Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft
File: TIl_GjSX674nueLw1vPq4rvmiyc.mft (raw, json)
Hash identifier: p7LRtEQNViMioPm54YD1z0GtYQ5tYzZmdo3sfRdvPRI=
Subject key identifier: 78:2D:49:FE:2E:2E:64:07:CD:CC:D6:A6:20:79:ED:93:E2:A2:63:B4
Authority key identifier: 4C:89:7F:1A:34:97:EB:BE:27:B9:E2:F0:D6:F3:EA:E2:BB:E6:8B:27
Certificate issuer: /CN=4c897f1a3497ebbe27b9e2f0d6f3eae2bbe68b27
Certificate serial: 01A1AB27544954A3969B391996716E16749D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIl_GjSX674nueLw1vPq4rvmiyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft
Manifest number: 0F38
Signing time: Thu 05 Nov 2026 10:00:43 +0000
Manifest this update: Thu 05 Nov 2026 10:00:43 +0000
Manifest next update: Fri 06 Nov 2026 10:00:43 +0000
Files and hashes: 1: HH1XX0C9mVqJ3jkZsABD61Kzc2k.roa (hash: bmQ/ag1Lu6nwLlZv2LxE+C1ZMBCU64BZNJ1w9Xn7AYU=)
2: TIl_GjSX674nueLw1vPq4rvmiyc.crl (hash: b4Lcs+0kbL8i4Eh0rnOKDIgewYAg2vpoykeBnIUHYa4=)
3: Y-EkxIWzhMw8JWDSxUZBxNOktAc.roa (hash: rinRF7QuUuJdb4wOaRb/y6P9GDaazeTC1vT+KTNoxt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TIl_GjSX674nueLw1vPq4rvmiyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ab:27:54:49:54:a3:96:9b:39:19:96:71:6e:16:74:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c897f1a3497ebbe27b9e2f0d6f3eae2bbe68b27
Validity
Not Before: Nov 5 10:00:43 2026 GMT
Not After : Nov 6 10:00:43 2026 GMT
Subject: CN=782d49fe2e2e6407cdccd6a62079ed93e2a263b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:41:60:13:b2:2c:a7:b1:64:09:35:47:d9:b1:
4a:1a:ec:97:93:c0:77:90:53:3c:db:b7:c7:2e:01:
5d:f6:46:f9:d5:12:e9:29:b7:e9:51:d3:86:a3:04:
30:4a:a1:c5:0d:5f:cd:09:40:ab:7b:1c:c0:6f:87:
39:42:1e:f8:f1:45:fa:7d:25:62:b3:cb:7b:18:18:
33:f4:69:b9:ae:89:ea:b2:8c:ca:2a:2a:8a:6b:e0:
a2:36:fd:05:de:db:d4:50:dd:95:c3:34:a1:fe:e4:
9e:30:c0:cb:79:5b:44:9f:8b:88:d5:3d:2e:a8:17:
12:cf:b0:ef:5e:75:3e:5a:f0:12:6a:37:15:fc:e5:
6c:be:85:17:7e:0b:a8:08:64:99:8d:f9:85:45:2c:
5b:d5:e1:64:6a:6a:97:00:aa:e2:a3:10:5b:76:c8:
2d:2c:19:3f:bc:8a:38:d7:d0:ae:38:7e:26:16:74:
5c:9d:0d:c3:b7:8c:43:19:27:ab:96:53:d6:ab:f0:
70:09:73:63:db:a3:8e:ad:83:9f:f4:71:b4:c0:1b:
6e:8f:9f:1e:98:71:9c:f7:fe:c5:62:63:fd:19:e0:
26:9c:14:21:9b:09:2b:43:83:16:ec:a4:db:e5:70:
41:e5:89:53:b9:a9:5e:36:05:d5:45:01:42:37:6d:
6d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:2D:49:FE:2E:2E:64:07:CD:CC:D6:A6:20:79:ED:93:E2:A2:63:B4
X509v3 Authority Key Identifier:
keyid:4C:89:7F:1A:34:97:EB:BE:27:B9:E2:F0:D6:F3:EA:E2:BB:E6:8B:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIl_GjSX674nueLw1vPq4rvmiyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:ac:56:a0:ea:a9:f6:a5:50:22:5c:33:24:45:e1:96:66:05:
78:da:58:c2:de:ea:b8:f8:bf:76:71:cb:d0:e8:7d:fe:15:fa:
7b:8e:57:b0:12:ce:f7:dd:2a:67:9c:58:6c:a0:f0:17:ac:25:
e6:1d:fc:65:5d:89:b0:87:7b:8c:e3:c0:fa:4f:89:e0:7b:e3:
76:b3:8c:d8:1d:6f:5e:6e:e9:1d:43:35:ba:99:3a:ba:e2:73:
34:89:b1:02:db:36:0e:84:ed:2d:4a:2c:fb:f2:6b:17:93:eb:
91:99:e0:c6:58:e0:b9:d5:ca:02:44:e6:29:b4:d6:a5:89:6e:
71:e6:55:36:73:74:6c:73:5a:23:72:21:9a:64:29:5e:55:38:
07:67:6c:6c:b4:d5:bc:ec:3f:9a:df:1e:d2:3a:17:b8:a4:4a:
46:03:58:ce:47:a8:ed:b2:5a:6e:c0:4e:ba:35:5c:0a:7a:74:
44:ec:ed:e0:b4:5f:13:ed:54:7d:a7:ce:d4:db:cc:82:65:ba:
a2:01:3c:51:19:61:3e:9a:6a:c8:40:e5:9b:19:ae:43:24:c1:
fd:ad:a2:57:eb:97:de:2a:99:de:2e:f5:af:fb:9c:a7:81:c2:
27:51:bd:70:ab:da:dd:fa:ca:91:26:90:87:d0:bb:36:4f:46:
06:8e:e7:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 12:34:11 2026 by rpki-client