Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft
File: TIl_GjSX674nueLw1vPq4rvmiyc.mft (raw, json)
Hash identifier: JuWgd816ti7WRIQkFhZDY3woJ/MaZf+avxhVve83nxY=
Subject key identifier: F2:98:F6:96:E8:70:9F:97:9D:5C:6D:0E:7D:4B:CC:65:50:B8:FA:A7
Authority key identifier: 4C:89:7F:1A:34:97:EB:BE:27:B9:E2:F0:D6:F3:EA:E2:BB:E6:8B:27
Certificate issuer: /CN=4c897f1a3497ebbe27b9e2f0d6f3eae2bbe68b27
Certificate serial: 019D9A3E6131B70129B921197C4DC16137BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIl_GjSX674nueLw1vPq4rvmiyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft
Manifest number: 0D1D
Signing time: Fri 17 Apr 2026 07:01:12 +0000
Manifest this update: Fri 17 Apr 2026 07:01:12 +0000
Manifest next update: Sat 18 Apr 2026 07:01:12 +0000
Files and hashes: 1: HH1XX0C9mVqJ3jkZsABD61Kzc2k.roa (hash: bmQ/ag1Lu6nwLlZv2LxE+C1ZMBCU64BZNJ1w9Xn7AYU=)
2: TIl_GjSX674nueLw1vPq4rvmiyc.crl (hash: BdhtVf3+h4eFLqjmy7ZaDx74zudNXcEVlfvO1nGo37o=)
3: Y-EkxIWzhMw8JWDSxUZBxNOktAc.roa (hash: rinRF7QuUuJdb4wOaRb/y6P9GDaazeTC1vT+KTNoxt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TIl_GjSX674nueLw1vPq4rvmiyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:61:31:b7:01:29:b9:21:19:7c:4d:c1:61:37:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c897f1a3497ebbe27b9e2f0d6f3eae2bbe68b27
Validity
Not Before: Apr 17 07:01:12 2026 GMT
Not After : Apr 18 07:01:12 2026 GMT
Subject: CN=f298f696e8709f979d5c6d0e7d4bcc6550b8faa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:99:c5:18:5c:39:1e:79:f8:4e:fe:f3:bb:64:
b6:66:8b:b4:31:17:26:5a:30:1d:4d:3b:2d:38:6a:
f4:47:f4:2d:00:42:d0:bc:d5:db:34:01:71:a8:2d:
15:a0:7e:c9:fc:c1:c7:44:ce:83:a7:89:bc:8c:44:
ee:5f:4e:22:a9:75:f5:69:ea:cd:3c:3c:08:b1:27:
44:de:a0:63:eb:8b:6b:b5:a7:d0:24:a8:a9:be:a1:
44:db:bb:8a:30:6d:70:1e:3b:e5:be:3f:c6:42:4c:
d9:73:46:7b:b9:0d:22:6d:dd:1f:58:2e:41:d2:aa:
4f:71:bf:67:20:b9:3b:52:2b:2b:64:a8:66:4a:5c:
a6:db:e8:a0:ad:3a:4d:9d:9a:4d:42:47:b3:ac:1e:
02:0a:e4:ca:b0:c5:73:bf:1e:63:96:98:87:1d:65:
d1:4f:f1:f4:a5:6d:51:58:18:7f:bc:3d:15:1f:6b:
6a:a0:d8:c9:48:1b:86:09:37:1e:8c:13:f6:55:98:
07:56:36:93:a3:3b:99:81:a1:4d:80:6d:87:9b:6d:
b4:35:7f:e1:21:b5:73:52:d1:a4:4b:8d:8f:8c:51:
a0:84:70:f6:fe:76:d7:8b:b8:1c:a0:ca:e6:cb:3f:
06:0b:f2:82:20:95:bc:95:20:96:ff:94:e1:a9:cf:
cf:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:98:F6:96:E8:70:9F:97:9D:5C:6D:0E:7D:4B:CC:65:50:B8:FA:A7
X509v3 Authority Key Identifier:
keyid:4C:89:7F:1A:34:97:EB:BE:27:B9:E2:F0:D6:F3:EA:E2:BB:E6:8B:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIl_GjSX674nueLw1vPq4rvmiyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:a8:8d:33:e0:d7:92:b0:51:5a:1e:a7:70:a4:66:e1:55:5c:
4f:cf:72:90:a5:25:27:a3:18:92:b1:41:8b:5b:b4:ad:eb:61:
1c:d8:c2:79:b8:bc:36:81:46:d4:1c:1c:21:46:6a:9d:9d:26:
de:d9:36:0f:2b:2d:76:f8:96:93:9c:6e:3f:ca:b7:49:fe:5a:
12:ca:8c:d9:eb:b6:8c:70:84:c5:d1:45:44:a8:83:1e:8b:a9:
b5:7c:be:5b:b7:f7:73:47:f5:27:5a:96:13:f4:48:70:e8:ef:
c4:39:cc:11:49:7d:94:76:59:1a:4b:1b:cb:90:2c:1d:7e:25:
b9:03:7b:be:0b:ee:ed:e9:c2:c7:e9:74:1b:c0:a4:3f:8a:8b:
cb:89:16:d3:c9:f9:a4:af:db:e0:d5:7e:5b:85:71:04:6d:d1:
96:55:a3:ab:a3:d2:56:0c:a1:41:b4:60:68:2d:8c:b3:0d:48:
7a:33:86:c7:e7:6a:d0:c9:b9:1e:1e:e0:ae:e4:49:c7:31:20:
e4:08:42:ee:60:fb:1c:df:1e:b2:d7:92:72:50:f5:cb:f0:64:
e0:47:d8:63:1e:9b:9a:f4:a4:38:fc:1b:d3:98:8e:13:e0:be:
53:cc:e3:3f:52:49:3a:eb:b1:24:20:52:07:8c:f9:9b:75:ab:
83:c8:b8:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:46:12 2026 by rpki-client