Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.mft
File: tlkY8l1WAA-IHamN4yPZGgZOAIc.mft (raw, json)
Hash identifier: lk6YAhink4LkgMwsxqkwKwe2sgz8WMA95YhYICsd5Po=
Subject key identifier: 36:76:F9:E5:F2:97:8E:84:39:52:A6:78:17:ED:79:29:C2:B1:E6:74
Authority key identifier: B6:59:18:F2:5D:56:00:0F:88:1D:A9:8D:E3:23:D9:1A:06:4E:00:87
Certificate issuer: /CN=b65918f25d56000f881da98de323d91a064e0087
Certificate serial: 019CAAC66E315E6DA385115A09C7E461B50F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tlkY8l1WAA-IHamN4yPZGgZOAIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.mft
Manifest number: 184A
Signing time: Sun 01 Mar 2026 19:00:56 +0000
Manifest this update: Sun 01 Mar 2026 19:00:56 +0000
Manifest next update: Mon 02 Mar 2026 19:00:56 +0000
Files and hashes: 1: A4jAeSOUxnx4vwbriYIE5GCmR5o.roa (hash: b613GUOnj4elC/TmCyjV9WQVEF9eM0NMnIGrwY4cmkM=)
2: cD7FBll6MKk0SBDKbacyHN6_vYE.roa (hash: cJYyYoLcAXlS5p1/xiBLoInLHVf2mQgsRevDWR07J20=)
3: tlkY8l1WAA-IHamN4yPZGgZOAIc.crl (hash: y05Ob4kJeOe7R+Oj258ron169FhhVZSf3K4Yj/+idn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tlkY8l1WAA-IHamN4yPZGgZOAIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:6e:31:5e:6d:a3:85:11:5a:09:c7:e4:61:b5:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b65918f25d56000f881da98de323d91a064e0087
Validity
Not Before: Mar 1 19:00:56 2026 GMT
Not After : Mar 2 19:00:56 2026 GMT
Subject: CN=3676f9e5f2978e843952a67817ed7929c2b1e674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ea:71:0d:9b:e8:74:8e:fe:43:97:2e:77:21:
c9:4e:95:9a:41:fc:70:df:3d:bc:16:67:5e:62:8b:
c1:aa:5d:50:58:ca:36:fb:7b:db:88:d6:0e:2f:66:
ef:ef:8b:da:d3:51:ce:3e:50:05:53:72:6e:37:09:
96:4f:6b:ef:cd:66:62:c5:15:0a:d1:ce:f3:fe:da:
de:4c:87:a1:21:ed:41:86:bd:1a:cd:07:a2:eb:a4:
22:32:78:35:d9:93:2a:83:67:df:6d:53:ac:df:22:
6c:1b:15:7d:6a:36:35:cc:e6:49:b0:57:81:45:35:
4a:04:b4:98:fd:db:7f:0a:92:04:75:47:51:c1:22:
03:7c:e2:82:9b:af:d9:03:17:d5:60:bf:e5:b8:6d:
bc:df:f8:11:25:af:b5:59:be:b9:6e:a3:2e:41:fc:
ec:6f:24:14:1d:e8:25:56:82:1c:5d:bb:26:25:66:
ee:ee:80:fb:f3:90:07:09:90:e5:10:c7:95:fa:5a:
4b:5d:7b:74:7f:4d:d4:1e:ff:7b:f4:e9:11:20:db:
09:f0:a6:f8:a0:05:a3:47:1a:af:9b:20:0d:80:4c:
ef:3b:3b:c7:1a:93:e5:0c:db:a2:88:2b:c1:a9:6c:
26:7d:3c:52:63:0a:5f:1c:77:b4:7c:ff:0e:28:5b:
00:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:76:F9:E5:F2:97:8E:84:39:52:A6:78:17:ED:79:29:C2:B1:E6:74
X509v3 Authority Key Identifier:
keyid:B6:59:18:F2:5D:56:00:0F:88:1D:A9:8D:E3:23:D9:1A:06:4E:00:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tlkY8l1WAA-IHamN4yPZGgZOAIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:be:36:27:9a:54:7b:5f:d6:4c:a2:e1:b6:9e:c9:29:f7:61:
96:65:99:38:35:63:df:ea:87:34:ae:94:10:d3:6e:31:28:63:
3c:6a:ad:77:4a:9f:88:77:71:c7:65:bb:15:98:c8:9d:94:f9:
1a:24:30:7d:d6:60:dc:3d:b3:da:1f:25:47:d4:3b:e4:cb:46:
de:85:1f:f8:80:1b:df:26:1d:0f:87:d8:a9:ca:7e:fc:b4:a9:
d0:d1:eb:c4:a2:18:22:ef:01:cf:df:7f:dd:14:a4:d1:e7:3c:
f9:5e:b5:c5:00:dd:18:25:20:9f:7a:21:d6:be:a5:0c:56:66:
60:c9:96:65:8b:e2:8e:b3:86:25:90:42:e1:0e:b4:01:cb:29:
5d:08:12:c4:da:5a:7e:f3:45:1a:14:54:03:c8:aa:2e:8a:f2:
8e:ad:32:00:2c:6b:9d:6a:23:c2:63:e3:46:9f:a1:a8:b5:b0:
61:7b:3a:b0:2e:a3:ba:e2:cf:98:01:d2:2b:7b:91:f5:87:a4:
32:c2:0b:30:fb:84:a0:fb:ef:40:ca:3d:2c:54:16:49:ff:2b:
e1:09:45:ed:9e:59:01:68:38:6d:ca:4f:9c:e1:fd:63:99:d0:
06:92:b7:4c:53:c8:d8:c5:52:18:ff:c4:92:ed:89:29:61:63:
23:de:fe:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:33:36 2026 by rpki-client