Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft
File: TIl_GjSX674nueLw1vPq4rvmiyc.mft (raw, json)
Hash identifier: 1RyH90Y3c1cY9FgVxLOwu9KKt24HSyLLrShaMw8T29k=
Subject key identifier: 17:A8:AC:04:31:6B:9B:1E:3D:A4:93:13:60:AA:76:B1:37:9C:49:7F
Authority key identifier: 4C:89:7F:1A:34:97:EB:BE:27:B9:E2:F0:D6:F3:EA:E2:BB:E6:8B:27
Certificate issuer: /CN=4c897f1a3497ebbe27b9e2f0d6f3eae2bbe68b27
Certificate serial: 019CACB4F2F3C25FF6FEA9D488FA82D0B52C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIl_GjSX674nueLw1vPq4rvmiyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft
Manifest number: 0CA2
Signing time: Mon 02 Mar 2026 04:01:05 +0000
Manifest this update: Mon 02 Mar 2026 04:01:05 +0000
Manifest next update: Tue 03 Mar 2026 04:01:05 +0000
Files and hashes: 1: HH1XX0C9mVqJ3jkZsABD61Kzc2k.roa (hash: bmQ/ag1Lu6nwLlZv2LxE+C1ZMBCU64BZNJ1w9Xn7AYU=)
2: TIl_GjSX674nueLw1vPq4rvmiyc.crl (hash: WQVSGxaeZNfPdQIrk02svGoK5S1HI+SUPjV0XqgC5+w=)
3: Y-EkxIWzhMw8JWDSxUZBxNOktAc.roa (hash: rinRF7QuUuJdb4wOaRb/y6P9GDaazeTC1vT+KTNoxt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TIl_GjSX674nueLw1vPq4rvmiyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:f2:f3:c2:5f:f6:fe:a9:d4:88:fa:82:d0:b5:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c897f1a3497ebbe27b9e2f0d6f3eae2bbe68b27
Validity
Not Before: Mar 2 04:01:05 2026 GMT
Not After : Mar 3 04:01:05 2026 GMT
Subject: CN=17a8ac04316b9b1e3da4931360aa76b1379c497f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:9f:c5:16:44:bf:90:d0:1c:f1:87:7e:70:68:
db:8c:a3:59:07:93:dc:0c:81:e7:ce:2c:a4:7e:63:
fe:96:d7:8f:c5:94:49:6c:13:ef:50:03:f0:0b:82:
2e:24:4d:1f:98:7d:d0:f4:94:7e:7c:41:a1:3f:9f:
d3:a8:84:d6:6d:c7:74:39:75:b2:4f:49:b7:aa:da:
b0:0a:b5:b7:a3:ba:61:21:f2:0c:af:8d:c7:87:66:
36:aa:96:3a:ac:8b:8f:01:07:d0:dc:28:4e:a4:d4:
35:84:5e:c5:17:82:16:c1:24:3f:8e:47:3e:83:6c:
27:fd:bf:4b:59:51:96:35:86:dc:96:cb:c0:56:06:
f5:61:10:41:7e:3d:d0:18:fc:36:a1:38:1d:a1:54:
3a:32:3f:db:4b:fc:91:dd:59:c8:ac:47:ca:67:91:
11:6c:95:b0:bd:a9:cb:21:a4:2b:39:cc:49:e2:c2:
1d:13:4f:c0:55:0f:ab:27:d1:95:cf:fc:98:00:97:
f0:72:de:f6:94:fd:cf:e0:74:45:71:8f:94:8a:60:
e8:c5:b5:33:5c:01:e4:83:a6:cf:15:07:70:7d:0e:
73:ae:b2:84:00:7f:da:fd:bb:c2:c2:f1:f7:45:0a:
4d:d1:c9:87:c9:10:43:3d:cb:5e:ca:0e:c4:d3:d4:
c0:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:A8:AC:04:31:6B:9B:1E:3D:A4:93:13:60:AA:76:B1:37:9C:49:7F
X509v3 Authority Key Identifier:
keyid:4C:89:7F:1A:34:97:EB:BE:27:B9:E2:F0:D6:F3:EA:E2:BB:E6:8B:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIl_GjSX674nueLw1vPq4rvmiyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:10:de:7c:09:0c:16:6b:6a:a2:70:6f:5f:fc:79:84:2d:e8:
e8:0b:9d:29:14:55:d2:a4:39:ff:ab:40:59:5c:cf:c0:f8:fa:
0e:32:18:06:99:eb:78:d4:0f:06:33:3c:fb:98:ac:bb:14:00:
f5:94:16:b3:6c:bd:d3:79:07:a1:dd:fe:c7:65:27:4c:ee:b0:
d1:5e:94:bf:d7:d5:6b:ce:0e:98:52:e3:c7:0f:ea:e7:f6:00:
57:69:da:64:f2:a9:14:76:04:0c:91:41:25:84:5c:a0:f9:c9:
7c:ee:ba:0d:1a:d1:d8:6a:a6:6f:c3:38:dc:51:a6:ea:bf:4e:
df:54:16:9e:02:d9:7b:61:3e:75:bb:4f:11:51:0a:b4:67:08:
b5:2a:fd:29:c9:5d:76:1f:7c:6c:70:ca:1a:ce:a8:b7:9d:9f:
65:81:63:92:9c:95:b8:da:91:fb:66:8e:e5:b1:9d:3a:5f:23:
ea:5e:39:6f:cb:57:57:9a:b9:e0:af:67:06:4e:61:aa:e7:19:
74:7c:b5:04:00:13:26:7d:13:c0:2e:40:8f:91:53:0b:24:30:
7f:b0:89:4c:3e:bb:5c:1d:8e:24:4c:4a:46:66:46:33:10:b0:
9c:f3:13:0d:70:85:ed:1d:53:13:b9:1d:af:9b:ce:13:ca:bf:
75:fa:f5:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:52:10 2026 by rpki-client