Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft
File: tlMWam8fM-RyDmfSTdMuRFgDUvA.mft (raw, json)
Hash identifier: qqXA0TazHDobMnYB8yW1V8cssTUMjGyCv9eqOLIUGAc=
Subject key identifier: B8:CF:91:81:2C:53:72:D2:AE:7E:F2:7C:6A:07:22:84:33:0B:B0:57
Authority key identifier: B6:53:16:6A:6F:1F:33:E4:72:0E:67:D2:4D:D3:2E:44:58:03:52:F0
Certificate issuer: /CN=b653166a6f1f33e4720e67d24dd32e44580352f0
Certificate serial: 019EC48097EEC8AEB01924E9FDDF771EA145
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tlMWam8fM-RyDmfSTdMuRFgDUvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft
Manifest number: 195D
Signing time: Sun 14 Jun 2026 05:00:22 +0000
Manifest this update: Sun 14 Jun 2026 05:00:22 +0000
Manifest next update: Mon 15 Jun 2026 05:00:22 +0000
Files and hashes: 1: 4GYkj_f2Nf46ovAbI9ICl-NUPNk.roa (hash: VIkjYJrRr/vUMXwmdH32EDSuoEreHbJ8GbvjfrFA1JI=)
2: HIq_BdqUCGatF2Rbj9NrkH9Ghjw.roa (hash: 8u28dk9o5BT41xzqo9yKmYyw/VKFKW4yRANeNy2FRA8=)
3: tlMWam8fM-RyDmfSTdMuRFgDUvA.crl (hash: b69Lez65zphO5qQas/IQsTALmEPRGM1h2fQNcU5C+5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tlMWam8fM-RyDmfSTdMuRFgDUvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 02:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c4:80:97:ee:c8:ae:b0:19:24:e9:fd:df:77:1e:a1:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b653166a6f1f33e4720e67d24dd32e44580352f0
Validity
Not Before: Jun 14 05:00:22 2026 GMT
Not After : Jun 15 05:00:22 2026 GMT
Subject: CN=b8cf91812c5372d2ae7ef27c6a072284330bb057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e1:72:ba:92:1f:f0:5f:1e:8a:ea:66:64:54:
34:ab:f0:67:92:f4:aa:65:70:38:4a:e1:6d:f4:35:
15:6f:8b:a3:5d:5c:53:80:b9:de:f9:b9:3b:18:6a:
fb:cb:b0:9d:0d:09:e9:1e:23:d9:81:05:4e:8e:7b:
61:12:51:4e:f8:5e:65:7a:0c:2a:31:ea:65:8b:58:
e5:23:00:76:71:c5:b9:13:a0:01:02:28:c1:e5:60:
06:50:7c:f5:6a:84:11:61:64:41:c8:be:49:af:b4:
d5:2c:ff:62:2d:40:9e:cd:fe:0a:c6:2e:7f:13:56:
c2:ae:c7:4b:5e:3e:93:5e:fc:b4:ff:63:83:62:71:
a1:ea:13:2a:36:ec:fb:b3:11:b1:81:0b:90:f4:1e:
f5:68:d2:25:5b:7d:19:eb:cc:f6:06:37:53:9e:39:
6b:57:4b:ff:b5:1d:de:39:62:8d:9a:e5:62:a7:20:
e4:41:2a:0d:0d:21:e9:3b:c4:09:1a:ee:b0:f5:47:
bd:fb:3d:19:53:97:74:4e:e9:bb:bb:48:97:eb:73:
4f:24:ca:42:31:ee:38:32:5c:5e:cb:90:de:1a:75:
cb:17:c8:54:62:e9:6f:80:84:40:a1:f9:64:5d:16:
d3:dd:62:d4:a6:1a:62:5e:32:da:34:a1:2a:13:23:
7b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:CF:91:81:2C:53:72:D2:AE:7E:F2:7C:6A:07:22:84:33:0B:B0:57
X509v3 Authority Key Identifier:
keyid:B6:53:16:6A:6F:1F:33:E4:72:0E:67:D2:4D:D3:2E:44:58:03:52:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tlMWam8fM-RyDmfSTdMuRFgDUvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:ea:43:f0:94:9c:3a:35:da:43:c7:e4:59:b2:6f:72:63:21:
8e:86:00:62:d1:a8:35:d8:ae:8e:81:cc:90:fd:c9:00:a2:cd:
b3:2f:44:c0:32:29:c7:9e:58:d6:b8:bc:8b:cb:0e:00:44:20:
d3:fb:98:7c:8e:d4:5e:f9:91:6c:cf:9b:cb:b3:cd:3c:cb:39:
d5:97:8f:e6:0a:2d:eb:76:40:64:8d:d0:93:36:b0:45:93:00:
b4:40:56:05:ec:c9:9d:d5:c5:61:31:9e:6c:14:71:84:75:54:
17:f9:3d:ed:e4:7d:a7:1b:2e:1d:89:1e:d7:fc:b6:5c:ff:eb:
84:4d:66:fd:1c:44:18:e9:8c:25:3c:fc:b3:9d:5a:93:bc:39:
ed:e5:f4:20:e4:82:a3:1b:3c:20:05:3d:8d:24:5e:08:ce:5c:
a7:ed:2a:0d:4f:9b:31:8d:a2:1a:76:0a:9d:57:b9:7f:23:80:
1f:76:24:ec:6c:dc:95:8a:44:06:f9:c4:83:65:f5:cd:b2:71:
6b:5b:62:87:89:b3:a8:63:d8:38:f9:d5:39:a5:4d:30:94:95:
21:b8:da:7d:2b:03:8d:78:26:e9:44:f0:93:96:5a:a2:0c:5e:
69:46:a8:a5:1e:90:f3:46:17:0a:ed:a8:b7:1e:9b:50:d0:81:
4e:4e:8f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:09:04 2026 by rpki-client