Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft
File: tlMWam8fM-RyDmfSTdMuRFgDUvA.mft (raw, json)
Hash identifier: dQmljMVhV9PepaSMcGleAOnJn7f9Knq6IzXYNicT3nc=
Subject key identifier: 0F:9C:4C:C0:FB:D8:5D:89:7B:08:8F:CD:8C:4C:A7:3E:2A:80:E2:E0
Authority key identifier: B6:53:16:6A:6F:1F:33:E4:72:0E:67:D2:4D:D3:2E:44:58:03:52:F0
Certificate issuer: /CN=b653166a6f1f33e4720e67d24dd32e44580352f0
Certificate serial: 01A13DEF62BEE671D4412A31E948101E9453
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tlMWam8fM-RyDmfSTdMuRFgDUvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft
Manifest number: 1AA5
Signing time: Thu 15 Oct 2026 05:01:00 +0000
Manifest this update: Thu 15 Oct 2026 05:01:00 +0000
Manifest next update: Fri 16 Oct 2026 05:01:00 +0000
Files and hashes: 1: 4GYkj_f2Nf46ovAbI9ICl-NUPNk.roa (hash: VIkjYJrRr/vUMXwmdH32EDSuoEreHbJ8GbvjfrFA1JI=)
2: HIq_BdqUCGatF2Rbj9NrkH9Ghjw.roa (hash: 8u28dk9o5BT41xzqo9yKmYyw/VKFKW4yRANeNy2FRA8=)
3: tlMWam8fM-RyDmfSTdMuRFgDUvA.crl (hash: /UzW/De0waa1PfOn48bz7W4FVCc0jPJuUyoA81R5UP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tlMWam8fM-RyDmfSTdMuRFgDUvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 05:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:ef:62:be:e6:71:d4:41:2a:31:e9:48:10:1e:94:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b653166a6f1f33e4720e67d24dd32e44580352f0
Validity
Not Before: Oct 15 05:01:00 2026 GMT
Not After : Oct 16 05:01:00 2026 GMT
Subject: CN=0f9c4cc0fbd85d897b088fcd8c4ca73e2a80e2e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1f:29:f6:1f:56:0d:d7:63:54:25:c2:28:24:
8a:06:fe:1d:c1:92:e9:72:88:4a:cd:dc:2a:a9:68:
09:87:c6:05:97:97:be:a4:f9:f5:1c:a6:69:e1:cb:
78:da:d0:45:73:66:92:59:f3:f5:14:74:7c:a9:da:
ff:84:65:ed:0c:e6:8c:20:2a:82:c7:7e:85:c0:7b:
a1:1e:ed:e0:c6:72:3a:2e:dd:14:1f:18:6e:53:a0:
f4:c1:1f:7f:12:26:a5:23:23:40:33:e7:fa:9b:b5:
d2:39:8b:f0:0c:27:ec:8c:b4:f9:12:d0:1d:03:00:
ef:e0:c4:d6:45:ad:07:66:6d:0e:9c:f8:11:a5:c7:
3f:02:71:bf:07:ec:93:2c:93:cc:97:61:dc:7b:c0:
ed:40:45:cf:ca:43:fd:51:25:d2:94:73:d8:23:c0:
d1:f7:01:2e:bd:1d:74:5d:d4:ce:62:17:90:5f:d7:
22:c2:c6:69:aa:82:54:90:fd:6d:37:7e:3f:28:99:
27:55:76:11:1d:5d:11:c9:1d:0a:48:0b:09:57:98:
2f:0a:d7:a8:83:94:ce:5a:78:1f:07:5e:67:92:2a:
89:ec:ed:3c:1b:2a:ea:6f:22:4a:98:b9:6e:d4:88:
31:c2:b9:9c:21:c1:ea:69:3c:9a:a4:18:3c:41:80:
3e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:9C:4C:C0:FB:D8:5D:89:7B:08:8F:CD:8C:4C:A7:3E:2A:80:E2:E0
X509v3 Authority Key Identifier:
keyid:B6:53:16:6A:6F:1F:33:E4:72:0E:67:D2:4D:D3:2E:44:58:03:52:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tlMWam8fM-RyDmfSTdMuRFgDUvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:0b:78:21:45:93:35:75:fc:2e:4a:32:e6:f1:3c:61:47:56:
d3:fa:bb:4b:b8:05:f9:8d:01:81:88:56:3e:58:78:62:ff:9a:
73:db:4c:98:7c:12:63:a3:03:13:a2:66:45:bd:3a:1e:90:4e:
58:8b:c7:f1:a5:ed:66:71:1f:24:bc:ba:7d:58:5c:d3:d6:d6:
b6:6d:77:fe:d8:01:0b:a6:11:6f:d8:d1:df:fd:9d:cc:e8:11:
1a:6a:c3:81:a1:73:b2:e3:5e:15:68:59:bb:3b:ef:84:c5:98:
d8:f5:2e:28:92:73:e6:88:b4:e6:fd:46:1f:63:fd:f1:3d:a0:
19:dd:92:69:3e:02:8b:ed:c0:4a:cb:69:89:9e:29:de:f7:c3:
e6:a5:4c:a5:e6:6e:29:e4:2b:51:d7:c8:13:2d:d2:6d:84:5f:
3f:45:9d:eb:9f:50:fd:6f:e0:4b:7e:c6:bd:6e:2a:43:a6:97:
bf:77:f6:cc:a8:63:9e:0c:76:2f:93:4d:68:39:20:b3:8e:63:
85:0b:73:98:dd:13:d7:b1:64:43:e6:37:56:07:0a:85:f4:93:
55:3c:31:d8:b0:3f:90:69:c3:60:35:9e:14:7d:05:79:50:6b:
a6:ba:43:b0:91:53:1e:58:99:6b:b6:49:bc:9d:d9:48:32:9a:
19:50:0b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:31:23 2026 by rpki-client