Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/8b14a3-190f-41a4-b66c-bdf1ba08d5fe/1/tltl1ApY9eFCwAss67gU4XpNHM4.mft
File: tltl1ApY9eFCwAss67gU4XpNHM4.mft (raw, json)
Hash identifier: z0dAgqeKfOjCp7VeWjY69FqWNMNdxMI5znahCEkv42M=
Subject key identifier: E0:5B:9E:D8:04:52:04:C9:05:98:A0:7F:56:22:67:DF:8D:79:D9:33
Authority key identifier: B6:5B:65:D4:0A:58:F5:E1:42:C0:0B:2C:EB:B8:14:E1:7A:4D:1C:CE
Certificate issuer: /CN=b65b65d40a58f5e142c00b2cebb814e17a4d1cce
Certificate serial: 019D9E51D1500C6FA982BBA1DBB4950461BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tltl1ApY9eFCwAss67gU4XpNHM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/8b14a3-190f-41a4-b66c-bdf1ba08d5fe/1/tltl1ApY9eFCwAss67gU4XpNHM4.mft
Manifest number: DD
Signing time: Sat 18 Apr 2026 02:00:55 +0000
Manifest this update: Sat 18 Apr 2026 02:00:55 +0000
Manifest next update: Sun 19 Apr 2026 02:00:55 +0000
Files and hashes: 1: LwZw57KRcsSlFCkevmi86lLELNg.roa (hash: GnI2zO7N9aow5t6/as/HPtUeoPLxUymlPVs+tJmlDwE=)
2: XjSNL--AGv2RohzwC7S-Qp8mmh0.roa (hash: clDhjF0Ylt17QbqIBE+8qKYkZ8/cSocUrgMK4Nq5Jzk=)
3: tltl1ApY9eFCwAss67gU4XpNHM4.crl (hash: 60IhMjYSIi4+o7vJ5Yk8TWsHW4+/Y/2uPC4X0Dz3gdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/8b14a3-190f-41a4-b66c-bdf1ba08d5fe/1/tltl1ApY9eFCwAss67gU4XpNHM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/8b14a3-190f-41a4-b66c-bdf1ba08d5fe/1/tltl1ApY9eFCwAss67gU4XpNHM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tltl1ApY9eFCwAss67gU4XpNHM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9e:51:d1:50:0c:6f:a9:82:bb:a1:db:b4:95:04:61:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b65b65d40a58f5e142c00b2cebb814e17a4d1cce
Validity
Not Before: Apr 18 02:00:55 2026 GMT
Not After : Apr 19 02:00:55 2026 GMT
Subject: CN=e05b9ed8045204c90598a07f562267df8d79d933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:02:f0:44:d3:e5:dc:2f:8a:b5:67:6c:0e:88:
78:a8:20:33:22:01:82:62:07:f3:15:02:d1:79:15:
97:27:92:17:62:46:9a:d1:72:0f:f5:e6:db:49:0f:
0f:ab:fb:7a:37:b7:96:91:66:35:38:8f:7e:01:5c:
fb:2e:a9:1b:3e:94:b4:29:91:62:aa:2c:ff:70:37:
76:39:b4:33:70:86:0b:93:34:07:9c:42:97:85:7b:
54:6f:b6:96:39:16:2c:60:4c:19:98:51:c3:6a:4b:
be:a3:30:bc:8a:df:3c:cc:f3:43:54:f5:a8:f0:bd:
03:dd:a8:1d:1f:ba:4e:bc:4b:58:50:c1:d3:cd:d2:
f7:57:a2:26:7c:b0:4b:7f:29:06:d0:8d:b5:fc:16:
48:7f:5d:b6:8c:e0:fd:90:1e:77:91:a2:35:82:58:
f3:15:ed:73:38:54:f8:85:02:43:2b:84:19:e4:ff:
a3:55:b6:dc:b5:1b:c7:7b:d4:36:91:0b:39:6c:5a:
04:64:08:d2:a6:1e:8a:2f:cb:51:fe:43:9e:bf:ad:
26:84:f6:00:b0:e9:13:7a:5b:a5:ed:6c:58:21:51:
38:09:79:45:9e:e4:89:c3:18:cd:a7:11:75:5e:20:
53:dd:7a:be:d5:97:44:e8:01:33:f4:fc:7e:a4:aa:
9a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:5B:9E:D8:04:52:04:C9:05:98:A0:7F:56:22:67:DF:8D:79:D9:33
X509v3 Authority Key Identifier:
keyid:B6:5B:65:D4:0A:58:F5:E1:42:C0:0B:2C:EB:B8:14:E1:7A:4D:1C:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tltl1ApY9eFCwAss67gU4XpNHM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8b14a3-190f-41a4-b66c-bdf1ba08d5fe/1/tltl1ApY9eFCwAss67gU4XpNHM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8b14a3-190f-41a4-b66c-bdf1ba08d5fe/1/tltl1ApY9eFCwAss67gU4XpNHM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:73:ba:3d:68:56:28:71:17:2f:86:b4:b5:6b:2c:64:9a:c1:
9a:0e:eb:71:74:e7:84:57:cf:7c:9f:03:84:9d:74:91:72:32:
f7:c5:3f:81:e6:f2:37:2a:8d:7b:f9:27:26:0d:cd:2f:e5:3e:
23:5a:fd:9e:dd:bb:73:98:3b:bb:f9:79:00:4a:fd:28:03:73:
7c:72:54:23:c2:5a:90:6e:11:a2:ef:0f:74:fc:1b:a2:28:98:
e1:99:38:8a:67:e0:68:9f:89:57:c1:12:12:ef:d0:c7:ff:03:
1e:ed:62:09:81:61:d6:bf:db:a4:87:65:85:07:29:f7:3b:72:
bd:e1:64:a9:2d:6c:bb:24:02:8f:4a:66:b8:ee:c1:2f:b0:3d:
d4:57:65:fd:2d:d7:10:bf:90:1a:0e:d2:fb:b1:88:99:60:8e:
bb:63:33:7b:ff:29:c6:45:4a:54:6d:9c:a3:b2:cd:6c:c4:89:
97:1e:0b:e9:15:85:7f:70:70:7e:13:26:e4:11:cc:95:70:5f:
b8:68:37:5d:33:1f:3a:03:fa:f7:0e:dc:71:b5:f1:63:66:dc:
5d:2f:da:fc:af:c2:47:cc:ba:23:a7:42:1b:e0:80:de:73:e4:
a3:9f:d8:f3:46:b9:a8:1a:95:09:98:66:15:e0:48:3e:b1:fc:
0c:5d:6a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 05:36:38 2026 by rpki-client