Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft
File: TIl_GjSX674nueLw1vPq4rvmiyc.mft (raw, json)
Hash identifier: hDOYzC+u15/1fF3T4jD/9WZvwQgeREJTMdk0UYDKj2A=
Subject key identifier: 0D:1A:B2:79:BA:28:A9:8D:C9:A6:9D:FA:71:56:FD:1D:81:D1:73:BD
Authority key identifier: 4C:89:7F:1A:34:97:EB:BE:27:B9:E2:F0:D6:F3:EA:E2:BB:E6:8B:27
Certificate issuer: /CN=4c897f1a3497ebbe27b9e2f0d6f3eae2bbe68b27
Certificate serial: 019FA97588050D29948746630097FC8AC9C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIl_GjSX674nueLw1vPq4rvmiyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft
Manifest number: 0E2E
Signing time: Tue 28 Jul 2026 16:01:19 +0000
Manifest this update: Tue 28 Jul 2026 16:01:19 +0000
Manifest next update: Wed 29 Jul 2026 16:01:19 +0000
Files and hashes: 1: HH1XX0C9mVqJ3jkZsABD61Kzc2k.roa (hash: bmQ/ag1Lu6nwLlZv2LxE+C1ZMBCU64BZNJ1w9Xn7AYU=)
2: TIl_GjSX674nueLw1vPq4rvmiyc.crl (hash: TnSEzbAmveLuB+Aeomy1zMW3D7bD/A9LYT9Y5N51tSU=)
3: Y-EkxIWzhMw8JWDSxUZBxNOktAc.roa (hash: rinRF7QuUuJdb4wOaRb/y6P9GDaazeTC1vT+KTNoxt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TIl_GjSX674nueLw1vPq4rvmiyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 16:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:88:05:0d:29:94:87:46:63:00:97:fc:8a:c9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c897f1a3497ebbe27b9e2f0d6f3eae2bbe68b27
Validity
Not Before: Jul 28 16:01:19 2026 GMT
Not After : Jul 29 16:01:19 2026 GMT
Subject: CN=0d1ab279ba28a98dc9a69dfa7156fd1d81d173bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8a:16:a0:42:f7:f2:28:83:e5:53:51:e0:e9:
21:94:cf:85:8d:02:3e:60:e0:0f:b7:31:0d:db:27:
e9:b8:77:01:e6:2d:7a:91:f2:11:90:51:58:8a:b7:
ae:87:62:04:d7:c6:8f:d6:bb:81:8e:b2:69:b2:52:
ab:43:21:3f:ee:f9:32:0f:64:28:4e:62:46:cf:6c:
d6:88:4e:cb:12:ff:6a:c1:3e:e8:36:4d:f3:4d:e9:
51:9b:ba:f9:1d:4d:af:f4:c9:96:8f:b2:c0:65:ef:
f2:51:07:98:3f:0f:b2:6c:c7:39:42:7d:2f:54:8b:
ab:17:34:c9:a7:c2:e4:9c:34:b0:f7:ec:48:63:02:
b6:30:95:fe:15:9f:fd:4c:0b:01:6d:71:8f:c6:c6:
28:4c:d1:ea:f1:cc:58:ed:fe:6b:fb:5e:39:05:42:
26:4d:46:4e:4b:41:d1:9c:85:f6:26:34:b4:52:3f:
3e:4e:65:27:cf:41:b9:db:22:43:99:c4:bd:2c:0c:
ec:7f:bb:3a:59:2b:5a:27:61:78:33:03:e5:db:9e:
ff:8b:c1:b4:89:c7:70:88:0c:04:b1:99:1e:af:03:
cf:d9:7d:01:67:46:7b:84:75:3c:c3:82:5b:f1:6c:
51:5f:c7:81:cf:ed:c9:2a:77:fd:ee:32:12:05:88:
b4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:1A:B2:79:BA:28:A9:8D:C9:A6:9D:FA:71:56:FD:1D:81:D1:73:BD
X509v3 Authority Key Identifier:
keyid:4C:89:7F:1A:34:97:EB:BE:27:B9:E2:F0:D6:F3:EA:E2:BB:E6:8B:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIl_GjSX674nueLw1vPq4rvmiyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:f9:46:b4:59:ff:d9:90:61:14:ec:69:32:ac:3e:5e:20:f4:
9a:9b:4d:7d:ae:a7:04:2b:4a:cb:b6:f5:31:20:b1:aa:8c:a2:
94:6c:ba:f1:95:8f:52:e1:f3:3b:cb:89:d5:57:2c:3b:ea:07:
42:05:36:9e:2d:fe:83:e3:58:26:17:c5:9b:47:be:30:fd:e3:
95:a9:4b:04:33:a2:0c:d6:5f:53:2d:5a:ab:9e:48:e9:f5:26:
5b:8c:c8:52:fb:99:c8:89:1e:37:93:b9:78:81:91:e6:e1:8f:
8b:2b:52:df:7a:6a:7e:0e:3b:4e:03:1f:e7:c3:f9:50:76:8e:
07:c2:b9:ed:77:8a:9c:79:80:4f:47:16:c5:d7:15:49:82:bb:
f3:fb:1c:e4:f3:5f:7e:20:f6:b7:20:02:d8:a9:06:06:8e:da:
2f:d6:07:dc:f4:d9:d5:02:15:f3:69:59:a0:2d:70:47:a3:5f:
33:11:65:b8:8e:5d:67:08:5e:e8:5c:fb:31:fa:4d:cd:ac:d3:
5d:ad:24:41:1a:a3:00:17:13:0d:20:2f:d5:68:21:5c:8b:f5:
0d:91:31:11:a3:60:8d:4d:53:9f:3f:41:5d:c9:25:4f:40:34:
09:07:c5:6a:d9:2a:62:2d:eb:b8:e0:1b:36:72:c6:0c:4a:00:
8c:2f:e0:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pdYgFDSmUh0ZjAJf8isnAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjODk3ZjFhMzQ5N2ViYmUyN2I5ZTJmMGQ2ZjNlYWUyYmJl
NjhiMjcwHhcNMjYwNzI4MTYwMTE5WhcNMjYwNzI5MTYwMTE5WjAzMTEwLwYDVQQD
EygwZDFhYjI3OWJhMjhhOThkYzlhNjlkZmE3MTU2ZmQxZDgxZDE3M2JkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIoWoEL38iiD5VNR4OkhlM+FjQI+
YOAPtzEN2yfpuHcB5i16kfIRkFFYireuh2IE18aP1ruBjrJpslKrQyE/7vkyD2Qo
TmJGz2zWiE7LEv9qwT7oNk3zTelRm7r5HU2v9MmWj7LAZe/yUQeYPw+ybMc5Qn0v
VIurFzTJp8LknDSw9+xIYwK2MJX+FZ/9TAsBbXGPxsYoTNHq8cxY7f5r+145BUIm
TUZOS0HRnIX2JjS0Uj8+TmUnz0G52yJDmcS9LAzsf7s6WStaJ2F4MwPl257/i8G0
icdwiAwEsZkerwPP2X0BZ0Z7hHU8w4Jb8WxRX8eBz+3JKnf97jISBYi0iQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA0asnm6KKmNyaad+nFW/R2B0XO9MB8GA1UdIwQY
MBaAFEyJfxo0l+u+J7ni8Nbz6uK75osnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVElsX0dqU1g2NzRudWVMdzF2UHE0cnZtaXljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zOGU5NzUtMWY0Zi00MTE0LWJmYTEt
YTc5ZGExYTg1NTEzLzEvVElsX0dqU1g2NzRudWVMdzF2UHE0cnZtaXljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8zOGU5NzUtMWY0Zi00MTE0LWJmYTEtYTc5ZGExYTg1NTEz
LzEvVElsX0dqU1g2NzRudWVMdzF2UHE0cnZtaXljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgPlGtFn/
2ZBhFOxpMqw+XiD0mptNfa6nBCtKy7b1MSCxqoyilGy68ZWPUuHzO8uJ1VcsO+oH
QgU2ni3+g+NYJhfFm0e+MP3jlalLBDOiDNZfUy1aq55I6fUmW4zIUvuZyIkeN5O5
eIGR5uGPiytS33pqfg47TgMf58P5UHaOB8K57XeKnHmAT0cWxdcVSYK78/sc5PNf
fiD2tyAC2KkGBo7aL9YH3PTZ1QIV82lZoC1wR6NfMxFluI5dZwhe6Fz7MfpNzazT
Xa0kQRqjABcTDSAv1WghXIv1DZExEaNgjU1Tnz9BXcklT0A0CQfFatkqYi3ruOAb
NnLGDEoAjC/giQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 02:10:45 2026 by rpki-client