Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft
File: TIl_GjSX674nueLw1vPq4rvmiyc.mft (raw, json)
Hash identifier: DGsPrUN7Z/vpuDe/pW+bdUn+jLnZ+S5qZ+ah+LShlZo=
Subject key identifier: 56:28:AE:D6:A4:F7:CB:E8:C4:BD:F5:0D:DB:17:8E:7A:4E:31:DF:84
Authority key identifier: 4C:89:7F:1A:34:97:EB:BE:27:B9:E2:F0:D6:F3:EA:E2:BB:E6:8B:27
Certificate issuer: /CN=4c897f1a3497ebbe27b9e2f0d6f3eae2bbe68b27
Certificate serial: 019D265F092A6370B81BDEB1C7DECAF3C297
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIl_GjSX674nueLw1vPq4rvmiyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft
Manifest number: 0CE1
Signing time: Wed 25 Mar 2026 19:00:55 +0000
Manifest this update: Wed 25 Mar 2026 19:00:55 +0000
Manifest next update: Thu 26 Mar 2026 19:00:55 +0000
Files and hashes: 1: HH1XX0C9mVqJ3jkZsABD61Kzc2k.roa (hash: bmQ/ag1Lu6nwLlZv2LxE+C1ZMBCU64BZNJ1w9Xn7AYU=)
2: TIl_GjSX674nueLw1vPq4rvmiyc.crl (hash: N9IDcJDM03T9YAmNtpMi6FirTY30zpDzBoCcUaLDLK8=)
3: Y-EkxIWzhMw8JWDSxUZBxNOktAc.roa (hash: rinRF7QuUuJdb4wOaRb/y6P9GDaazeTC1vT+KTNoxt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TIl_GjSX674nueLw1vPq4rvmiyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:09:2a:63:70:b8:1b:de:b1:c7:de:ca:f3:c2:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c897f1a3497ebbe27b9e2f0d6f3eae2bbe68b27
Validity
Not Before: Mar 25 19:00:55 2026 GMT
Not After : Mar 26 19:00:55 2026 GMT
Subject: CN=5628aed6a4f7cbe8c4bdf50ddb178e7a4e31df84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:7e:9f:89:bb:6c:33:b3:08:5c:b1:d8:a8:f8:
5e:d1:5e:c6:a1:a3:b1:7f:7e:07:ce:f8:03:47:1b:
c2:a3:df:c7:df:a0:c4:8b:fe:6a:50:fc:56:ef:b3:
70:d4:4f:07:cc:9f:aa:2a:e9:13:56:ee:76:cf:88:
88:c7:41:4c:00:d6:8e:d4:38:9e:a7:27:d6:96:af:
1d:9f:c0:c5:1f:32:b3:40:f1:a6:bf:41:10:71:00:
83:9e:da:71:0c:8b:7b:55:2e:b3:83:66:52:63:32:
7c:42:35:dd:89:75:89:51:a9:0d:cd:75:09:c4:c7:
fa:55:45:f5:ee:31:98:6e:51:b7:61:ca:a5:50:ac:
93:ea:34:76:7c:39:f0:dd:9e:34:ee:3e:c5:41:ab:
5b:d6:9b:98:9d:aa:7e:5d:ab:f4:d3:66:a1:69:4a:
9e:ae:1a:c2:c4:87:f7:78:4f:5b:98:be:a3:14:6e:
8a:39:ca:0f:79:8b:65:dd:11:3e:a4:e2:b3:de:3a:
24:b0:5b:71:8a:93:8b:85:2d:83:16:d3:72:14:e6:
4d:83:b5:f8:33:3a:96:58:1a:40:54:b7:6a:7c:f7:
ef:03:94:f4:80:9c:34:51:9c:e2:e0:03:99:37:73:
01:36:71:5a:d5:5c:81:6f:dc:17:fc:2e:28:9a:44:
02:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:28:AE:D6:A4:F7:CB:E8:C4:BD:F5:0D:DB:17:8E:7A:4E:31:DF:84
X509v3 Authority Key Identifier:
keyid:4C:89:7F:1A:34:97:EB:BE:27:B9:E2:F0:D6:F3:EA:E2:BB:E6:8B:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIl_GjSX674nueLw1vPq4rvmiyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:56:23:f2:84:1f:0c:e6:be:82:f5:3c:1a:24:4f:55:eb:77:
08:e5:5c:d9:72:01:cc:38:85:92:9c:a5:30:9a:1d:2f:79:7e:
b2:b3:fb:b4:c2:41:b4:fc:df:6b:c0:19:1e:b4:76:19:74:ec:
f9:fd:ea:5e:8f:bf:3f:a0:1b:b5:46:56:08:f1:8b:82:80:be:
6a:a5:51:8d:20:cf:d2:c8:af:b9:a9:d8:98:2a:69:6e:7a:ca:
24:d2:98:7a:ca:f7:01:c2:15:8a:d8:93:c1:8b:5b:b9:78:51:
e6:84:59:bb:90:06:dd:24:6e:f0:05:c1:5b:44:1e:99:53:7a:
c5:7f:a5:96:39:1b:5a:a8:c5:70:53:21:c3:96:3f:73:9c:93:
13:ce:79:37:48:73:1f:3d:0e:96:6a:ea:08:f1:ec:f7:27:da:
b8:2e:61:54:bd:d0:45:36:7c:24:7a:d1:73:e8:34:65:57:ff:
1a:c8:17:e2:8d:97:6e:98:cd:9e:38:e7:e2:09:19:12:77:97:
e8:36:c1:81:e7:c0:38:55:82:4c:60:77:28:74:04:3a:14:04:
c1:1b:34:1f:52:8f:ea:73:8a:b3:0b:f5:0e:50:4e:34:c6:45:
df:89:09:ff:9c:53:82:2e:08:67:20:2e:d2:a4:57:57:53:b6:
ab:6f:b7:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:04 2026 by rpki-client