Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/8b14a3-190f-41a4-b66c-bdf1ba08d5fe/1/tltl1ApY9eFCwAss67gU4XpNHM4.mft
File: tltl1ApY9eFCwAss67gU4XpNHM4.mft (raw, json)
Hash identifier: o76ziLjWtIvDZj3bAAhf/yCCM4uAtLgiMEWPW5LRuN0=
Subject key identifier: 98:85:FA:23:BB:7E:F2:3C:BD:E4:5E:E3:FC:5F:06:BB:04:DB:4B:1C
Authority key identifier: B6:5B:65:D4:0A:58:F5:E1:42:C0:0B:2C:EB:B8:14:E1:7A:4D:1C:CE
Certificate issuer: /CN=b65b65d40a58f5e142c00b2cebb814e17a4d1cce
Certificate serial: 01A0D8DEF0003EC7B4092F5A1377504E4AC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tltl1ApY9eFCwAss67gU4XpNHM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/8b14a3-190f-41a4-b66c-bdf1ba08d5fe/1/tltl1ApY9eFCwAss67gU4XpNHM4.mft
Manifest number: 0289
Signing time: Fri 25 Sep 2026 14:01:24 +0000
Manifest this update: Fri 25 Sep 2026 14:01:24 +0000
Manifest next update: Sat 26 Sep 2026 14:01:24 +0000
Files and hashes: 1: LwZw57KRcsSlFCkevmi86lLELNg.roa (hash: GnI2zO7N9aow5t6/as/HPtUeoPLxUymlPVs+tJmlDwE=)
2: XjSNL--AGv2RohzwC7S-Qp8mmh0.roa (hash: clDhjF0Ylt17QbqIBE+8qKYkZ8/cSocUrgMK4Nq5Jzk=)
3: tltl1ApY9eFCwAss67gU4XpNHM4.crl (hash: lYOjh5melGs3t6gbxfryiaPtVTUxk35Kgfb7qWMsuD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/8b14a3-190f-41a4-b66c-bdf1ba08d5fe/1/tltl1ApY9eFCwAss67gU4XpNHM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/8b14a3-190f-41a4-b66c-bdf1ba08d5fe/1/tltl1ApY9eFCwAss67gU4XpNHM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tltl1ApY9eFCwAss67gU4XpNHM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:de:f0:00:3e:c7:b4:09:2f:5a:13:77:50:4e:4a:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b65b65d40a58f5e142c00b2cebb814e17a4d1cce
Validity
Not Before: Sep 25 14:01:24 2026 GMT
Not After : Sep 26 14:01:24 2026 GMT
Subject: CN=9885fa23bb7ef23cbde45ee3fc5f06bb04db4b1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:da:5a:35:3b:c7:bb:b8:63:ce:c4:7f:b2:70:
2f:38:52:2b:b7:5e:48:07:25:a2:73:94:ed:b2:45:
6b:ba:5b:13:07:83:c1:59:de:38:6f:36:a3:fc:a1:
71:85:f3:05:eb:6e:12:ab:48:a5:de:43:b4:cf:67:
61:85:e5:f7:05:df:df:75:aa:e5:46:db:b1:e1:fc:
c3:9e:93:ed:1a:36:1c:c3:d3:4b:96:48:73:fd:41:
65:74:70:8f:62:4c:54:ad:80:bf:e4:02:84:93:82:
8d:05:3e:14:7f:ca:f9:35:fb:8d:9f:ab:ba:b1:68:
62:53:11:2b:75:a9:71:38:63:14:43:29:03:85:f2:
c8:eb:ba:0d:06:20:4d:13:51:02:35:b6:a1:df:af:
2e:bb:21:9c:47:74:72:38:67:ba:78:3b:6d:13:ef:
0a:e1:3d:89:da:6c:f3:18:95:ec:9c:49:c8:84:13:
d8:3e:9b:25:a5:c5:95:05:b9:e6:0c:98:f5:29:63:
41:c6:1e:94:7e:65:6c:ce:c2:8f:b0:cd:1b:37:12:
d8:c4:1e:73:94:24:bf:ad:1e:38:59:75:af:7f:98:
ea:03:65:1c:18:11:04:ff:2d:22:79:e5:43:d5:64:
59:aa:2b:95:4a:1d:78:d5:e2:15:a1:01:ea:5d:6b:
8c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:85:FA:23:BB:7E:F2:3C:BD:E4:5E:E3:FC:5F:06:BB:04:DB:4B:1C
X509v3 Authority Key Identifier:
keyid:B6:5B:65:D4:0A:58:F5:E1:42:C0:0B:2C:EB:B8:14:E1:7A:4D:1C:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tltl1ApY9eFCwAss67gU4XpNHM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8b14a3-190f-41a4-b66c-bdf1ba08d5fe/1/tltl1ApY9eFCwAss67gU4XpNHM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8b14a3-190f-41a4-b66c-bdf1ba08d5fe/1/tltl1ApY9eFCwAss67gU4XpNHM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:32:18:6b:94:19:c2:ab:39:66:35:e1:79:0b:4e:26:9b:1e:
db:db:d1:0a:08:2b:58:31:94:dd:6b:92:5f:14:90:a4:34:21:
8d:4d:77:8d:35:12:c2:ba:d9:97:36:fe:7e:20:2f:e0:c1:12:
b2:d4:11:80:b7:b5:ad:37:2c:a2:62:7a:d7:2c:db:8c:c2:f4:
05:ae:4a:20:a8:2d:cc:64:06:27:de:d7:08:1b:40:95:1a:2c:
cf:21:00:a9:c8:02:e4:38:51:9f:44:f6:34:83:e4:0a:6a:79:
49:93:83:9e:a8:9b:93:b0:4e:be:19:96:25:ce:1b:a6:cb:a9:
0e:2a:8b:ec:29:ed:9e:05:bb:e2:5a:87:b2:77:a9:a0:63:ea:
f4:52:0b:2d:3b:83:4f:87:a3:d9:22:ae:b5:3d:57:d9:18:7a:
e3:3f:ae:ae:3b:1f:76:c3:1a:bf:3d:c1:97:52:3e:0f:0e:13:
b2:6f:06:31:07:a6:c1:04:93:e5:53:00:f9:1f:9f:14:88:69:
7a:3c:dd:c0:ea:ef:e2:80:69:24:32:5c:03:14:71:a3:c5:e9:
9f:03:b2:fc:71:3d:2a:9b:ab:c0:3b:b3:96:d5:c1:22:b0:fa:
ac:52:34:50:5a:76:c7:a8:b0:f7:cc:e8:fa:a0:83:1d:e8:68:
83:ec:8a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:32:51 2026 by rpki-client