:7a:22:
1f:53:fe:43:51:79:31:81:be:20:c7:61:d1:0a:01:
be:36:a2:44:3b:a1:6b:93:1b:41:9f:8f:ee:47:b8:
4a:df:a3:d7:3a:1a:d2:bb:0a:0b:72:34:54:ae:3a:
fd:4c:17:53:94:39:13:37:16:e0:9e:95:af:89:8e:
5a:c1:57:d5:09:4e:9a:ef:2d:31:7d:ca:f0:d4:f7:
34:14:c2:09:a7:de:b7:79:6e:19:f1:6a:7f:6c:54:
42:4d:51:cc:6c:c5:89:40:d1:82:11:ab:64:b9:42:
05:3b:29:96:99:cd:fa:3f:d0:e1:8d:64:41:3f:a3:
70:f0:fc:b4:60:78:b2:2f:4c:fd:e1:19:46:a4:65:
38:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:83:9A:7B:0F:A9:E4:3F:1D:CC:7F:69:0B:BF:AD:A4:10:06:03:C4
X509v3 Authority Key Identifier:
keyid:B6:5B:65:D4:0A:58:F5:E1:42:C0:0B:2C:EB:B8:14:E1:7A:4D:1C:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tltl1ApY9eFCwAss67gU4XpNHM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8b14a3-190f-41a4-b66c-bdf1ba08d5fe/1/tltl1ApY9eFCwAss67gU4XpNHM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8b14a3-190f-41a4-b66c-bdf1ba08d5fe/1/tltl1ApY9eFCwAss67gU4XpNHM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:e8:73:0b:db:b9:a0:d7:e0:ac:d3:2a:19:b8:e9:8b:63:1c:
80:34:9e:11:8b:fd:01:4e:8a:fd:58:e0:a5:fa:06:79:7e:a5:
41:72:55:c3:92:b0:35:38:a3:a6:04:61:07:0e:f0:dc:b1:3e:
30:b9:f9:58:98:64:97:81:e3:3f:32:6d:df:a7:da:9f:e7:2b:
f9:25:fa:3d:42:c4:ad:5b:d1:45:d0:8d:bd:4e:89:c5:fc:79:
2d:f0:8c:5c:eb:5c:86:39:6a:76:d0:63:8c:4b:51:57:71:7e:
e5:55:8e:71:10:af:49:2f:23:0d:af:f3:36:bd:39:06:f1:88:
fa:0f:47:0d:06:63:5f:96:a2:1a:61:4d:33:a7:d6:a1:84:26:
2c:e9:55:5a:bc:03:e0:56:91:47:6a:45:34:cf:04:20:a2:90:
22:6b:b2:1d:8c:c8:73:81:af:12:e4:88:d8:de:cc:a3:a5:92:
a9:f8:6b:54:51:36:9d:17:78:33:4e:0f:be:5c:1e:37:91:5c:
24:59:b0:9c:72:a6:b4:47:a2:43:d9:e8:01:1c:6e:ad:32:f8:
55:9d:61:67:2a:06:af:42:52:6f:9c:ca:3b:ae:57:83:0a:d8:
af:b5:6c:93:8a:da:55:12:37:8c:9e:de:8d:96:da:68:6a:54:
cd:a9:3e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:41:52 2026 by rpki-client