
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft
File: TIl_GjSX674nueLw1vPq4rvmiyc.mft (raw, json)
Hash identifier: hApesc1/frd5QR5noCUN5PkMt2w6IS7YWyRg91kJS5k=
Subject key identifier: F2:8B:72:3A:96:0A:16:AC:F0:45:12:57:4A:AA:AE:FA:D9:DC:B8:85
Authority key identifier: 4C:89:7F:1A:34:97:EB:BE:27:B9:E2:F0:D6:F3:EA:E2:BB:E6:8B:27
Certificate issuer: /CN=4c897f1a3497ebbe27b9e2f0d6f3eae2bbe68b27
Certificate serial: 019F92488FA9A1865CC20826C8A0B5C519B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIl_GjSX674nueLw1vPq4rvmiyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft
Manifest number: 0E22
Signing time: Fri 24 Jul 2026 04:00:56 +0000
Manifest this update: Fri 24 Jul 2026 04:00:56 +0000
Manifest next update: Sat 25 Jul 2026 04:00:56 +0000
Files and hashes: 1: HH1XX0C9mVqJ3jkZsABD61Kzc2k.roa (hash: bmQ/ag1Lu6nwLlZv2LxE+C1ZMBCU64BZNJ1w9Xn7AYU=)
2: TIl_GjSX674nueLw1vPq4rvmiyc.crl (hash: mnuW83NFgMxE+vJEG0hDcQ56FzdybyaSeFPw2GHO6gw=)
3: Y-EkxIWzhMw8JWDSxUZBxNOktAc.roa (hash: rinRF7QuUuJdb4wOaRb/y6P9GDaazeTC1vT+KTNoxt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TIl_GjSX674nueLw1vPq4rvmiyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:8f:a9:a1:86:5c:c2:08:26:c8:a0:b5:c5:19:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c897f1a3497ebbe27b9e2f0d6f3eae2bbe68b27
Validity
Not Before: Jul 24 04:00:56 2026 GMT
Not After : Jul 25 04:00:56 2026 GMT
Subject: CN=f28b723a960a16acf04512574aaaaefad9dcb885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:24:8b:36:b1:8a:07:58:09:24:7e:28:fc:75:
ec:a8:f0:69:d5:09:8a:59:0d:30:7a:b3:0b:9f:47:
4d:26:aa:46:3f:30:4d:0c:7e:64:d5:06:ec:ce:84:
5c:5b:9f:9a:52:59:91:74:0f:8d:98:b5:6f:3f:b4:
f3:a2:3c:92:0d:01:53:81:56:28:00:a7:a5:39:c0:
6a:e7:cb:fe:13:35:dd:48:ee:bf:4a:43:18:47:7c:
39:07:d9:e1:d7:f1:8c:53:e2:a4:82:31:11:38:66:
8d:6e:66:9d:4f:93:df:b6:25:f4:25:57:fb:cd:46:
7d:bf:bf:c7:83:77:c3:9c:7e:23:31:97:fb:26:5f:
95:1a:d1:c1:6e:6d:53:28:60:64:63:df:77:11:5b:
dd:8f:4e:1e:61:1d:b4:a6:d5:e0:3d:a8:2c:ea:12:
67:28:0b:a7:7d:98:0a:dd:06:05:3f:36:b2:cc:bb:
b1:0d:c4:98:c8:ad:70:40:36:f3:04:9c:5e:07:ef:
2d:7a:f9:ae:dc:11:d9:3b:13:35:17:20:2f:ef:0e:
07:15:6f:fb:6d:35:ec:bd:84:bc:34:24:8c:21:bf:
72:e8:20:c3:43:61:f7:e5:f8:3e:dc:35:10:de:72:
a3:18:c2:02:bb:a6:e0:67:70:eb:04:10:02:2d:21:
b2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:8B:72:3A:96:0A:16:AC:F0:45:12:57:4A:AA:AE:FA:D9:DC:B8:85
X509v3 Authority Key Identifier:
keyid:4C:89:7F:1A:34:97:EB:BE:27:B9:E2:F0:D6:F3:EA:E2:BB:E6:8B:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIl_GjSX674nueLw1vPq4rvmiyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:b6:ae:08:15:ba:9c:65:a2:9b:a7:b7:17:aa:cf:1a:38:13:
20:61:af:b5:c3:3c:a7:ce:5f:46:ee:c7:6a:3d:10:88:b7:90:
5e:fa:7a:50:f5:2b:75:47:e8:78:a8:ed:b8:81:3e:1d:48:7c:
72:09:d6:0c:aa:8f:5a:f5:76:78:18:90:1f:bb:0d:68:33:58:
39:08:7a:2d:b5:95:69:16:0b:55:59:5a:a7:24:20:c9:4c:87:
aa:09:d6:66:f0:5f:40:f5:29:61:64:86:c1:31:9c:86:5e:1e:
fd:21:a8:c5:85:83:c8:89:00:c0:7f:73:ca:fd:21:e1:8b:09:
89:e7:3e:0c:56:d9:b5:84:5e:cd:be:65:7f:b7:2b:11:2b:5b:
7a:95:b2:0e:fa:b7:a4:27:01:27:40:dd:53:79:db:df:0c:1e:
53:a7:83:4f:18:2e:25:6d:cc:b4:fa:e5:99:d7:13:45:43:eb:
7e:9b:55:8c:00:b8:bd:97:b4:b3:10:18:6b:d6:55:88:97:f1:
1a:5b:dd:ec:c9:89:6c:ae:79:33:ba:dd:d0:2f:a3:2f:1b:10:
e7:08:1d:7d:01:b3:ee:43:5b:9c:45:26:49:81:46:a1:62:5f:
d5:5c:19:9d:8b:7a:74:36:19:12:28:3e:59:10:cb:44:55:ff:
69:d8:87:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:47:44 2026 by rpki-client