
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/8b14a3-190f-41a4-b66c-bdf1ba08d5fe/1/tltl1ApY9eFCwAss67gU4XpNHM4.mft
File: tltl1ApY9eFCwAss67gU4XpNHM4.mft (raw, json)
Hash identifier: j7z2sazP7/aePydwTvvzESeHRtmqX18wjeFRWv1BCPE=
Subject key identifier: A3:9F:24:F1:55:CC:D5:40:C3:B1:8C:37:69:3D:06:18:85:07:88:8F
Authority key identifier: B6:5B:65:D4:0A:58:F5:E1:42:C0:0B:2C:EB:B8:14:E1:7A:4D:1C:CE
Certificate issuer: /CN=b65b65d40a58f5e142c00b2cebb814e17a4d1cce
Certificate serial: 019F9090B577A730F8295C6C9ACF692D7F6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tltl1ApY9eFCwAss67gU4XpNHM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/8b14a3-190f-41a4-b66c-bdf1ba08d5fe/1/tltl1ApY9eFCwAss67gU4XpNHM4.mft
Manifest number: 01DF
Signing time: Thu 23 Jul 2026 20:00:30 +0000
Manifest this update: Thu 23 Jul 2026 20:00:30 +0000
Manifest next update: Fri 24 Jul 2026 20:00:30 +0000
Files and hashes: 1: LwZw57KRcsSlFCkevmi86lLELNg.roa (hash: GnI2zO7N9aow5t6/as/HPtUeoPLxUymlPVs+tJmlDwE=)
2: XjSNL--AGv2RohzwC7S-Qp8mmh0.roa (hash: clDhjF0Ylt17QbqIBE+8qKYkZ8/cSocUrgMK4Nq5Jzk=)
3: tltl1ApY9eFCwAss67gU4XpNHM4.crl (hash: kdG6vDkHvQHyFRNJMnJHMkYSAecRJ41SbsWJt5hg5pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/8b14a3-190f-41a4-b66c-bdf1ba08d5fe/1/tltl1ApY9eFCwAss67gU4XpNHM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/8b14a3-190f-41a4-b66c-bdf1ba08d5fe/1/tltl1ApY9eFCwAss67gU4XpNHM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tltl1ApY9eFCwAss67gU4XpNHM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 20:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:b5:77:a7:30:f8:29:5c:6c:9a:cf:69:2d:7f:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b65b65d40a58f5e142c00b2cebb814e17a4d1cce
Validity
Not Before: Jul 23 20:00:30 2026 GMT
Not After : Jul 24 20:00:30 2026 GMT
Subject: CN=a39f24f155ccd540c3b18c37693d06188507888f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ba:11:df:e8:48:6c:7f:e4:e3:67:d4:12:e6:
c4:c2:49:61:50:48:0d:6e:53:33:bd:ef:61:4f:78:
24:df:45:cd:0c:73:7a:f2:65:1b:b3:02:55:dd:86:
4a:44:6e:2b:b1:8b:45:c1:6c:a9:8c:d2:63:fb:eb:
99:48:ec:62:55:fc:f9:15:37:83:5f:e7:4a:db:af:
2d:4f:c8:88:07:f4:53:e3:83:ed:73:88:6d:0a:e9:
0e:35:86:ed:fb:4a:8e:3c:d1:01:20:ff:c6:f3:6f:
a0:b4:f2:51:13:ca:b0:c5:5d:35:06:1a:57:d6:f8:
c1:4c:d2:81:7d:99:3e:22:35:98:d7:cd:fb:f3:3c:
b5:bc:8a:81:f8:9e:8f:e7:50:af:e0:28:93:65:1e:
71:c0:f6:3b:2b:da:a2:a7:26:72:c5:11:bb:68:ad:
b3:1c:91:b9:01:ab:c2:75:0f:cc:b0:a1:ac:07:f2:
c2:a3:f7:07:a0:8a:dc:ef:8c:97:81:6a:ac:29:f2:
c0:e3:d9:75:34:49:f3:d1:c5:e9:7c:87:ed:2b:67:
e6:a5:24:e5:73:9d:1c:cb:0f:05:f6:7c:72:61:ce:
ed:11:66:29:30:3b:55:e8:66:c9:d4:42:6b:c7:d1:
7b:a7:ac:a7:2f:e5:1d:67:10:ed:95:ad:79:9d:e6:
8e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:9F:24:F1:55:CC:D5:40:C3:B1:8C:37:69:3D:06:18:85:07:88:8F
X509v3 Authority Key Identifier:
keyid:B6:5B:65:D4:0A:58:F5:E1:42:C0:0B:2C:EB:B8:14:E1:7A:4D:1C:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tltl1ApY9eFCwAss67gU4XpNHM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8b14a3-190f-41a4-b66c-bdf1ba08d5fe/1/tltl1ApY9eFCwAss67gU4XpNHM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8b14a3-190f-41a4-b66c-bdf1ba08d5fe/1/tltl1ApY9eFCwAss67gU4XpNHM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:14:98:4c:bc:06:f2:35:a7:14:54:f9:29:97:17:8a:f4:57:
c7:b3:4a:23:05:78:ce:30:75:9c:38:67:48:4c:62:10:4d:b0:
2d:81:f5:ee:96:5d:96:bf:a7:7c:f9:de:d0:40:6a:0d:d4:da:
bf:19:18:7c:46:f0:09:f5:e5:3c:85:20:c3:10:3a:55:9f:06:
05:0a:aa:6f:53:b7:a9:eb:67:ad:60:48:cf:8e:df:77:35:46:
ba:fd:b9:fb:a9:36:bf:4f:44:3c:f0:fe:f6:a4:63:4d:07:01:
51:0e:5b:35:0e:b6:fb:00:00:6a:5f:39:e7:28:2d:c9:d1:13:
e2:f1:78:b3:fe:1e:1d:96:5d:4b:8b:b2:c2:e7:ba:bc:d2:05:
5d:60:c0:4f:d8:83:49:4e:89:cb:79:4d:31:80:c9:95:2c:a1:
a3:43:28:c0:b6:ba:6c:d3:0c:b0:1f:78:94:09:4e:41:9d:6a:
eb:59:eb:60:73:ef:d8:c5:38:7a:0f:75:29:fc:bc:88:b5:42:
40:c8:a2:6e:95:b4:9a:9e:92:bc:28:b2:5f:9e:2c:e4:08:98:
56:b9:47:b4:c9:1d:42:4f:31:4b:27:25:8f:fd:33:5f:02:cc:
f2:9d:43:b4:24:c1:e0:f6:ef:15:92:df:da:f3:31:aa:af:a0:
22:35:11:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QkLV3pzD4KVxsms9pLX9sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2NWI2NWQ0MGE1OGY1ZTE0MmMwMGIyY2ViYjgxNGUxN2E0
ZDFjY2UwHhcNMjYwNzIzMjAwMDMwWhcNMjYwNzI0MjAwMDMwWjAzMTEwLwYDVQQD
EyhhMzlmMjRmMTU1Y2NkNTQwYzNiMThjMzc2OTNkMDYxODg1MDc4ODhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7oR3+hIbH/k42fUEubEwklhUEgN
blMzve9hT3gk30XNDHN68mUbswJV3YZKRG4rsYtFwWypjNJj++uZSOxiVfz5FTeD
X+dK268tT8iIB/RT44Ptc4htCukONYbt+0qOPNEBIP/G82+gtPJRE8qwxV01BhpX
1vjBTNKBfZk+IjWY18378zy1vIqB+J6P51Cv4CiTZR5xwPY7K9qipyZyxRG7aK2z
HJG5AavCdQ/MsKGsB/LCo/cHoIrc74yXgWqsKfLA49l1NEnz0cXpfIftK2fmpSTl
c50cyw8F9nxyYc7tEWYpMDtV6GbJ1EJrx9F7p6ynL+UdZxDtla15neaOAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKOfJPFVzNVAw7GMN2k9BhiFB4iPMB8GA1UdIwQY
MBaAFLZbZdQKWPXhQsALLOu4FOF6TRzOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGx0bDFBcFk5ZUZDd0FzczY3Z1U0WHBOSE00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC84YjE0YTMtMTkwZi00MWE0LWI2NmMt
YmRmMWJhMDhkNWZlLzEvdGx0bDFBcFk5ZUZDd0FzczY3Z1U0WHBOSE00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC84YjE0YTMtMTkwZi00MWE0LWI2NmMtYmRmMWJhMDhkNWZl
LzEvdGx0bDFBcFk5ZUZDd0FzczY3Z1U0WHBOSE00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcRSYTLwG
8jWnFFT5KZcXivRXx7NKIwV4zjB1nDhnSExiEE2wLYH17pZdlr+nfPne0EBqDdTa
vxkYfEbwCfXlPIUgwxA6VZ8GBQqqb1O3qetnrWBIz47fdzVGuv25+6k2v09EPPD+
9qRjTQcBUQ5bNQ62+wAAal855ygtydET4vF4s/4eHZZdS4uywue6vNIFXWDAT9iD
SU6Jy3lNMYDJlSyho0MowLa6bNMMsB94lAlOQZ1q61nrYHPv2MU4eg91Kfy8iLVC
QMiibpW0mp6SvCiyX54s5AiYVrlHtMkdQk8xSyclj/0zXwLM8p1DtCTB4PbvFZLf
2vMxqq+gIjURJQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:30:39 2026 by rpki-client