Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.mft
File: tlkY8l1WAA-IHamN4yPZGgZOAIc.mft (raw, json)
Hash identifier: cEQ7I+AkVgjitj4K6UazQn5fAXWgV5wiKx33hMH54Ho=
Subject key identifier: E6:5C:DC:8E:3D:D2:33:00:2E:01:BF:26:34:00:AF:94:D6:09:06:01
Authority key identifier: B6:59:18:F2:5D:56:00:0F:88:1D:A9:8D:E3:23:D9:1A:06:4E:00:87
Certificate issuer: /CN=b65918f25d56000f881da98de323d91a064e0087
Certificate serial: 019ED5077EF204C2585BC5CB407042B85B5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tlkY8l1WAA-IHamN4yPZGgZOAIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.mft
Manifest number: 1969
Signing time: Wed 17 Jun 2026 10:01:38 +0000
Manifest this update: Wed 17 Jun 2026 10:01:38 +0000
Manifest next update: Thu 18 Jun 2026 10:01:38 +0000
Files and hashes: 1: A4jAeSOUxnx4vwbriYIE5GCmR5o.roa (hash: b613GUOnj4elC/TmCyjV9WQVEF9eM0NMnIGrwY4cmkM=)
2: cD7FBll6MKk0SBDKbacyHN6_vYE.roa (hash: cJYyYoLcAXlS5p1/xiBLoInLHVf2mQgsRevDWR07J20=)
3: tlkY8l1WAA-IHamN4yPZGgZOAIc.crl (hash: rlpL74EvgQiAL0LbsTj5U0TIifnTlMDmz+pRhChztFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tlkY8l1WAA-IHamN4yPZGgZOAIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 08:33:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d5:07:7e:f2:04:c2:58:5b:c5:cb:40:70:42:b8:5b:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b65918f25d56000f881da98de323d91a064e0087
Validity
Not Before: Jun 17 10:01:38 2026 GMT
Not After : Jun 18 10:01:38 2026 GMT
Subject: CN=e65cdc8e3dd233002e01bf263400af94d6090601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9c:8d:30:7a:9a:4f:88:23:ae:cc:08:a4:7c:
82:7a:70:4f:c8:d7:21:b6:97:81:1a:cf:21:1b:31:
b6:30:b5:01:cc:b5:00:59:ec:67:33:11:d7:fe:60:
db:75:d8:b3:e7:1e:26:f3:65:3a:d7:93:b8:22:66:
a8:ab:35:2c:93:e3:a0:bb:89:e4:f6:9b:56:13:90:
0c:72:76:63:05:69:31:f6:bc:5a:6f:7c:10:38:d8:
8d:9e:2f:1b:8e:80:fa:91:11:5c:59:7b:2f:99:d9:
77:d1:d5:33:d6:fd:af:44:2c:15:38:85:ff:c8:e3:
41:36:4a:f6:68:05:f2:f3:01:0a:ad:b0:0f:81:d0:
11:87:3a:4c:86:84:b0:33:bf:f8:80:03:25:d2:49:
14:85:7e:d8:9d:68:2d:e8:5a:ec:66:83:64:e8:a4:
61:3a:c1:53:e4:ea:1d:d6:63:51:35:0f:d8:89:68:
c2:a2:f7:ff:32:7f:86:65:03:b3:3b:c9:95:fe:06:
44:74:7b:09:e3:aa:f9:4b:01:f6:3b:0b:bc:a5:2c:
1f:aa:7e:05:13:eb:07:12:04:43:7a:86:49:7c:75:
3d:d0:1d:73:d9:a0:84:1d:f2:87:11:4a:10:2d:60:
d0:b9:5e:be:cb:da:3e:c6:b2:f6:26:7d:0e:86:77:
db:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:5C:DC:8E:3D:D2:33:00:2E:01:BF:26:34:00:AF:94:D6:09:06:01
X509v3 Authority Key Identifier:
keyid:B6:59:18:F2:5D:56:00:0F:88:1D:A9:8D:E3:23:D9:1A:06:4E:00:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tlkY8l1WAA-IHamN4yPZGgZOAIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:58:7d:40:a3:ad:8d:d3:68:80:e7:cc:d5:bd:c1:59:67:a4:
b9:e9:e4:d0:9e:47:9c:5f:8d:a3:45:d6:63:b7:59:96:7d:f8:
e7:fe:d0:24:87:b1:e8:ea:ed:15:33:68:b6:0c:93:00:43:d8:
09:38:d7:a0:da:d9:19:bd:d7:da:49:44:d0:89:7d:f4:36:69:
f2:38:ee:d1:45:53:65:6a:c1:97:f9:a5:da:fe:5a:4d:08:a2:
6e:98:ef:d9:ed:26:83:17:1b:13:48:5e:1c:97:dd:83:58:8f:
89:d0:e8:1d:6d:69:d6:5b:f0:42:1f:63:61:61:a7:54:42:c5:
a5:60:ec:02:bc:36:61:56:a6:b7:02:c4:61:f1:c7:16:eb:a4:
cf:5f:76:de:4a:af:ad:c7:6d:30:08:f8:13:39:f1:d7:8b:e0:
44:67:2b:74:57:78:33:19:aa:96:09:8f:2e:54:8e:2e:4c:fa:
05:5d:de:b0:f0:5b:f7:b9:61:3d:1c:0e:b4:7c:a7:92:f9:0e:
27:9a:b1:a9:31:c0:74:76:c5:da:42:51:ad:bb:ae:6c:b3:d5:
b9:6f:1c:75:34:e9:5d:3f:8c:f9:b0:f6:91:f4:00:7a:49:1e:
ea:ef:0e:5b:7f:07:ef:b2:6f:93:a6:5d:33:81:00:e5:6b:cf:
21:6e:1e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 16:32:20 2026 by rpki-client