Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft
File: tlMWam8fM-RyDmfSTdMuRFgDUvA.mft (raw, json)
Hash identifier: vlNwNxvMFFDat/ID9KMDWVpwM+EqeziNO3qX0h8dkAY=
Subject key identifier: 98:30:07:68:BE:90:41:C8:31:A6:26:12:7A:BD:84:BF:42:14:C5:30
Authority key identifier: B6:53:16:6A:6F:1F:33:E4:72:0E:67:D2:4D:D3:2E:44:58:03:52:F0
Certificate issuer: /CN=b653166a6f1f33e4720e67d24dd32e44580352f0
Certificate serial: 019D973CF4754041371F8885D715028F36C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tlMWam8fM-RyDmfSTdMuRFgDUvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft
Manifest number: 18C1
Signing time: Thu 16 Apr 2026 17:00:47 +0000
Manifest this update: Thu 16 Apr 2026 17:00:47 +0000
Manifest next update: Fri 17 Apr 2026 17:00:47 +0000
Files and hashes: 1: 4GYkj_f2Nf46ovAbI9ICl-NUPNk.roa (hash: VIkjYJrRr/vUMXwmdH32EDSuoEreHbJ8GbvjfrFA1JI=)
2: HIq_BdqUCGatF2Rbj9NrkH9Ghjw.roa (hash: 8u28dk9o5BT41xzqo9yKmYyw/VKFKW4yRANeNy2FRA8=)
3: tlMWam8fM-RyDmfSTdMuRFgDUvA.crl (hash: 9zo02p/r2VT29OOEqlbbviI3+bHst1bGrn4KPySkbDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tlMWam8fM-RyDmfSTdMuRFgDUvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 17:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:3c:f4:75:40:41:37:1f:88:85:d7:15:02:8f:36:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b653166a6f1f33e4720e67d24dd32e44580352f0
Validity
Not Before: Apr 16 17:00:47 2026 GMT
Not After : Apr 17 17:00:47 2026 GMT
Subject: CN=98300768be9041c831a626127abd84bf4214c530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:65:5f:2a:aa:00:fd:de:4c:14:a9:e5:e9:be:
78:c9:1a:3d:21:68:48:d8:10:55:02:19:4f:a5:c2:
af:71:bc:53:31:9b:68:4e:8f:0f:c5:e6:e9:7c:8c:
b0:21:28:99:da:11:42:f9:ad:26:3b:70:12:69:91:
ff:81:69:02:c0:78:d6:4b:15:53:11:9a:ca:8f:2d:
20:df:7d:74:bd:36:5a:29:76:72:79:47:96:31:39:
7a:66:4d:57:3d:cb:b8:9d:54:dc:bf:f4:d1:37:08:
d1:78:e6:08:64:ec:d1:45:af:94:bc:b2:2b:6b:6e:
99:ab:65:ba:3f:70:e4:08:bd:ae:40:c9:8c:29:df:
34:ae:4a:9a:1d:09:e0:31:a9:0e:1e:6f:2c:50:1e:
15:71:f8:33:0c:3b:e3:8b:79:78:08:f4:8c:f4:e6:
c1:c7:d0:e0:35:96:84:c3:ca:18:74:ca:bb:72:fa:
55:a1:7a:06:54:23:6b:3a:7e:49:e2:ad:bc:08:e0:
f4:a8:6a:cf:c4:0a:7b:db:b5:04:70:01:a3:39:a5:
6d:40:a8:88:fd:02:05:78:9b:a1:46:cc:6e:8b:d7:
02:9e:02:68:24:de:b0:47:14:ba:47:ea:2b:c8:06:
b4:99:f6:8b:1c:e1:fa:bb:42:53:67:c2:3d:37:ac:
86:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:30:07:68:BE:90:41:C8:31:A6:26:12:7A:BD:84:BF:42:14:C5:30
X509v3 Authority Key Identifier:
keyid:B6:53:16:6A:6F:1F:33:E4:72:0E:67:D2:4D:D3:2E:44:58:03:52:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tlMWam8fM-RyDmfSTdMuRFgDUvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:b1:c3:58:bd:6c:8d:e5:9c:23:79:6d:6d:9d:9e:41:ee:1d:
55:a9:ef:68:ed:e5:d9:0a:db:bf:2b:d4:8d:3c:df:f8:d2:39:
c6:6d:bb:70:04:48:a0:bd:7e:65:9d:17:39:06:68:7b:85:f1:
0c:5d:df:ac:a6:d5:19:1c:16:84:38:2f:41:41:c2:aa:6d:c7:
4c:7b:45:6d:d2:d2:d8:a6:4b:21:36:17:f5:0c:18:21:a2:13:
4c:4b:0e:18:11:32:c7:b0:19:20:e0:ae:83:7a:c0:c8:aa:ca:
fa:fd:84:3e:62:30:43:ef:d8:e2:f0:59:55:de:f7:05:37:74:
55:80:f1:61:74:c7:00:d9:3d:d8:a9:db:ae:8f:44:38:02:63:
a7:d4:a7:35:c3:bc:c3:11:dd:24:52:a0:a0:04:b5:3d:c9:5b:
0a:32:f5:2f:12:bc:6d:11:1c:9c:8d:78:09:6e:48:b4:97:dd:
c8:96:51:fd:33:59:82:d0:f9:6d:47:b4:96:70:86:48:d6:7d:
54:26:b8:20:80:e2:17:5c:bd:a1:b6:4e:47:d8:91:e3:4f:e7:
eb:89:cb:b3:80:87:f7:65:98:c0:30:74:81:55:07:ab:ac:59:
81:8d:c0:af:f6:58:c9:0a:ce:2f:3a:62:11:f9:c3:4e:1d:93:
ec:c3:47:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:22:42 2026 by rpki-client