Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft
File: TIl_GjSX674nueLw1vPq4rvmiyc.mft (raw, json)
Hash identifier: Kr5XJPe5yeZ88xq2dfLrnfDBaO5rH4qdGcAsYDOHOGA=
Subject key identifier: 84:6B:EB:73:1E:22:94:12:A2:A4:0D:3D:8C:04:3F:9B:DC:23:24:29
Authority key identifier: 4C:89:7F:1A:34:97:EB:BE:27:B9:E2:F0:D6:F3:EA:E2:BB:E6:8B:27
Certificate issuer: /CN=4c897f1a3497ebbe27b9e2f0d6f3eae2bbe68b27
Certificate serial: 01A0E43E798A04C6E64C4B12BD629935C646
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIl_GjSX674nueLw1vPq4rvmiyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft
Manifest number: 0ED1
Signing time: Sun 27 Sep 2026 19:01:34 +0000
Manifest this update: Sun 27 Sep 2026 19:01:34 +0000
Manifest next update: Mon 28 Sep 2026 19:01:34 +0000
Files and hashes: 1: HH1XX0C9mVqJ3jkZsABD61Kzc2k.roa (hash: bmQ/ag1Lu6nwLlZv2LxE+C1ZMBCU64BZNJ1w9Xn7AYU=)
2: TIl_GjSX674nueLw1vPq4rvmiyc.crl (hash: dXDYj09bXwfc/1ouf7i+E01G3UY7X18PMGmDZfCRivE=)
3: Y-EkxIWzhMw8JWDSxUZBxNOktAc.roa (hash: rinRF7QuUuJdb4wOaRb/y6P9GDaazeTC1vT+KTNoxt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TIl_GjSX674nueLw1vPq4rvmiyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e4:3e:79:8a:04:c6:e6:4c:4b:12:bd:62:99:35:c6:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c897f1a3497ebbe27b9e2f0d6f3eae2bbe68b27
Validity
Not Before: Sep 27 19:01:34 2026 GMT
Not After : Sep 28 19:01:34 2026 GMT
Subject: CN=846beb731e229412a2a40d3d8c043f9bdc232429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f7:95:6a:18:a6:a7:f9:3f:f9:c8:75:3d:52:
c8:26:6d:dd:0e:2b:fb:a6:50:8e:e7:75:63:31:d6:
27:6b:b2:04:c7:d6:05:f5:05:9d:5e:d6:9c:66:d1:
c3:d5:85:51:2f:e8:57:a1:fd:77:c0:ea:81:c2:8d:
02:54:53:cf:c2:21:2b:da:d0:e6:e8:4b:d8:e0:b3:
e7:b9:ff:9b:60:10:c6:8d:04:c0:7b:3e:4d:02:c8:
aa:9b:5b:38:c1:8a:2e:6b:6d:45:e2:58:4d:66:19:
58:4a:47:88:db:e7:10:ef:fb:92:2c:71:e7:e3:c0:
81:f0:cb:4a:77:d1:c4:50:84:05:58:22:22:00:18:
4d:fa:ae:d0:07:7f:f5:8d:c8:0f:17:0a:e8:e5:ec:
e7:e6:ec:aa:69:24:51:c3:19:f1:2b:ae:d1:40:69:
63:14:97:66:7d:eb:c9:71:87:36:c2:a9:24:ed:d9:
d1:1b:36:6f:f6:37:2f:a4:22:8c:be:94:d8:f5:43:
cd:1a:4b:78:a1:52:25:c5:39:24:e0:ed:18:03:63:
f9:4f:19:a8:b6:d5:3f:5a:d2:ad:57:5c:56:1a:2f:
eb:39:70:25:53:b3:e5:1b:ae:4e:62:50:96:20:9e:
20:64:68:49:33:b1:41:97:09:e9:7b:20:a7:d0:81:
a8:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:6B:EB:73:1E:22:94:12:A2:A4:0D:3D:8C:04:3F:9B:DC:23:24:29
X509v3 Authority Key Identifier:
keyid:4C:89:7F:1A:34:97:EB:BE:27:B9:E2:F0:D6:F3:EA:E2:BB:E6:8B:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIl_GjSX674nueLw1vPq4rvmiyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:b9:0c:af:57:f6:85:14:e0:f5:cb:09:4e:c9:20:ef:8b:4d:
85:0a:4f:bf:13:49:39:58:89:72:31:31:02:4a:ec:33:bc:12:
f6:26:6a:7b:09:e6:8f:5e:03:b4:45:99:2e:1a:7e:22:b4:a3:
46:59:9f:7f:96:05:83:6a:b8:58:7f:4d:50:6b:64:da:12:e9:
54:20:07:2e:00:dc:84:f3:f0:2a:cc:44:c9:48:52:f7:88:65:
6b:a2:82:73:e1:98:b7:bf:e7:a3:04:b3:2b:b4:82:3b:02:35:
dd:62:d1:ac:43:4c:17:fa:e6:8c:01:c2:c4:d6:71:27:32:89:
6d:1e:14:42:16:4b:97:e8:f6:55:e8:19:4c:e2:12:5c:1d:55:
85:cb:ef:6d:08:ac:78:31:83:4e:03:96:26:89:c7:10:74:40:
dc:4d:58:88:89:9e:a6:f2:bc:fc:50:0c:2e:b1:05:73:12:ca:
81:e3:17:29:51:6f:66:df:62:fb:f7:88:bc:3e:a5:62:04:20:
be:77:f1:33:3b:3d:b5:28:e0:ad:ee:44:5b:80:94:4c:19:61:
5c:e3:d3:0a:79:4b:73:fb:53:87:be:4a:36:c2:23:4e:bc:02:
c6:27:ca:27:80:96:17:e2:67:36:a1:97:e3:46:8d:ce:18:5a:
a9:ed:70:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDkPnmKBMbmTEsSvWKZNcZGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjODk3ZjFhMzQ5N2ViYmUyN2I5ZTJmMGQ2ZjNlYWUyYmJl
NjhiMjcwHhcNMjYwOTI3MTkwMTM0WhcNMjYwOTI4MTkwMTM0WjAzMTEwLwYDVQQD
Eyg4NDZiZWI3MzFlMjI5NDEyYTJhNDBkM2Q4YzA0M2Y5YmRjMjMyNDI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4PeVahimp/k/+ch1PVLIJm3dDiv7
plCO53VjMdYna7IEx9YF9QWdXtacZtHD1YVRL+hXof13wOqBwo0CVFPPwiEr2tDm
6EvY4LPnuf+bYBDGjQTAez5NAsiqm1s4wYoua21F4lhNZhlYSkeI2+cQ7/uSLHHn
48CB8MtKd9HEUIQFWCIiABhN+q7QB3/1jcgPFwro5ezn5uyqaSRRwxnxK67RQGlj
FJdmfevJcYc2wqkk7dnRGzZv9jcvpCKMvpTY9UPNGkt4oVIlxTkk4O0YA2P5Txmo
ttU/WtKtV1xWGi/rOXAlU7PlG65OYlCWIJ4gZGhJM7FBlwnpeyCn0IGocwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIRr63MeIpQSoqQNPYwEP5vcIyQpMB8GA1UdIwQY
MBaAFEyJfxo0l+u+J7ni8Nbz6uK75osnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVElsX0dqU1g2NzRudWVMdzF2UHE0cnZtaXljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zOGU5NzUtMWY0Zi00MTE0LWJmYTEt
YTc5ZGExYTg1NTEzLzEvVElsX0dqU1g2NzRudWVMdzF2UHE0cnZtaXljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8zOGU5NzUtMWY0Zi00MTE0LWJmYTEtYTc5ZGExYTg1NTEz
LzEvVElsX0dqU1g2NzRudWVMdzF2UHE0cnZtaXljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhbkMr1f2
hRTg9csJTskg74tNhQpPvxNJOViJcjExAkrsM7wS9iZqewnmj14DtEWZLhp+IrSj
Rlmff5YFg2q4WH9NUGtk2hLpVCAHLgDchPPwKsxEyUhS94hla6KCc+GYt7/nowSz
K7SCOwI13WLRrENMF/rmjAHCxNZxJzKJbR4UQhZLl+j2VegZTOISXB1VhcvvbQis
eDGDTgOWJonHEHRA3E1YiImepvK8/FAMLrEFcxLKgeMXKVFvZt9i+/eIvD6lYgQg
vnfxMzs9tSjgre5EW4CUTBlhXOPTCnlLc/tTh75KNsIjTrwCxifKJ4CWF+JnNqGX
40aNzhhaqe1wyw==
-----END CERTIFICATE-----
Generated at Mon Sep 28 07:19:20 2026 by rpki-client