Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft
File: tlMWam8fM-RyDmfSTdMuRFgDUvA.mft (raw, json)
Hash identifier: MJeFtFHfgfUEWhgR8OkDK6jlDrxAAKcwjSpCYufdivI=
Subject key identifier: BC:98:0F:E9:AC:F3:C6:99:14:A6:6A:AD:0C:84:1E:1F:06:10:B3:0B
Authority key identifier: B6:53:16:6A:6F:1F:33:E4:72:0E:67:D2:4D:D3:2E:44:58:03:52:F0
Certificate issuer: /CN=b653166a6f1f33e4720e67d24dd32e44580352f0
Certificate serial: 01A10211D367243E782E2D7B0D824B2DDEC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tlMWam8fM-RyDmfSTdMuRFgDUvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft
Manifest number: 1A86
Signing time: Sat 03 Oct 2026 14:01:25 +0000
Manifest this update: Sat 03 Oct 2026 14:01:25 +0000
Manifest next update: Sun 04 Oct 2026 14:01:25 +0000
Files and hashes: 1: 4GYkj_f2Nf46ovAbI9ICl-NUPNk.roa (hash: VIkjYJrRr/vUMXwmdH32EDSuoEreHbJ8GbvjfrFA1JI=)
2: HIq_BdqUCGatF2Rbj9NrkH9Ghjw.roa (hash: 8u28dk9o5BT41xzqo9yKmYyw/VKFKW4yRANeNy2FRA8=)
3: tlMWam8fM-RyDmfSTdMuRFgDUvA.crl (hash: QM1YG2rSKdY5/rPrm0cJeXXgJ6MnDm4FGnj6F8pmDj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tlMWam8fM-RyDmfSTdMuRFgDUvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 14:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:02:11:d3:67:24:3e:78:2e:2d:7b:0d:82:4b:2d:de:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b653166a6f1f33e4720e67d24dd32e44580352f0
Validity
Not Before: Oct 3 14:01:25 2026 GMT
Not After : Oct 4 14:01:25 2026 GMT
Subject: CN=bc980fe9acf3c69914a66aad0c841e1f0610b30b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ed:7b:12:53:54:38:6c:ca:1f:b1:86:45:45:
5e:84:bc:23:9f:35:32:ba:b9:81:c2:12:6c:01:40:
db:9f:4d:51:22:a1:11:bb:bd:84:d2:d4:53:65:44:
cb:fa:4f:12:94:92:cc:c9:ed:75:08:69:8b:fd:03:
ab:0e:eb:f1:b6:22:4d:6e:cc:c4:36:43:2b:a8:32:
86:01:e5:0b:c2:39:59:09:ba:e4:3d:d0:40:e4:16:
5f:a3:15:bf:a9:9a:87:32:2d:ea:2d:d5:40:ee:90:
16:74:25:d1:56:3d:80:c2:3a:19:3a:75:d4:58:ab:
16:21:76:fc:db:7f:bc:9b:a3:a2:a3:37:11:3a:2f:
3b:f7:af:81:30:60:25:7e:d8:54:6b:f7:fb:0f:3b:
75:03:3d:2c:1e:b4:6f:4a:06:df:61:b6:9d:cb:49:
e4:e4:31:8c:61:3b:7e:57:58:5b:31:9a:00:2c:09:
c7:b4:66:0c:de:b1:04:f3:a2:78:cd:74:00:7a:8d:
3f:24:7e:bf:df:95:5b:9e:ec:8a:55:99:c4:7d:c1:
83:54:9e:ef:bf:34:0b:85:ab:4c:75:37:0e:7d:f4:
95:80:9c:cb:89:1d:16:6c:a0:34:9e:5c:2b:fb:51:
ef:29:c2:f3:b6:e7:88:b5:b7:7a:63:5f:76:3f:6b:
b3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:98:0F:E9:AC:F3:C6:99:14:A6:6A:AD:0C:84:1E:1F:06:10:B3:0B
X509v3 Authority Key Identifier:
keyid:B6:53:16:6A:6F:1F:33:E4:72:0E:67:D2:4D:D3:2E:44:58:03:52:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tlMWam8fM-RyDmfSTdMuRFgDUvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:65:ff:76:42:7d:68:4f:c3:56:cd:31:58:31:36:0f:41:7c:
b5:83:1e:25:e1:67:0b:ec:b5:88:c0:1a:60:4e:68:d6:16:64:
99:88:f5:a6:5f:03:dd:b1:70:ac:3f:a2:ad:c9:37:7c:57:04:
58:0c:c0:9a:67:f7:4b:e3:b9:b3:3b:e1:dd:5b:d3:25:f1:91:
d9:29:9e:bd:32:06:a7:42:57:4e:2b:a6:fe:e7:a4:4b:b6:f8:
04:ef:a4:52:ba:ba:cb:76:79:e8:60:5d:29:41:7a:b7:e0:a9:
9d:6a:4d:ec:67:e6:88:f1:9f:7c:d6:cb:5e:22:55:a0:b3:e9:
f6:35:ff:74:f2:66:65:d7:38:4f:e4:ec:48:05:9d:04:bb:58:
22:de:95:f6:c6:8d:98:df:70:fc:80:6c:81:e8:e3:4c:ce:a1:
58:7e:93:3e:4a:bd:2a:f9:dc:b3:ce:4c:e8:f4:db:d5:6e:ae:
be:e3:3b:1d:cf:04:07:19:64:69:dc:28:7b:e3:b7:4d:8a:49:
b9:57:7d:1a:fc:21:28:b7:af:18:d0:c2:c0:79:aa:dd:9d:c6:
42:6f:7d:73:2e:f9:28:c8:25:57:95:43:62:d8:3c:47:72:fd:
a8:de:af:96:1a:0a:db:ac:fa:16:a7:9c:d8:b2:dc:46:f6:4a:
12:a8:07:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 00:50:45 2026 by rpki-client