Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft
File: TIl_GjSX674nueLw1vPq4rvmiyc.mft (raw, json)
Hash identifier: P7Tm7wbA4B1hihkwMLi/sjjt2OE2lJZwNo6AuwJUmtU=
Subject key identifier: 31:37:2C:48:FE:50:26:BF:F8:F0:51:A4:88:87:97:29:A9:62:80:66
Authority key identifier: 4C:89:7F:1A:34:97:EB:BE:27:B9:E2:F0:D6:F3:EA:E2:BB:E6:8B:27
Certificate issuer: /CN=4c897f1a3497ebbe27b9e2f0d6f3eae2bbe68b27
Certificate serial: 019CE4B63208C42B05AD2630ACE7C2CCF012
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIl_GjSX674nueLw1vPq4rvmiyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft
Manifest number: 0CBF
Signing time: Fri 13 Mar 2026 01:01:11 +0000
Manifest this update: Fri 13 Mar 2026 01:01:11 +0000
Manifest next update: Sat 14 Mar 2026 01:01:11 +0000
Files and hashes: 1: HH1XX0C9mVqJ3jkZsABD61Kzc2k.roa (hash: bmQ/ag1Lu6nwLlZv2LxE+C1ZMBCU64BZNJ1w9Xn7AYU=)
2: TIl_GjSX674nueLw1vPq4rvmiyc.crl (hash: 2wc98Qr9UGAGl1AfYZqh4JdTB3jMaepe/a3oSPUzEhw=)
3: Y-EkxIWzhMw8JWDSxUZBxNOktAc.roa (hash: rinRF7QuUuJdb4wOaRb/y6P9GDaazeTC1vT+KTNoxt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TIl_GjSX674nueLw1vPq4rvmiyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:b6:32:08:c4:2b:05:ad:26:30:ac:e7:c2:cc:f0:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c897f1a3497ebbe27b9e2f0d6f3eae2bbe68b27
Validity
Not Before: Mar 13 01:01:11 2026 GMT
Not After : Mar 14 01:01:11 2026 GMT
Subject: CN=31372c48fe5026bff8f051a488879729a9628066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:1a:4e:1e:10:3e:3f:ff:c0:d5:6c:9f:53:2d:
3a:c1:00:d3:10:d8:57:64:5d:ac:da:a2:8c:36:5c:
81:5b:4d:ff:a1:76:ac:3c:e6:d6:c2:1f:51:d9:13:
be:44:32:6e:5f:b5:b7:bc:9f:6d:9e:87:60:48:96:
68:29:35:82:5c:2d:03:83:61:86:99:0a:ec:bc:9e:
85:ea:7c:d7:59:44:a4:34:29:52:90:52:ee:ca:6d:
cb:f7:5a:7c:62:9a:78:d6:61:7c:f8:6b:4d:6d:88:
cc:f6:66:0f:b3:ea:33:f1:ba:8c:e8:f6:e1:1d:51:
ae:54:02:88:a1:9e:83:f8:71:f1:62:09:d2:b6:2a:
dd:ff:9e:89:b9:f4:ed:37:db:ef:60:ac:d1:1a:95:
75:4c:f8:96:ad:4c:a3:5a:1a:2e:b3:fb:cd:79:c6:
d8:c9:7f:86:31:34:d5:4f:4e:4b:e1:ed:68:36:4e:
af:12:11:ea:e8:ba:57:15:76:43:87:f3:69:dd:1b:
60:36:2d:e2:4b:0f:79:3f:8d:56:60:f4:69:e4:9f:
14:f5:8a:ae:db:e2:0d:d6:62:c1:a0:04:80:eb:a1:
93:94:a5:07:d5:65:6b:6c:02:2a:2a:3a:b4:f1:71:
72:98:03:0a:55:a2:f9:a1:50:da:f7:57:0c:ed:36:
60:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:37:2C:48:FE:50:26:BF:F8:F0:51:A4:88:87:97:29:A9:62:80:66
X509v3 Authority Key Identifier:
keyid:4C:89:7F:1A:34:97:EB:BE:27:B9:E2:F0:D6:F3:EA:E2:BB:E6:8B:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIl_GjSX674nueLw1vPq4rvmiyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:13:0e:cd:b3:d7:60:c2:05:c2:b9:18:a5:be:bf:ec:8f:a9:
0a:e9:c2:77:d0:1b:a6:4a:6f:e1:3b:91:c4:9f:f6:43:7e:13:
0c:af:24:73:f7:31:15:2b:35:27:0d:70:51:ae:ce:d2:00:78:
bd:18:76:b9:ef:f9:36:dd:e1:8f:ca:c7:c5:98:a0:21:ce:74:
ae:c6:7f:e1:ee:77:62:5e:f6:ca:97:ef:05:ee:0c:e0:80:18:
13:06:dc:4f:92:90:66:db:f9:a9:7f:2f:fa:0e:bc:13:1f:71:
27:3d:0c:e9:83:e5:29:38:bd:44:43:59:09:6a:1f:ff:9a:98:
f6:f6:5a:78:0f:72:9b:30:36:f4:6d:22:93:42:b4:ee:35:94:
66:b1:60:aa:9a:ce:9c:c8:c2:18:23:da:e2:97:04:b7:70:79:
c8:cb:fb:e9:ce:a2:2a:d1:3f:cb:dd:ea:35:5b:e6:61:4c:b1:
c3:90:f6:e3:b1:52:7f:81:6a:44:f1:90:35:61:1e:81:15:44:
ea:ac:92:3a:84:a1:2c:d0:6b:a5:2e:9b:08:3b:fd:3b:fe:98:
ab:47:82:04:b0:c3:63:0c:d7:4b:c5:bb:30:2c:5e:fe:5c:d8:
f3:26:37:a0:06:b3:d8:96:9b:57:9d:b5:63:0c:66:31:40:ab:
f5:11:77:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzktjIIxCsFrSYwrOfCzPASMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjODk3ZjFhMzQ5N2ViYmUyN2I5ZTJmMGQ2ZjNlYWUyYmJl
NjhiMjcwHhcNMjYwMzEzMDEwMTExWhcNMjYwMzE0MDEwMTExWjAzMTEwLwYDVQQD
EygzMTM3MmM0OGZlNTAyNmJmZjhmMDUxYTQ4ODg3OTcyOWE5NjI4MDY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhpOHhA+P//A1WyfUy06wQDTENhX
ZF2s2qKMNlyBW03/oXasPObWwh9R2RO+RDJuX7W3vJ9tnodgSJZoKTWCXC0Dg2GG
mQrsvJ6F6nzXWUSkNClSkFLuym3L91p8Ypp41mF8+GtNbYjM9mYPs+oz8bqM6Pbh
HVGuVAKIoZ6D+HHxYgnStird/56JufTtN9vvYKzRGpV1TPiWrUyjWhous/vNecbY
yX+GMTTVT05L4e1oNk6vEhHq6LpXFXZDh/Np3RtgNi3iSw95P41WYPRp5J8U9Yqu
2+IN1mLBoASA66GTlKUH1WVrbAIqKjq08XFymAMKVaL5oVDa91cM7TZgaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDE3LEj+UCa/+PBRpIiHlympYoBmMB8GA1UdIwQY
MBaAFEyJfxo0l+u+J7ni8Nbz6uK75osnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVElsX0dqU1g2NzRudWVMdzF2UHE0cnZtaXljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zOGU5NzUtMWY0Zi00MTE0LWJmYTEt
YTc5ZGExYTg1NTEzLzEvVElsX0dqU1g2NzRudWVMdzF2UHE0cnZtaXljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8zOGU5NzUtMWY0Zi00MTE0LWJmYTEtYTc5ZGExYTg1NTEz
LzEvVElsX0dqU1g2NzRudWVMdzF2UHE0cnZtaXljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWxMOzbPX
YMIFwrkYpb6/7I+pCunCd9Abpkpv4TuRxJ/2Q34TDK8kc/cxFSs1Jw1wUa7O0gB4
vRh2ue/5Nt3hj8rHxZigIc50rsZ/4e53Yl72ypfvBe4M4IAYEwbcT5KQZtv5qX8v
+g68Ex9xJz0M6YPlKTi9RENZCWof/5qY9vZaeA9ymzA29G0ik0K07jWUZrFgqprO
nMjCGCPa4pcEt3B5yMv76c6iKtE/y93qNVvmYUyxw5D247FSf4FqRPGQNWEegRVE
6qySOoShLNBrpS6bCDv9O/6Yq0eCBLDDYwzXS8W7MCxe/lzY8yY3oAaz2JabV521
YwxmMUCr9RF3EA==
-----END CERTIFICATE-----
Generated at Fri Mar 13 09:27:26 2026 by rpki-client