Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.mft
File: e4f2uRGfqdzT4S5-a_twbf-XiCU.mft (raw, json)
Hash identifier: 4VQoS5lfpheIbqBhz0JERvolEp72Wey6vsvmTSkgtWw=
Subject key identifier: 4A:30:7D:A0:B4:BA:A8:33:0C:1E:B2:CC:5C:8F:E0:70:14:20:0B:CE
Authority key identifier: 7B:87:F6:B9:11:9F:A9:DC:D3:E1:2E:7E:6B:FB:70:6D:FF:97:88:25
Certificate issuer: /CN=7b87f6b9119fa9dcd3e12e7e6bfb706dff978825
Certificate serial: 019D97E1A28D3319325CF040888D3D24D57D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4f2uRGfqdzT4S5-a_twbf-XiCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.mft
Manifest number: 0E26
Signing time: Thu 16 Apr 2026 20:00:39 +0000
Manifest this update: Thu 16 Apr 2026 20:00:39 +0000
Manifest next update: Fri 17 Apr 2026 20:00:39 +0000
Files and hashes: 1: 4da3-XmLEkYcc3sAjFZripmjHEs.roa (hash: 1i27nzDEtTVh1XcH6FHCSz2Xc6Yvv2oFolpv88tvSsU=)
2: e4f2uRGfqdzT4S5-a_twbf-XiCU.crl (hash: /2GekWVld685HVN61usZH0XO5p1RfhHqbc0ikyIUDZg=)
3: xSGU6r0B_I3lvM9xUa1OSbzHYVw.roa (hash: TCNyWuHnIfYABJLhXFXZbaq2jMFfVpuSOsPz4euzfpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/e4f2uRGfqdzT4S5-a_twbf-XiCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e1:a2:8d:33:19:32:5c:f0:40:88:8d:3d:24:d5:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b87f6b9119fa9dcd3e12e7e6bfb706dff978825
Validity
Not Before: Apr 16 20:00:39 2026 GMT
Not After : Apr 17 20:00:39 2026 GMT
Subject: CN=4a307da0b4baa8330c1eb2cc5c8fe07014200bce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d6:95:32:62:aa:d9:1e:b5:70:68:2b:04:00:
14:b8:5b:fe:b9:f2:c2:ea:24:5a:0d:54:33:48:cc:
f0:04:4d:cb:71:62:5f:ac:05:ae:91:f4:c7:7e:e4:
ca:15:0c:55:e7:13:0a:a1:70:63:29:cb:45:43:c4:
4c:b5:27:21:34:6c:4e:8b:6e:02:fa:95:6c:4f:25:
f1:42:5c:ea:8e:d1:9d:e1:26:31:a4:46:73:2a:a8:
ff:c7:64:e5:71:62:59:d9:94:8e:aa:f4:16:01:84:
50:26:ed:63:9c:38:cd:e4:ed:8c:7e:c1:ff:f3:b5:
d4:38:a4:7c:e1:a8:11:32:27:19:c0:4b:16:52:eb:
fd:2b:80:ee:b9:c6:4c:d3:59:64:53:cc:ec:c2:c5:
50:ff:0b:f9:05:b1:50:d6:29:16:69:e4:ad:06:24:
a1:91:a9:bf:47:97:61:31:09:94:d9:cf:89:66:6b:
d4:18:53:04:7f:08:51:ff:12:66:90:fe:1a:5d:3a:
41:28:9f:e7:9c:88:56:b0:f8:52:9e:fb:0e:03:78:
ca:02:ac:32:da:38:2a:f6:58:c0:46:c9:4a:12:4f:
cb:eb:20:3d:e7:4c:d6:bc:00:93:84:7b:a0:89:af:
f6:de:70:14:65:45:00:c8:6f:ab:b0:d4:2c:ea:45:
c1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:30:7D:A0:B4:BA:A8:33:0C:1E:B2:CC:5C:8F:E0:70:14:20:0B:CE
X509v3 Authority Key Identifier:
keyid:7B:87:F6:B9:11:9F:A9:DC:D3:E1:2E:7E:6B:FB:70:6D:FF:97:88:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4f2uRGfqdzT4S5-a_twbf-XiCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:d0:2c:3b:a9:7a:3b:7b:ee:76:55:47:05:69:09:38:5f:8d:
0f:b8:64:b6:e5:91:f8:58:95:71:10:5e:1d:9f:a5:e3:44:3e:
d2:b9:dc:c5:49:e0:53:ab:f5:34:2a:05:b3:42:9e:9a:20:21:
35:4f:7b:24:04:3a:0b:52:b8:36:71:c4:1b:bb:8a:be:c5:7b:
14:53:ff:58:e8:8c:2d:a6:f5:50:3f:da:61:9a:e7:6e:19:b6:
61:a9:c8:6a:0a:f8:27:11:ec:b7:5f:60:ec:b5:14:2c:30:5a:
97:f4:1a:69:48:00:b4:b1:c0:99:a7:2e:bd:5c:62:71:39:63:
d6:60:16:96:e7:06:dd:dd:d4:5b:5c:c9:44:e2:c8:89:b5:5b:
bc:23:07:d2:dd:01:0a:ea:da:8a:2f:eb:88:6b:d7:e9:99:ae:
f6:93:a2:b5:8d:8f:2c:d3:38:00:a5:78:04:66:74:bb:f6:17:
85:d0:a8:8f:24:9e:e0:fd:5d:e0:00:81:86:bf:fe:80:1a:ff:
b4:9b:bf:f4:7e:59:aa:9f:6e:ac:0b:1f:d6:3b:5a:f0:d8:64:
ee:a0:8b:f4:95:3e:f5:4b:00:02:2b:96:2b:ca:f4:a5:bf:45:
5d:c7:9f:18:8d:ae:fe:f3:ef:ad:f1:74:f1:9e:24:10:b7:f6:
81:91:3d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:06:42 2026 by rpki-client