Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/8b14a3-190f-41a4-b66c-bdf1ba08d5fe/1/tltl1ApY9eFCwAss67gU4XpNHM4.mft
File: tltl1ApY9eFCwAss67gU4XpNHM4.mft (raw, json)
Hash identifier: p7iFhA6zqAGixQ2UMWc+HZ7Gp7R+1QmG2DkOscoukVw=
Subject key identifier: AB:4E:5E:0B:B5:B2:A5:5E:85:90:9E:75:8E:13:66:D2:30:2F:A2:30
Authority key identifier: B6:5B:65:D4:0A:58:F5:E1:42:C0:0B:2C:EB:B8:14:E1:7A:4D:1C:CE
Certificate issuer: /CN=b65b65d40a58f5e142c00b2cebb814e17a4d1cce
Certificate serial: 019CACEBDC2AC52AA8CFA94A4123E3007626
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tltl1ApY9eFCwAss67gU4XpNHM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/8b14a3-190f-41a4-b66c-bdf1ba08d5fe/1/tltl1ApY9eFCwAss67gU4XpNHM4.mft
Manifest number: 60
Signing time: Mon 02 Mar 2026 05:01:04 +0000
Manifest this update: Mon 02 Mar 2026 05:01:04 +0000
Manifest next update: Tue 03 Mar 2026 05:01:04 +0000
Files and hashes: 1: LwZw57KRcsSlFCkevmi86lLELNg.roa (hash: GnI2zO7N9aow5t6/as/HPtUeoPLxUymlPVs+tJmlDwE=)
2: XjSNL--AGv2RohzwC7S-Qp8mmh0.roa (hash: clDhjF0Ylt17QbqIBE+8qKYkZ8/cSocUrgMK4Nq5Jzk=)
3: tltl1ApY9eFCwAss67gU4XpNHM4.crl (hash: Q8DCMmMIbPXVP2hJUmwOEUwDa157Zd3VXe3nmJX+8pI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/8b14a3-190f-41a4-b66c-bdf1ba08d5fe/1/tltl1ApY9eFCwAss67gU4XpNHM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/8b14a3-190f-41a4-b66c-bdf1ba08d5fe/1/tltl1ApY9eFCwAss67gU4XpNHM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tltl1ApY9eFCwAss67gU4XpNHM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:dc:2a:c5:2a:a8:cf:a9:4a:41:23:e3:00:76:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b65b65d40a58f5e142c00b2cebb814e17a4d1cce
Validity
Not Before: Mar 2 05:01:04 2026 GMT
Not After : Mar 3 05:01:04 2026 GMT
Subject: CN=ab4e5e0bb5b2a55e85909e758e1366d2302fa230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:dc:cd:f4:53:94:04:0c:b7:21:63:b7:8e:9d:
a1:01:e3:88:a6:64:f8:00:0f:48:cc:d0:aa:cf:35:
52:db:13:ce:f1:a6:f3:a6:b2:33:10:71:7d:b0:53:
9a:30:9d:9a:b4:59:bf:8f:ca:14:f1:18:ae:a5:cf:
3d:eb:0a:40:e1:03:c6:38:4f:b2:e3:20:b8:52:2e:
62:01:86:85:17:d3:fa:9f:13:4b:f0:42:32:44:d2:
71:64:52:64:a4:13:33:ee:7c:b3:17:58:83:eb:fb:
5c:2a:40:50:3d:7c:b8:a3:19:89:07:fa:ac:35:e2:
21:eb:29:90:5a:34:94:96:ce:50:30:32:43:3b:66:
f3:99:21:ef:4d:37:71:07:14:bb:ca:57:98:5a:dd:
9d:3a:6b:b9:2f:ce:4f:43:bf:bd:c1:f2:9e:ad:89:
d4:48:42:5f:1f:c7:9b:0d:90:e2:90:a8:34:ee:30:
ba:70:ad:b3:70:e1:33:f2:d6:fb:6e:84:aa:76:53:
8f:1a:df:1b:a2:51:28:8e:65:92:48:41:18:3d:93:
de:c3:b6:9b:45:05:17:e4:8a:53:df:8f:40:b7:71:
fa:dc:55:1f:4d:09:81:bc:16:e8:1b:4a:e3:25:d8:
86:ec:98:92:d4:7b:35:2c:8f:db:c9:12:d7:02:1c:
de:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:4E:5E:0B:B5:B2:A5:5E:85:90:9E:75:8E:13:66:D2:30:2F:A2:30
X509v3 Authority Key Identifier:
keyid:B6:5B:65:D4:0A:58:F5:E1:42:C0:0B:2C:EB:B8:14:E1:7A:4D:1C:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tltl1ApY9eFCwAss67gU4XpNHM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8b14a3-190f-41a4-b66c-bdf1ba08d5fe/1/tltl1ApY9eFCwAss67gU4XpNHM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8b14a3-190f-41a4-b66c-bdf1ba08d5fe/1/tltl1ApY9eFCwAss67gU4XpNHM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:4f:81:ce:e6:1c:cf:9c:ba:38:19:de:65:9d:5c:88:76:44:
81:fc:20:cc:ad:99:44:22:80:df:6b:f2:2c:57:f7:f6:f2:77:
be:26:e8:d7:36:e0:2e:f3:35:4b:20:20:9e:ee:46:53:1c:a7:
b9:4d:1d:4c:5c:dc:60:1b:e1:eb:67:e2:d6:dc:73:3f:a1:5d:
76:35:e2:ca:ab:d2:af:4a:91:d0:41:85:98:b5:38:c0:50:b9:
3d:bc:ba:53:b3:5e:72:1d:e8:0f:ee:fc:53:4f:d5:6d:db:a4:
f4:d3:d6:b5:f0:cd:ed:e6:7d:a6:28:b3:fa:8d:70:a0:5f:bd:
46:be:8c:3a:b8:f7:74:67:52:08:93:69:f3:e0:dc:1d:53:e5:
28:7b:b3:9a:8e:fa:6c:87:d5:7b:60:a4:8a:e6:df:52:cc:70:
7c:8e:01:be:7b:de:bf:00:99:41:ac:62:49:85:8a:1c:c2:d0:
b0:80:40:33:8f:03:91:97:ad:ee:2d:87:b6:ef:57:ba:13:6d:
28:7a:28:46:2e:2b:66:af:9c:1b:e5:e0:75:f6:f6:cd:c3:0b:
2d:2a:65:c1:93:6a:d0:68:fa:3b:b3:76:eb:36:c7:00:65:5b:
a7:0f:03:83:62:c6:33:96:10:7a:46:bd:fc:5d:c0:5d:41:f2:
97:5c:14:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:10:51 2026 by rpki-client