Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.mft
File: tlkY8l1WAA-IHamN4yPZGgZOAIc.mft (raw, json)
Hash identifier: uP3ElNdCjZcKEuPbNlUNZwo+xMctkbRr8Qm0avQBBvc=
Subject key identifier: 8F:17:7A:73:41:4B:2D:1E:E2:E7:F2:6F:34:C3:98:00:DF:C8:37:D6
Authority key identifier: B6:59:18:F2:5D:56:00:0F:88:1D:A9:8D:E3:23:D9:1A:06:4E:00:87
Certificate issuer: /CN=b65918f25d56000f881da98de323d91a064e0087
Certificate serial: 019D265F100A0EC040C32371C0E6EBC22B1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tlkY8l1WAA-IHamN4yPZGgZOAIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.mft
Manifest number: 188A
Signing time: Wed 25 Mar 2026 19:00:57 +0000
Manifest this update: Wed 25 Mar 2026 19:00:57 +0000
Manifest next update: Thu 26 Mar 2026 19:00:57 +0000
Files and hashes: 1: A4jAeSOUxnx4vwbriYIE5GCmR5o.roa (hash: b613GUOnj4elC/TmCyjV9WQVEF9eM0NMnIGrwY4cmkM=)
2: cD7FBll6MKk0SBDKbacyHN6_vYE.roa (hash: cJYyYoLcAXlS5p1/xiBLoInLHVf2mQgsRevDWR07J20=)
3: tlkY8l1WAA-IHamN4yPZGgZOAIc.crl (hash: QxofgagCoQhnyRqofQ+yIH79vXuaXj9NAZue6ZtqrcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tlkY8l1WAA-IHamN4yPZGgZOAIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:10:0a:0e:c0:40:c3:23:71:c0:e6:eb:c2:2b:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b65918f25d56000f881da98de323d91a064e0087
Validity
Not Before: Mar 25 19:00:57 2026 GMT
Not After : Mar 26 19:00:57 2026 GMT
Subject: CN=8f177a73414b2d1ee2e7f26f34c39800dfc837d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c6:a9:08:da:77:f6:1c:e2:8a:50:4d:93:e9:
c8:64:b5:89:81:a4:2e:43:7f:ba:bd:12:96:32:b2:
08:85:a5:2c:26:fd:cf:1a:ad:9e:a7:38:08:fd:8d:
e0:32:ce:31:92:88:86:5c:46:86:83:70:08:e8:6c:
58:1e:28:f4:cd:85:77:1f:b7:56:ae:8d:fb:bc:2c:
e0:8f:f9:59:4f:44:f4:aa:ff:69:5b:cf:40:31:83:
77:c9:1b:de:36:0e:eb:30:8b:9e:5c:2c:69:4b:fe:
60:3a:aa:5b:5b:55:60:78:a9:49:a2:10:d9:0c:e5:
08:a7:9e:5d:f9:de:15:b9:85:21:81:22:8e:9c:b4:
fe:22:68:21:21:39:f2:ca:b1:b4:4f:66:33:1b:98:
39:db:c2:e5:a4:cb:e3:63:bb:e9:97:7b:fd:9a:bc:
3f:0f:45:35:9e:8d:0c:82:44:2f:d8:74:29:0c:87:
a6:dc:ae:74:66:54:79:60:5a:c8:88:97:f8:77:75:
0b:37:aa:0c:a9:42:47:aa:da:31:78:17:47:e0:55:
4d:79:c7:9b:f4:5c:c8:5b:56:3e:0d:aa:88:17:73:
09:e6:9d:1f:f4:d0:1e:e6:18:6b:ca:df:d2:d5:3a:
b2:cd:50:f7:51:12:06:d0:7d:f7:b0:98:85:9f:99:
15:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:17:7A:73:41:4B:2D:1E:E2:E7:F2:6F:34:C3:98:00:DF:C8:37:D6
X509v3 Authority Key Identifier:
keyid:B6:59:18:F2:5D:56:00:0F:88:1D:A9:8D:E3:23:D9:1A:06:4E:00:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tlkY8l1WAA-IHamN4yPZGgZOAIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:26:4a:c5:c9:84:c9:fb:f9:9e:c2:e0:2f:5e:5e:bd:0c:94:
ff:0a:e3:15:ca:13:96:78:2f:ec:c7:ef:d1:3d:db:c9:bc:07:
8a:a3:43:45:fd:21:5b:b1:c4:ee:55:3b:1d:6d:9a:c7:52:e3:
7f:47:da:e9:bd:19:dd:c8:f6:e8:e4:9f:2a:fb:48:f5:3d:05:
8a:87:a1:c9:cb:bd:ff:d4:94:56:a2:c0:8d:ae:da:72:f5:da:
f7:1e:dd:b4:48:cf:5d:43:34:81:97:c8:48:5c:53:a5:06:c4:
99:5e:a7:6d:07:01:ae:a9:fe:30:2e:6e:f0:f4:e2:87:e6:0f:
36:d6:4b:b9:d7:2f:1a:9a:91:9c:fd:79:49:ee:69:6a:30:0b:
0f:f9:52:d3:f6:1e:a8:33:1d:fb:6c:47:16:ba:f2:d7:2a:31:
eb:28:8d:04:6f:9b:ef:29:11:47:c8:68:25:17:d4:65:4f:83:
61:d9:3f:b7:38:45:76:66:28:fc:cf:80:c6:26:59:fd:dc:ce:
bc:34:63:a4:80:7a:60:9b:de:6f:ce:07:19:6c:11:b2:fa:67:
32:cd:22:e6:21:49:0b:3f:39:f5:7d:bd:cd:2d:6c:ce:cc:55:
cf:9e:08:a1:93:a3:d1:89:d3:3c:fd:3b:2c:1a:e9:7b:3c:a1:
4c:6e:34:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:39:42 2026 by rpki-client