Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.mft
File: tlkY8l1WAA-IHamN4yPZGgZOAIc.mft (raw, json)
Hash identifier: dktUDGsepRWsUReL/wUtzFAGxYhpeFsNb9HWhtkZ9jE=
Subject key identifier: 0D:E1:8F:85:58:23:30:86:3E:F9:54:18:CF:38:4B:BB:C8:B3:8F:DF
Authority key identifier: B6:59:18:F2:5D:56:00:0F:88:1D:A9:8D:E3:23:D9:1A:06:4E:00:87
Certificate issuer: /CN=b65918f25d56000f881da98de323d91a064e0087
Certificate serial: 01A0E2502F9F9D0CBF78294B2D7186139707
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tlkY8l1WAA-IHamN4yPZGgZOAIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.mft
Manifest number: 1A79
Signing time: Sun 27 Sep 2026 10:01:40 +0000
Manifest this update: Sun 27 Sep 2026 10:01:40 +0000
Manifest next update: Mon 28 Sep 2026 10:01:40 +0000
Files and hashes: 1: A4jAeSOUxnx4vwbriYIE5GCmR5o.roa (hash: b613GUOnj4elC/TmCyjV9WQVEF9eM0NMnIGrwY4cmkM=)
2: cD7FBll6MKk0SBDKbacyHN6_vYE.roa (hash: cJYyYoLcAXlS5p1/xiBLoInLHVf2mQgsRevDWR07J20=)
3: tlkY8l1WAA-IHamN4yPZGgZOAIc.crl (hash: Q2An4yXcKdo9JQYPid0pcwMVwM1odQtdP0SAiEmIVhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tlkY8l1WAA-IHamN4yPZGgZOAIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:50:2f:9f:9d:0c:bf:78:29:4b:2d:71:86:13:97:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b65918f25d56000f881da98de323d91a064e0087
Validity
Not Before: Sep 27 10:01:40 2026 GMT
Not After : Sep 28 10:01:40 2026 GMT
Subject: CN=0de18f85582330863ef95418cf384bbbc8b38fdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a1:6f:69:70:c5:48:a8:0c:41:60:ef:f4:71:
67:de:85:f3:9d:ee:ac:d8:e3:87:78:f2:7c:f1:11:
35:bb:ed:e0:66:4d:c3:f9:b8:f3:27:6b:b4:51:86:
54:5c:fb:59:f2:79:a3:4f:9f:4a:2d:54:41:b8:fd:
5f:62:bf:48:64:78:f1:38:ec:0e:f3:28:cf:cb:e3:
b9:5e:ea:99:27:d0:36:5b:eb:cf:24:d2:ae:c1:75:
1b:8e:8a:f1:b3:c3:bc:33:0e:64:47:b9:85:1d:d2:
5f:2f:a0:5f:b1:cd:46:34:9a:b8:45:3e:02:ed:4c:
d6:d2:21:db:f2:42:b5:b8:e2:17:5c:a0:40:18:9c:
f6:ee:6b:13:4a:7d:fc:20:71:2c:ea:ab:62:8f:7d:
66:17:15:f0:83:4d:1d:fd:98:d6:c8:14:93:cf:78:
09:7f:fe:f3:ea:fc:a8:23:6a:62:92:de:f2:b4:8a:
75:67:bb:a1:6c:cb:1a:46:fb:71:43:e3:62:f9:b7:
98:45:d0:2d:b8:3f:7b:3b:c2:c7:4e:20:38:59:d0:
07:fa:ba:86:e7:40:6b:50:39:05:45:61:57:e2:25:
47:18:46:7e:92:e3:42:88:19:62:d1:89:95:28:b2:
d6:9d:22:4f:09:41:d7:e5:f6:55:4e:27:b1:d3:fa:
18:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E1:8F:85:58:23:30:86:3E:F9:54:18:CF:38:4B:BB:C8:B3:8F:DF
X509v3 Authority Key Identifier:
keyid:B6:59:18:F2:5D:56:00:0F:88:1D:A9:8D:E3:23:D9:1A:06:4E:00:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tlkY8l1WAA-IHamN4yPZGgZOAIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:36:2f:0a:2d:09:39:86:58:0e:70:ca:c8:bd:cb:86:61:91:
49:82:59:0a:de:68:31:8a:6c:72:27:f2:d5:21:8e:7a:9e:c0:
aa:bb:07:22:02:2a:14:e1:19:92:eb:9c:67:aa:26:b3:1c:fd:
ab:5d:f6:2e:6c:f6:6d:5c:1b:87:bf:44:f1:50:be:81:3a:51:
05:8a:23:b9:3d:91:27:2d:9c:7b:b1:6b:95:c5:ff:43:70:d1:
f3:45:24:7d:24:fc:64:26:77:30:32:51:5a:6e:81:19:53:c4:
e4:cb:e3:0f:bd:1d:8f:4b:c9:6a:ce:8d:18:70:5f:0a:24:c4:
a4:8b:2e:15:66:71:d5:c8:df:17:d5:65:88:eb:aa:7b:e2:54:
6b:e7:e9:19:be:0e:12:9f:82:94:10:8c:72:03:50:d6:7d:f9:
7b:d9:ed:b5:08:70:4a:69:cb:f9:4f:07:13:55:52:15:dd:5d:
76:05:88:a1:35:90:41:3e:bb:04:20:7d:59:d3:7b:36:52:e7:
67:da:fe:df:e3:59:57:ce:fb:9a:ec:ca:b3:02:dd:47:74:1a:
a2:67:77:85:17:71:3f:81:29:7c:43:68:59:59:33:5d:40:b8:
ec:56:9d:fc:59:25:e0:a2:b6:9f:d7:8e:dc:30:51:2c:6c:9f:
11:91:c7:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 14:42:53 2026 by rpki-client