Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft
File: tlMWam8fM-RyDmfSTdMuRFgDUvA.mft (raw, json)
Hash identifier: PMnfgTK/EV2NDpGCST/CX5fuQMlcKl2qpib8zOEHnEc=
Subject key identifier: AB:A8:80:13:5D:CD:F8:F0:78:67:A7:96:AA:D6:7F:AD:2B:7C:26:5F
Authority key identifier: B6:53:16:6A:6F:1F:33:E4:72:0E:67:D2:4D:D3:2E:44:58:03:52:F0
Certificate issuer: /CN=b653166a6f1f33e4720e67d24dd32e44580352f0
Certificate serial: 019CABA21FE1EE2F50C04B026A6EF5659D29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tlMWam8fM-RyDmfSTdMuRFgDUvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 23:00:54 +0000
Manifest this update: Sun 01 Mar 2026 23:00:54 +0000
Manifest next update: Mon 02 Mar 2026 23:00:54 +0000
Files and hashes: 1: 4GYkj_f2Nf46ovAbI9ICl-NUPNk.roa (hash: VIkjYJrRr/vUMXwmdH32EDSuoEreHbJ8GbvjfrFA1JI=)
2: HIq_BdqUCGatF2Rbj9NrkH9Ghjw.roa (hash: 8u28dk9o5BT41xzqo9yKmYyw/VKFKW4yRANeNy2FRA8=)
3: tlMWam8fM-RyDmfSTdMuRFgDUvA.crl (hash: 2MdtzqQG9k93j6UrqcDhhN62UzXftHjNX9b70CJo2jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tlMWam8fM-RyDmfSTdMuRFgDUvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:1f:e1:ee:2f:50:c0:4b:02:6a:6e:f5:65:9d:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b653166a6f1f33e4720e67d24dd32e44580352f0
Validity
Not Before: Mar 1 23:00:54 2026 GMT
Not After : Mar 2 23:00:54 2026 GMT
Subject: CN=aba880135dcdf8f07867a796aad67fad2b7c265f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:22:24:0b:c5:2f:cd:f4:c9:69:8b:52:94:1b:
55:ca:ed:06:34:76:de:78:7e:83:e1:35:27:1d:f4:
6e:bf:dc:33:46:6e:c1:45:10:65:a1:9d:8a:26:5f:
da:f4:dc:c1:4d:62:e1:5f:f3:2e:07:04:41:e4:e8:
4b:05:d2:c5:21:ac:a8:c5:ea:c6:38:94:63:70:21:
6d:2d:62:6a:fe:d6:9b:f1:52:18:65:03:f5:1c:b2:
ac:da:c7:ee:05:a8:08:c5:4b:27:df:6f:5a:e9:46:
44:40:46:ae:a1:3e:71:6e:6d:83:45:40:f1:dc:72:
d7:07:3c:4e:49:0c:ad:68:04:f5:36:c0:7f:c7:9a:
db:57:78:d0:9a:15:43:9a:ad:13:9a:f3:67:a2:80:
96:8d:ad:31:a8:97:d4:79:28:76:f5:d8:01:57:cb:
98:2a:35:e9:16:8a:cc:66:b2:a1:35:85:65:da:d5:
cd:d7:c1:d4:a1:e5:b9:d2:d7:fc:26:f8:11:4d:8e:
f7:65:0f:2a:ed:e1:b1:b1:4a:00:03:bd:76:a5:d4:
22:19:5e:75:b8:03:84:d8:a9:c0:1e:73:fe:1d:98:
82:2f:55:9f:f8:08:23:79:86:d9:70:dc:22:c7:1b:
e6:c3:89:d7:5f:58:c9:72:7f:45:45:c7:ba:e0:4c:
67:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:A8:80:13:5D:CD:F8:F0:78:67:A7:96:AA:D6:7F:AD:2B:7C:26:5F
X509v3 Authority Key Identifier:
keyid:B6:53:16:6A:6F:1F:33:E4:72:0E:67:D2:4D:D3:2E:44:58:03:52:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tlMWam8fM-RyDmfSTdMuRFgDUvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:e4:f1:f9:e5:0b:e2:d2:24:48:c0:14:4e:67:4f:96:d4:7c:
c9:10:f7:4e:5c:6b:57:c8:3d:09:0d:a2:ad:0b:60:58:d0:3f:
70:86:88:0d:a9:6b:12:c4:ac:c6:ac:b4:4a:d5:46:dd:c4:ec:
e3:50:7f:89:37:f3:12:45:e9:8b:ef:03:da:56:03:1f:93:22:
71:d1:c7:03:dd:01:a6:55:82:6d:38:69:e4:1e:0f:8c:a0:03:
51:1f:63:7d:f3:f8:59:56:eb:cd:0d:41:33:32:a6:4a:fa:26:
ac:b3:15:59:21:33:e0:6d:53:af:f4:ee:18:fd:b3:db:7d:8e:
8d:54:dd:c9:da:45:5c:e4:a6:74:2b:15:3e:3d:ed:c7:dd:3d:
4d:bd:d0:64:e4:5e:6f:f9:1f:4f:b2:a1:61:c6:cf:95:bf:b2:
81:9d:e4:8c:0e:57:00:bf:e9:d6:39:28:6f:8b:41:38:5d:0f:
83:b7:dc:cf:9a:ca:06:95:ca:7d:d1:29:36:b7:1a:c8:b0:aa:
ba:e4:c9:41:61:c2:4c:7b:37:d5:01:1b:30:7d:f7:32:49:df:
41:21:5e:70:cf:55:f0:bd:f4:1f:05:0b:05:e7:bb:f8:0d:93:
94:cb:7a:ca:d1:55:34:f9:a5:fd:f1:c7:82:19:4e:d7:2e:4b:
df:84:e5:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:41:16 2026 by rpki-client