Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/e2aac5-c04d-4ae0-8bf3-9e3d89d9e617/1/TLIktT7JyLF_MYlbFqjUVx8OaXA.mft
File: TLIktT7JyLF_MYlbFqjUVx8OaXA.mft (raw, json)
Hash identifier: JOZBllQxEfl3ocrMhfILbtJ6jM8IrjoTDo11r6lAUBI=
Subject key identifier: 1B:51:57:E1:49:A1:AC:E0:F6:95:18:34:30:91:9B:E9:E7:F1:53:52
Authority key identifier: 4C:B2:24:B5:3E:C9:C8:B1:7F:31:89:5B:16:A8:D4:57:1F:0E:69:70
Certificate issuer: /CN=4cb224b53ec9c8b17f31895b16a8d4571f0e6970
Certificate serial: 019D2583B7983FD350068901333180451EB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TLIktT7JyLF_MYlbFqjUVx8OaXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/e2aac5-c04d-4ae0-8bf3-9e3d89d9e617/1/TLIktT7JyLF_MYlbFqjUVx8OaXA.mft
Manifest number: 0620
Signing time: Wed 25 Mar 2026 15:01:22 +0000
Manifest this update: Wed 25 Mar 2026 15:01:22 +0000
Manifest next update: Thu 26 Mar 2026 15:01:22 +0000
Files and hashes: 1: OmNYh4uARDq1ZHJac3Gy8m3tuys.roa (hash: FCrDfeFT2pJ/Q6YRp1wjXdR8Urjp7+4nxbesJ1y96Mg=)
2: TLIktT7JyLF_MYlbFqjUVx8OaXA.crl (hash: VYt/xnIcg2Mi31xMKjJgswMR0oUHb5/5P1W0/wljThE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/e2aac5-c04d-4ae0-8bf3-9e3d89d9e617/1/TLIktT7JyLF_MYlbFqjUVx8OaXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/e2aac5-c04d-4ae0-8bf3-9e3d89d9e617/1/TLIktT7JyLF_MYlbFqjUVx8OaXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TLIktT7JyLF_MYlbFqjUVx8OaXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:b7:98:3f:d3:50:06:89:01:33:31:80:45:1e:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cb224b53ec9c8b17f31895b16a8d4571f0e6970
Validity
Not Before: Mar 25 15:01:22 2026 GMT
Not After : Mar 26 15:01:22 2026 GMT
Subject: CN=1b5157e149a1ace0f695183430919be9e7f15352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:21:77:9d:7d:d4:89:74:e8:ab:dd:d3:2f:e7:
33:9a:95:93:3d:a7:94:51:3f:7f:10:b2:5c:cf:77:
20:dd:6b:76:c8:c4:5a:71:ee:ca:02:25:22:49:c9:
36:3d:3e:90:43:8c:42:3f:7e:f2:7c:50:34:a2:af:
3b:61:83:57:18:f2:c5:0b:1a:be:9d:6e:21:2d:f9:
9a:e8:6f:7d:af:70:9a:c6:51:39:af:04:5b:a5:51:
dd:77:98:dd:df:21:ba:6e:94:e5:f3:37:29:ee:3e:
a3:07:19:d1:15:d0:f6:09:42:be:11:51:2f:a7:22:
d6:c8:82:1c:e2:40:3e:f1:1d:cb:e9:ad:60:12:bd:
c4:55:0d:bb:1c:6a:e5:f3:b6:dc:d9:91:16:aa:7c:
5c:0d:4a:8e:fb:57:b8:81:18:cb:9e:f9:d9:06:a4:
2b:16:c5:aa:71:6e:43:20:aa:0d:e0:82:de:31:3b:
08:c5:2d:eb:48:8a:84:98:75:25:76:2f:48:9a:b4:
55:38:10:02:af:25:01:d0:3e:8c:9d:7e:84:47:a1:
90:1f:01:33:bd:6d:1c:1c:dd:66:cb:da:87:4c:53:
4e:70:fc:34:1d:50:0b:fc:b2:d6:b3:7d:30:62:5b:
ed:a9:df:8d:ac:e5:da:21:89:bf:b5:95:f6:35:e3:
ac:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:51:57:E1:49:A1:AC:E0:F6:95:18:34:30:91:9B:E9:E7:F1:53:52
X509v3 Authority Key Identifier:
keyid:4C:B2:24:B5:3E:C9:C8:B1:7F:31:89:5B:16:A8:D4:57:1F:0E:69:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TLIktT7JyLF_MYlbFqjUVx8OaXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/e2aac5-c04d-4ae0-8bf3-9e3d89d9e617/1/TLIktT7JyLF_MYlbFqjUVx8OaXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/e2aac5-c04d-4ae0-8bf3-9e3d89d9e617/1/TLIktT7JyLF_MYlbFqjUVx8OaXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:99:d9:01:85:2e:26:01:1f:53:43:91:09:d2:fa:18:ed:9e:
14:55:57:f3:7b:52:2a:e1:a6:c6:8e:c6:19:aa:be:35:9d:39:
fe:b2:4a:cd:7b:62:af:32:1d:94:42:44:42:72:59:2a:aa:2f:
09:76:ff:62:6c:75:e0:ed:50:dc:4c:63:84:32:eb:41:71:ef:
a9:34:00:eb:11:43:1c:d3:41:36:7e:bc:09:25:8a:d1:e0:b2:
c9:62:5b:80:27:bb:33:ce:15:25:9c:f6:8c:9d:f3:8f:69:89:
86:17:79:48:0d:7d:10:0b:ee:ea:bd:d8:a2:6a:b7:07:7b:72:
d1:d9:e2:f4:23:b1:23:88:45:58:20:12:3c:f6:a7:ca:83:5f:
68:75:fc:26:7e:a2:1d:01:88:6a:3d:1c:00:50:69:68:08:67:
61:8f:7a:c7:ab:43:f6:c3:9c:31:7f:07:1f:51:5b:08:15:8d:
64:19:3b:90:6c:eb:02:ad:78:46:14:0a:b9:3f:3e:12:3a:38:
8d:8f:d9:54:87:ce:a4:7f:cf:0e:cb:4e:c0:f2:db:2f:34:f9:
e1:4f:59:da:7b:33:ec:c4:04:ce:17:06:7f:c6:de:c9:07:2e:
e1:58:4a:ff:a9:29:f5:77:82:b9:50:60:68:2a:dc:cf:c1:9f:
cd:6f:a1:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:08 2026 by rpki-client