Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/8b14a3-190f-41a4-b66c-bdf1ba08d5fe/1/tltl1ApY9eFCwAss67gU4XpNHM4.mft
File: tltl1ApY9eFCwAss67gU4XpNHM4.mft (raw, json)
Hash identifier: camHjUhcUOhb7XKNDaxgHV5L/R/zlR6oPm0yiWbjT+8=
Subject key identifier: 67:5D:5C:1A:F2:0C:B0:64:F0:20:3E:4A:61:EE:3E:FE:29:2E:90:7A
Authority key identifier: B6:5B:65:D4:0A:58:F5:E1:42:C0:0B:2C:EB:B8:14:E1:7A:4D:1C:CE
Certificate issuer: /CN=b65b65d40a58f5e142c00b2cebb814e17a4d1cce
Certificate serial: 01A1DF831740195744266B33890910B3E800
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tltl1ApY9eFCwAss67gU4XpNHM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/8b14a3-190f-41a4-b66c-bdf1ba08d5fe/1/tltl1ApY9eFCwAss67gU4XpNHM4.mft
Manifest number: 0311
Signing time: Sun 15 Nov 2026 14:01:12 +0000
Manifest this update: Sun 15 Nov 2026 14:01:12 +0000
Manifest next update: Mon 16 Nov 2026 14:01:12 +0000
Files and hashes: 1: LwZw57KRcsSlFCkevmi86lLELNg.roa (hash: GnI2zO7N9aow5t6/as/HPtUeoPLxUymlPVs+tJmlDwE=)
2: XjSNL--AGv2RohzwC7S-Qp8mmh0.roa (hash: clDhjF0Ylt17QbqIBE+8qKYkZ8/cSocUrgMK4Nq5Jzk=)
3: tltl1ApY9eFCwAss67gU4XpNHM4.crl (hash: ABcZ3A26+R7YN7Sw9rcBliN1jx7UhpkGrnMfHl/0sow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/8b14a3-190f-41a4-b66c-bdf1ba08d5fe/1/tltl1ApY9eFCwAss67gU4XpNHM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/8b14a3-190f-41a4-b66c-bdf1ba08d5fe/1/tltl1ApY9eFCwAss67gU4XpNHM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tltl1ApY9eFCwAss67gU4XpNHM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:83:17:40:19:57:44:26:6b:33:89:09:10:b3:e8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b65b65d40a58f5e142c00b2cebb814e17a4d1cce
Validity
Not Before: Nov 15 14:01:12 2026 GMT
Not After : Nov 16 14:01:12 2026 GMT
Subject: CN=675d5c1af20cb064f0203e4a61ee3efe292e907a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6d:98:b1:3f:20:92:b6:06:9d:d4:0a:06:1f:
47:7a:c3:a5:01:7e:2d:6e:4f:61:2a:de:81:b4:42:
17:26:d6:f6:ec:25:32:2d:52:12:d9:cb:fb:81:4c:
d0:a9:86:c9:d8:54:c7:b4:63:c5:9b:6b:45:e5:22:
d7:27:c7:1b:42:2b:bd:90:6f:cb:c7:04:01:33:4c:
e9:25:a8:5a:f3:19:c7:39:00:53:14:31:a7:77:c2:
1b:37:0b:00:21:e2:20:b8:4e:3e:e2:ea:a6:fb:78:
78:06:45:ea:65:9b:a2:32:9f:b7:c9:a8:8c:c4:e1:
4f:ed:53:3d:ea:3b:38:fe:d3:e3:65:6e:54:85:31:
11:cc:09:35:23:fa:4b:f3:f1:62:2c:c4:76:8f:da:
b6:8b:76:1a:43:b2:48:45:d5:41:a6:2e:28:a2:42:
ef:0e:b6:70:1b:2a:5f:34:c4:c1:a8:82:4d:d8:30:
fa:d2:aa:73:ed:0c:4b:ac:55:05:b7:ef:61:1a:c8:
98:5b:37:55:fc:e2:6d:06:04:8b:b4:e1:f4:ab:09:
f3:33:de:3e:da:ca:7d:e4:4f:cb:20:ee:40:83:66:
0b:dd:e5:b6:8c:5e:d4:0e:74:a1:48:3a:8a:dc:87:
f1:b6:51:14:b8:e1:ef:74:f6:c0:ce:9d:60:85:82:
92:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:5D:5C:1A:F2:0C:B0:64:F0:20:3E:4A:61:EE:3E:FE:29:2E:90:7A
X509v3 Authority Key Identifier:
keyid:B6:5B:65:D4:0A:58:F5:E1:42:C0:0B:2C:EB:B8:14:E1:7A:4D:1C:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tltl1ApY9eFCwAss67gU4XpNHM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8b14a3-190f-41a4-b66c-bdf1ba08d5fe/1/tltl1ApY9eFCwAss67gU4XpNHM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8b14a3-190f-41a4-b66c-bdf1ba08d5fe/1/tltl1ApY9eFCwAss67gU4XpNHM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:01:1f:84:6e:07:8c:3b:15:fb:d0:70:16:bd:65:62:ec:70:
9c:3b:5d:06:a3:68:d4:16:52:d2:4d:e1:43:1f:c1:66:93:11:
de:3d:a9:0d:a6:56:64:ec:c9:a5:83:0d:54:0e:12:7c:5c:be:
19:32:c0:98:d0:28:09:af:9b:ee:65:cc:ba:c7:21:07:f3:03:
b5:bd:c6:2b:b2:0d:f7:f4:9e:bc:82:86:eb:e5:f6:cf:92:62:
9c:d7:a7:35:cc:4d:5c:1a:41:70:6f:24:b4:ed:03:91:5e:12:
65:1d:67:5f:d2:aa:f2:d4:e3:fa:e6:82:6c:93:3d:55:ec:cc:
00:78:97:c5:36:09:b5:b7:af:c9:3b:94:0f:6f:fd:a7:99:2e:
56:69:2a:b3:a8:1b:eb:81:f2:b2:0a:89:e2:72:3f:9b:1f:45:
40:71:29:14:8d:d5:f6:d8:08:d0:ba:f7:9f:00:1b:49:56:91:
4c:b1:0a:65:70:bf:3b:22:a0:fe:c4:b8:c6:01:f5:65:4e:8a:
5b:6f:78:cc:a7:bb:1c:e6:55:95:a5:5c:62:7a:4b:8b:66:7b:
3a:34:09:a5:26:a8:43:dc:42:5b:3e:85:e4:c2:23:3d:4a:57:
55:29:e0:b2:a8:18:b6:66:b3:a1:b2:c4:34:60:94:bc:d5:6c:
8f:87:5e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:03:57 2026 by rpki-client