Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/8b14a3-190f-41a4-b66c-bdf1ba08d5fe/1/tltl1ApY9eFCwAss67gU4XpNHM4.mft
File: tltl1ApY9eFCwAss67gU4XpNHM4.mft (raw, json)
Hash identifier: PqJx7Tkg8BfZK7lyleHZZzL43tYLuu1rf9CXx7h9JQE=
Subject key identifier: 8B:40:CD:56:B3:EC:03:56:26:6E:81:59:F3:EE:B5:80:05:EE:53:43
Authority key identifier: B6:5B:65:D4:0A:58:F5:E1:42:C0:0B:2C:EB:B8:14:E1:7A:4D:1C:CE
Certificate issuer: /CN=b65b65d40a58f5e142c00b2cebb814e17a4d1cce
Certificate serial: 019D2A72F0B37B4EB8CCD24801FD9E6A0267
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tltl1ApY9eFCwAss67gU4XpNHM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/8b14a3-190f-41a4-b66c-bdf1ba08d5fe/1/tltl1ApY9eFCwAss67gU4XpNHM4.mft
Manifest number: A1
Signing time: Thu 26 Mar 2026 14:01:08 +0000
Manifest this update: Thu 26 Mar 2026 14:01:08 +0000
Manifest next update: Fri 27 Mar 2026 14:01:08 +0000
Files and hashes: 1: LwZw57KRcsSlFCkevmi86lLELNg.roa (hash: GnI2zO7N9aow5t6/as/HPtUeoPLxUymlPVs+tJmlDwE=)
2: XjSNL--AGv2RohzwC7S-Qp8mmh0.roa (hash: clDhjF0Ylt17QbqIBE+8qKYkZ8/cSocUrgMK4Nq5Jzk=)
3: tltl1ApY9eFCwAss67gU4XpNHM4.crl (hash: vk9/qZw57xaZkX9JlrShtoDC8V72QR7xozUyU6KnCD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/8b14a3-190f-41a4-b66c-bdf1ba08d5fe/1/tltl1ApY9eFCwAss67gU4XpNHM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/8b14a3-190f-41a4-b66c-bdf1ba08d5fe/1/tltl1ApY9eFCwAss67gU4XpNHM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tltl1ApY9eFCwAss67gU4XpNHM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:f0:b3:7b:4e:b8:cc:d2:48:01:fd:9e:6a:02:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b65b65d40a58f5e142c00b2cebb814e17a4d1cce
Validity
Not Before: Mar 26 14:01:08 2026 GMT
Not After : Mar 27 14:01:08 2026 GMT
Subject: CN=8b40cd56b3ec0356266e8159f3eeb58005ee5343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:22:3f:ca:35:57:b5:23:72:62:1c:0a:80:96:
41:76:cb:3e:de:8e:31:e3:82:d7:2b:a4:57:1b:05:
79:6c:4c:c4:2b:d7:24:d0:51:a4:99:6c:17:37:83:
12:6b:8a:83:17:32:47:e3:0d:08:58:c4:50:fb:e9:
e7:16:57:96:d1:d6:32:47:aa:17:94:ed:a3:fe:ac:
9d:ef:d9:4e:88:f0:ce:7a:a2:a3:18:59:a8:9d:3a:
53:b0:0e:05:07:0b:b7:d4:c0:d2:74:8f:a9:7e:14:
a9:35:93:93:32:fc:19:af:e4:a2:89:94:b5:ef:87:
7d:ce:2f:a7:da:40:31:3a:ba:26:05:a4:a2:c6:d2:
80:f2:d3:5c:a4:8c:72:20:3c:32:07:54:c4:7a:53:
f7:94:83:4f:78:88:48:70:4a:a7:28:70:ce:c8:8d:
c0:20:89:25:71:10:61:01:41:fc:84:18:d6:93:5c:
8e:71:3a:f5:49:f4:db:af:a2:e7:f0:ee:ea:53:81:
74:44:53:52:65:35:fe:92:8b:f5:63:06:4f:ec:8d:
c3:10:e3:f1:18:15:a6:6c:59:61:05:5a:3e:b1:3f:
aa:84:ed:54:38:25:5d:cf:b0:e8:23:3b:ef:c7:d9:
6e:3c:f7:eb:1e:95:07:b2:ad:3b:45:3f:bf:d6:ca:
a2:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:40:CD:56:B3:EC:03:56:26:6E:81:59:F3:EE:B5:80:05:EE:53:43
X509v3 Authority Key Identifier:
keyid:B6:5B:65:D4:0A:58:F5:E1:42:C0:0B:2C:EB:B8:14:E1:7A:4D:1C:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tltl1ApY9eFCwAss67gU4XpNHM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8b14a3-190f-41a4-b66c-bdf1ba08d5fe/1/tltl1ApY9eFCwAss67gU4XpNHM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8b14a3-190f-41a4-b66c-bdf1ba08d5fe/1/tltl1ApY9eFCwAss67gU4XpNHM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:0f:8a:31:1c:3d:7a:2e:44:9e:41:96:14:a2:82:9e:61:b9:
db:8b:33:0b:8b:1d:4e:00:ad:28:45:1c:2f:3b:d1:d7:dd:c2:
9d:5e:aa:1e:c0:09:42:bd:a7:d0:a6:03:ce:d7:26:58:cc:92:
81:ef:ab:ff:6d:ff:d1:15:e1:ac:38:a7:2f:80:61:a5:8f:60:
bf:78:15:91:d1:57:c5:f6:5a:4e:d2:f7:4c:76:1e:aa:c6:ad:
72:8e:b5:10:d9:52:34:d0:c6:cc:a9:85:ff:df:d4:ef:c1:9b:
a7:96:65:68:da:b5:16:ea:25:9f:f4:7e:38:f1:6b:36:34:36:
c8:23:30:06:5b:87:ff:aa:0d:a2:94:2d:d5:15:72:58:80:84:
bf:6f:74:90:a2:08:26:5d:72:f5:99:3f:aa:9c:c6:9b:af:b7:
fb:4f:ec:a4:02:fd:26:0c:ce:7a:7f:8b:3b:73:f0:da:d7:62:
a3:69:92:7d:14:5d:74:07:6c:e4:62:a7:fa:4c:33:3f:a8:81:
97:73:69:de:64:b6:0c:3f:11:8b:cb:1e:2a:a6:0e:ab:49:0b:
70:b2:da:97:41:7e:ed:b7:c9:22:43:6b:4c:c5:1d:a1:af:11:
ba:08:48:5e:0a:47:4a:ab:0b:62:69:0c:ad:2e:ec:b9:74:d5:
e5:18:52:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qcvCze064zNJIAf2eagJnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2NWI2NWQ0MGE1OGY1ZTE0MmMwMGIyY2ViYjgxNGUxN2E0
ZDFjY2UwHhcNMjYwMzI2MTQwMTA4WhcNMjYwMzI3MTQwMTA4WjAzMTEwLwYDVQQD
Eyg4YjQwY2Q1NmIzZWMwMzU2MjY2ZTgxNTlmM2VlYjU4MDA1ZWU1MzQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6yI/yjVXtSNyYhwKgJZBdss+3o4x
44LXK6RXGwV5bEzEK9ck0FGkmWwXN4MSa4qDFzJH4w0IWMRQ++nnFleW0dYyR6oX
lO2j/qyd79lOiPDOeqKjGFmonTpTsA4FBwu31MDSdI+pfhSpNZOTMvwZr+SiiZS1
74d9zi+n2kAxOromBaSixtKA8tNcpIxyIDwyB1TEelP3lINPeIhIcEqnKHDOyI3A
IIklcRBhAUH8hBjWk1yOcTr1SfTbr6Ln8O7qU4F0RFNSZTX+kov1YwZP7I3DEOPx
GBWmbFlhBVo+sT+qhO1UOCVdz7DoIzvvx9luPPfrHpUHsq07RT+/1sqiSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFItAzVaz7ANWJm6BWfPutYAF7lNDMB8GA1UdIwQY
MBaAFLZbZdQKWPXhQsALLOu4FOF6TRzOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGx0bDFBcFk5ZUZDd0FzczY3Z1U0WHBOSE00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC84YjE0YTMtMTkwZi00MWE0LWI2NmMt
YmRmMWJhMDhkNWZlLzEvdGx0bDFBcFk5ZUZDd0FzczY3Z1U0WHBOSE00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC84YjE0YTMtMTkwZi00MWE0LWI2NmMtYmRmMWJhMDhkNWZl
LzEvdGx0bDFBcFk5ZUZDd0FzczY3Z1U0WHBOSE00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKg+KMRw9
ei5EnkGWFKKCnmG524szC4sdTgCtKEUcLzvR193CnV6qHsAJQr2n0KYDztcmWMyS
ge+r/23/0RXhrDinL4BhpY9gv3gVkdFXxfZaTtL3THYeqsatco61ENlSNNDGzKmF
/9/U78Gbp5ZlaNq1Fuoln/R+OPFrNjQ2yCMwBluH/6oNopQt1RVyWICEv290kKII
Jl1y9Zk/qpzGm6+3+0/spAL9JgzOen+LO3Pw2tdio2mSfRRddAds5GKn+kwzP6iB
l3Np3mS2DD8Ri8seKqYOq0kLcLLal0F+7bfJIkNrTMUdoa8RughIXgpHSqsLYmkM
rS7suXTV5RhS+A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:45:15 2026 by rpki-client