Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft
File: tlMWam8fM-RyDmfSTdMuRFgDUvA.mft (raw, json)
Hash identifier: Gn/NcxhyLCcHsOyMYXiolK71NJG/2wlchRQT5yC0KQY=
Subject key identifier: 36:41:F1:DE:C6:B6:C3:DE:83:AF:1D:CF:B5:6E:CD:12:CC:FB:D7:72
Authority key identifier: B6:53:16:6A:6F:1F:33:E4:72:0E:67:D2:4D:D3:2E:44:58:03:52:F0
Certificate issuer: /CN=b653166a6f1f33e4720e67d24dd32e44580352f0
Certificate serial: 019D32D0E6FFA99A8288BDD52A77B5B15B6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tlMWam8fM-RyDmfSTdMuRFgDUvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft
Manifest number: 188D
Signing time: Sat 28 Mar 2026 05:00:44 +0000
Manifest this update: Sat 28 Mar 2026 05:00:44 +0000
Manifest next update: Sun 29 Mar 2026 05:00:44 +0000
Files and hashes: 1: 4GYkj_f2Nf46ovAbI9ICl-NUPNk.roa (hash: VIkjYJrRr/vUMXwmdH32EDSuoEreHbJ8GbvjfrFA1JI=)
2: HIq_BdqUCGatF2Rbj9NrkH9Ghjw.roa (hash: 8u28dk9o5BT41xzqo9yKmYyw/VKFKW4yRANeNy2FRA8=)
3: tlMWam8fM-RyDmfSTdMuRFgDUvA.crl (hash: y3SE2UIRW07LGE6ymBt3KwrOLrxG7nnw8Pb8rA1mfSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tlMWam8fM-RyDmfSTdMuRFgDUvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:d0:e6:ff:a9:9a:82:88:bd:d5:2a:77:b5:b1:5b:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b653166a6f1f33e4720e67d24dd32e44580352f0
Validity
Not Before: Mar 28 05:00:44 2026 GMT
Not After : Mar 29 05:00:44 2026 GMT
Subject: CN=3641f1dec6b6c3de83af1dcfb56ecd12ccfbd772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:64:c9:3f:d8:ac:30:16:36:80:a5:49:d3:8a:
f0:43:7e:83:3e:48:93:f1:31:f5:c8:fd:cd:79:28:
1d:8c:36:75:21:bc:c6:ef:9a:96:40:39:00:4d:11:
64:8f:a9:90:a2:1e:aa:02:ba:9f:9c:36:c3:d2:60:
1c:ed:1c:59:91:37:d9:f4:8e:35:14:a7:e3:9c:30:
b0:74:56:1f:c2:c5:a9:63:e2:ad:18:bb:27:20:f3:
ce:d1:3b:9d:9e:de:03:da:af:69:1e:e0:70:87:53:
0b:6b:c9:e9:24:20:dc:38:a0:a9:94:10:dc:d5:fc:
12:6a:5d:30:a3:7a:e9:46:eb:a6:56:a6:f4:cb:69:
40:ef:53:1a:04:b3:ff:ee:5f:5e:08:9b:34:ef:53:
09:8a:64:72:69:d4:cd:ae:0a:b3:c9:94:b5:f8:1e:
9d:87:2b:cd:92:b0:60:ef:33:9b:5f:39:89:87:7a:
04:88:62:4d:67:2a:b0:65:44:07:18:4d:81:ea:07:
5f:e0:1e:18:26:57:aa:45:2d:c6:cc:01:34:d0:34:
c8:85:a5:e2:b1:38:18:d2:ab:bd:20:61:08:64:f6:
b0:9f:95:e7:6e:2f:2b:33:89:90:95:3c:f0:fd:d1:
01:1d:50:57:f1:7f:be:88:a4:2e:ce:75:4f:a7:2b:
b2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:41:F1:DE:C6:B6:C3:DE:83:AF:1D:CF:B5:6E:CD:12:CC:FB:D7:72
X509v3 Authority Key Identifier:
keyid:B6:53:16:6A:6F:1F:33:E4:72:0E:67:D2:4D:D3:2E:44:58:03:52:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tlMWam8fM-RyDmfSTdMuRFgDUvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:c6:fb:ce:0d:85:5a:ee:df:3d:10:04:ed:0d:62:27:de:bf:
8b:2b:88:d7:c1:88:e5:bc:45:8a:11:d7:5b:57:0d:08:e4:e8:
d8:9b:ab:8f:28:1d:cb:35:c0:de:c1:4f:8c:66:91:31:83:7e:
41:16:44:7e:a2:bb:cd:59:c6:43:5a:6d:27:ee:44:c9:c6:52:
1e:ae:66:14:bd:b4:59:d4:cc:ab:cf:0a:3e:7f:95:53:3c:da:
58:ba:20:b2:1d:93:da:bf:56:eb:66:38:46:02:4a:cf:3c:9a:
cf:fb:53:25:8c:46:fa:0f:e5:b0:61:b0:2b:bd:07:cb:bd:19:
c6:00:b4:a6:e8:4f:a9:9d:ac:80:37:c4:36:53:3e:03:e6:a5:
ed:f5:60:60:ae:2d:4e:24:b0:d3:df:2d:36:9f:b1:9b:55:d4:
23:ee:08:23:e2:6e:b6:87:eb:87:57:f3:86:6c:52:af:4c:c5:
2e:6b:f5:a4:25:65:7f:24:a5:86:a4:5a:a1:a1:4f:90:3f:35:
41:f9:30:94:41:85:c7:8e:5d:6b:66:cb:f3:76:a2:90:8f:9e:
20:56:38:eb:9f:08:8c:10:a2:2a:de:d5:56:e6:b9:9c:2f:73:
03:ac:a8:a3:56:a9:9c:21:d2:fb:c3:3c:90:b8:a7:3d:ee:b2:
5f:12:1a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:33:07 2026 by rpki-client