Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft
File: TIl_GjSX674nueLw1vPq4rvmiyc.mft (raw, json)
Hash identifier: GE/B6L+tsyITP2ZLsOqXkqWhVmRDNTQAZ6KctDeU+oY=
Subject key identifier: 79:D2:09:8E:5C:31:2C:88:6A:78:AF:84:AE:49:8F:DD:4C:0F:C5:05
Authority key identifier: 4C:89:7F:1A:34:97:EB:BE:27:B9:E2:F0:D6:F3:EA:E2:BB:E6:8B:27
Certificate issuer: /CN=4c897f1a3497ebbe27b9e2f0d6f3eae2bbe68b27
Certificate serial: 019ED6F5482E521346ECEC25587C4BF560B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIl_GjSX674nueLw1vPq4rvmiyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft
Manifest number: 0DC1
Signing time: Wed 17 Jun 2026 19:00:59 +0000
Manifest this update: Wed 17 Jun 2026 19:00:59 +0000
Manifest next update: Thu 18 Jun 2026 19:00:59 +0000
Files and hashes: 1: HH1XX0C9mVqJ3jkZsABD61Kzc2k.roa (hash: bmQ/ag1Lu6nwLlZv2LxE+C1ZMBCU64BZNJ1w9Xn7AYU=)
2: TIl_GjSX674nueLw1vPq4rvmiyc.crl (hash: KiQhockPbkpRo0Pfqeu5NXarSl3CVH6mPFDYRMSLotk=)
3: Y-EkxIWzhMw8JWDSxUZBxNOktAc.roa (hash: rinRF7QuUuJdb4wOaRb/y6P9GDaazeTC1vT+KTNoxt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TIl_GjSX674nueLw1vPq4rvmiyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 17:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d6:f5:48:2e:52:13:46:ec:ec:25:58:7c:4b:f5:60:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c897f1a3497ebbe27b9e2f0d6f3eae2bbe68b27
Validity
Not Before: Jun 17 19:00:59 2026 GMT
Not After : Jun 18 19:00:59 2026 GMT
Subject: CN=79d2098e5c312c886a78af84ae498fdd4c0fc505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:61:57:df:fa:80:6a:d8:80:e8:54:15:89:eb:
ed:f3:39:21:63:51:a9:99:c7:ff:27:4a:94:47:77:
ad:97:77:51:b2:c6:1d:83:29:25:8a:24:8a:58:10:
00:65:66:a3:b8:4f:a6:01:65:00:0e:0a:e8:59:61:
09:cd:81:8e:bf:cb:3a:83:10:e2:ce:8a:a1:07:c7:
e5:ec:fc:d8:0c:06:0d:52:cc:e1:95:50:e9:f4:ae:
87:c7:83:b9:dc:68:8e:46:ad:49:a2:6c:c2:37:85:
aa:51:c2:0b:6b:35:65:45:e1:21:7e:69:11:26:6c:
ad:d0:6c:80:01:22:eb:61:c6:d7:6e:f3:e6:ac:87:
3a:d1:e0:9c:1f:80:24:85:ba:aa:90:ad:5e:40:bb:
c0:d2:68:ff:ce:62:36:fa:06:91:c2:81:8b:a9:4c:
79:44:ec:1c:d0:94:75:37:83:ec:5f:e2:80:15:a5:
0b:62:17:b9:59:89:47:0b:f6:74:7b:9d:44:c4:c6:
e8:fc:a3:8b:b9:47:0a:6b:a6:eb:47:d5:3b:9f:a9:
fc:17:08:c0:09:7d:8d:26:cd:99:99:d8:3d:a8:b2:
a7:ba:0e:33:00:49:5c:1a:e2:77:31:ea:cf:eb:34:
3d:8b:a5:77:01:3a:db:12:b6:42:a4:15:24:4e:22:
42:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:D2:09:8E:5C:31:2C:88:6A:78:AF:84:AE:49:8F:DD:4C:0F:C5:05
X509v3 Authority Key Identifier:
keyid:4C:89:7F:1A:34:97:EB:BE:27:B9:E2:F0:D6:F3:EA:E2:BB:E6:8B:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIl_GjSX674nueLw1vPq4rvmiyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:00:dc:a3:41:f9:98:ab:83:ab:2a:22:af:14:f5:09:88:5c:
c4:08:8a:65:fd:50:f5:5c:2a:a7:a5:29:8d:11:af:0b:99:fc:
6f:c1:86:1c:00:d6:e1:e9:3f:f0:01:e6:15:a6:ff:fe:48:f9:
87:bd:d0:38:4a:12:c5:93:24:a1:50:ba:74:0c:11:43:12:d4:
4c:94:ee:33:2f:10:2c:06:c5:89:92:57:fa:5a:dd:02:6b:7e:
67:c3:e1:41:0e:6b:cf:83:fc:9a:0e:f8:83:fb:93:ae:4c:e3:
b3:62:0f:80:de:40:ee:75:ab:f3:25:e3:07:85:38:71:93:b2:
31:d3:f2:82:9f:48:6f:c1:70:d1:c3:0f:36:2e:96:3f:b9:8a:
26:f0:cd:4b:b0:b9:1c:8e:83:f8:ee:b6:c8:d3:c2:c8:bb:02:
72:a4:ab:e4:2c:95:d5:60:42:12:eb:5f:7e:b3:0c:75:de:e0:
47:a4:44:29:3c:16:13:81:52:6c:2f:c4:c6:90:52:f3:f0:a7:
62:16:07:d7:3b:9c:39:54:45:fc:b8:2f:11:fc:34:c6:00:53:
a0:d1:77:27:d6:5d:8d:6a:c3:58:ad:46:cd:8b:a1:8c:d0:e0:
fb:f3:05:ec:2f:7b:3b:32:60:37:af:06:62:e1:be:65:d8:ed:
05:0c:79:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 18 02:31:17 2026 by rpki-client