Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft
File: TIl_GjSX674nueLw1vPq4rvmiyc.mft (raw, json)
Hash identifier: ohhA5eN/EYCO22qd7YZvtps/oey08dzX/cei26ZDc/k=
Subject key identifier: 2A:38:F6:3B:CD:B3:47:55:C0:11:AF:7E:90:BA:B6:26:B6:5A:40:7C
Authority key identifier: 4C:89:7F:1A:34:97:EB:BE:27:B9:E2:F0:D6:F3:EA:E2:BB:E6:8B:27
Certificate issuer: /CN=4c897f1a3497ebbe27b9e2f0d6f3eae2bbe68b27
Certificate serial: 019DED49549D83517142D18A91CD317741FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIl_GjSX674nueLw1vPq4rvmiyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft
Manifest number: 0D48
Signing time: Sun 03 May 2026 10:01:39 +0000
Manifest this update: Sun 03 May 2026 10:01:39 +0000
Manifest next update: Mon 04 May 2026 10:01:39 +0000
Files and hashes: 1: HH1XX0C9mVqJ3jkZsABD61Kzc2k.roa (hash: bmQ/ag1Lu6nwLlZv2LxE+C1ZMBCU64BZNJ1w9Xn7AYU=)
2: TIl_GjSX674nueLw1vPq4rvmiyc.crl (hash: AORYApj4VfmsL+FxgYrHZCxSgRRPjk8snTu+YCk2elI=)
3: Y-EkxIWzhMw8JWDSxUZBxNOktAc.roa (hash: rinRF7QuUuJdb4wOaRb/y6P9GDaazeTC1vT+KTNoxt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TIl_GjSX674nueLw1vPq4rvmiyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 10:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ed:49:54:9d:83:51:71:42:d1:8a:91:cd:31:77:41:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c897f1a3497ebbe27b9e2f0d6f3eae2bbe68b27
Validity
Not Before: May 3 10:01:39 2026 GMT
Not After : May 4 10:01:39 2026 GMT
Subject: CN=2a38f63bcdb34755c011af7e90bab626b65a407c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:db:16:7a:c5:da:10:43:e7:1e:db:d9:09:3e:
9b:ec:ec:59:bb:f4:2f:9c:9a:cf:73:d1:e9:12:b7:
9a:5e:04:1d:29:dd:6c:8d:3b:5b:d0:08:2f:e4:15:
44:8e:66:42:1e:da:d8:3e:1c:a9:08:c5:00:07:7c:
bd:18:2a:47:f4:8d:96:46:cd:4d:f0:7d:e7:90:c7:
3f:fc:d1:5b:26:e5:09:0f:9d:5d:9e:19:fe:5e:8d:
6d:f0:55:ec:48:bd:3b:5f:80:74:fe:45:64:8e:d4:
34:1f:fe:94:30:f4:95:c7:bf:43:c3:2f:f0:86:63:
23:78:4f:d5:a5:68:df:89:36:b9:0a:2d:b2:db:e6:
e3:7e:1d:a2:38:b8:55:db:3d:c0:4e:bb:83:c3:20:
0d:f1:f6:93:6b:3a:ab:87:5b:18:cc:e0:39:c8:f6:
f3:b0:0e:80:c3:50:da:92:2b:b8:b1:d7:be:03:fb:
ad:05:18:d3:2e:44:c2:ee:d0:3b:17:fe:66:f4:85:
5a:38:d0:c5:c0:44:81:e9:d2:55:d6:5b:75:b6:16:
ad:1a:0e:4e:4f:13:37:7b:b2:59:50:e8:d9:11:39:
46:e2:5a:fb:4c:a1:72:18:98:ad:5b:3c:1f:fa:f1:
c7:0f:e7:ea:93:40:04:3d:d6:be:80:8f:5a:86:4a:
dd:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:38:F6:3B:CD:B3:47:55:C0:11:AF:7E:90:BA:B6:26:B6:5A:40:7C
X509v3 Authority Key Identifier:
keyid:4C:89:7F:1A:34:97:EB:BE:27:B9:E2:F0:D6:F3:EA:E2:BB:E6:8B:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIl_GjSX674nueLw1vPq4rvmiyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:13:df:17:96:34:a5:17:2e:0a:1d:a6:3c:94:eb:02:96:dd:
45:55:03:07:71:58:a9:bc:e3:e0:8a:4e:5f:71:6f:44:37:a4:
a5:c0:4e:ad:65:56:54:6b:5b:fe:79:fa:1c:58:64:21:27:d9:
57:91:9c:ac:4e:9f:b9:7b:57:b3:b1:97:53:7c:62:d0:6d:39:
5c:b9:e3:c7:a8:9c:e8:7a:87:c3:bc:6f:a2:0b:fe:96:4c:43:
a3:d5:05:e1:ac:5b:9b:54:d6:e3:db:0e:38:cc:30:7e:44:4e:
5e:75:b2:31:81:03:6d:db:e8:67:6b:15:71:1a:0e:cf:ed:67:
76:ff:4a:11:f9:56:1f:07:fb:57:82:06:d3:0b:18:8e:33:cf:
94:ba:04:c5:b8:97:57:e9:9d:8a:4b:6f:e0:78:c8:2b:69:68:
02:6d:16:1f:37:65:f1:a0:83:96:bc:61:54:f2:a0:06:b8:21:
55:8d:fe:88:66:ae:97:a1:78:36:fe:86:f8:f6:eb:61:d4:21:
9b:bf:1b:2b:bd:c7:8c:6f:77:8c:3e:62:85:3b:f8:40:9f:eb:
0a:b0:a9:04:b7:ad:cf:c0:fd:53:35:b3:c4:20:ac:98:15:a7:
d8:b1:4c:dd:30:67:58:52:28:50:3c:11:9f:49:51:e0:9b:c4:
b6:96:a8:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 20:58:34 2026 by rpki-client