Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.mft
File: e4f2uRGfqdzT4S5-a_twbf-XiCU.mft (raw, json)
Hash identifier: ciDypuTOadb8dFp+xDSKrAABqEpyzH8hZWQPSaxwKXs=
Subject key identifier: 76:9C:86:24:B1:28:3F:9A:A1:5F:B3:4E:D5:72:0F:8E:AB:AB:A7:2F
Authority key identifier: 7B:87:F6:B9:11:9F:A9:DC:D3:E1:2E:7E:6B:FB:70:6D:FF:97:88:25
Certificate issuer: /CN=7b87f6b9119fa9dcd3e12e7e6bfb706dff978825
Certificate serial: 01A0BF1E27B3711851225E3E67F73FB44484
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4f2uRGfqdzT4S5-a_twbf-XiCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.mft
Manifest number: 0FC8
Signing time: Sun 20 Sep 2026 14:00:19 +0000
Manifest this update: Sun 20 Sep 2026 14:00:19 +0000
Manifest next update: Mon 21 Sep 2026 14:00:19 +0000
Files and hashes: 1: 4da3-XmLEkYcc3sAjFZripmjHEs.roa (hash: 1i27nzDEtTVh1XcH6FHCSz2Xc6Yvv2oFolpv88tvSsU=)
2: e4f2uRGfqdzT4S5-a_twbf-XiCU.crl (hash: n1Dl4qnX4Tx33bJBDnIHboE7aAFfHyDJsR7rfQJjacw=)
3: xSGU6r0B_I3lvM9xUa1OSbzHYVw.roa (hash: TCNyWuHnIfYABJLhXFXZbaq2jMFfVpuSOsPz4euzfpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/e4f2uRGfqdzT4S5-a_twbf-XiCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:1e:27:b3:71:18:51:22:5e:3e:67:f7:3f:b4:44:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b87f6b9119fa9dcd3e12e7e6bfb706dff978825
Validity
Not Before: Sep 20 14:00:19 2026 GMT
Not After : Sep 21 14:00:19 2026 GMT
Subject: CN=769c8624b1283f9aa15fb34ed5720f8eababa72f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a7:b6:d2:43:16:fd:d6:11:dd:3a:c2:92:dc:
21:f8:b8:4c:8a:c7:43:2d:2a:e5:da:bc:b4:61:0a:
f6:32:5d:8b:17:70:fd:82:84:9b:9e:19:57:e1:9c:
8b:52:9a:1b:47:32:04:e1:e4:b1:54:40:a0:9d:c0:
e1:63:1d:ab:a2:36:b1:e5:cf:91:e9:3b:22:9e:ee:
3d:d4:68:0f:a4:17:bd:20:60:89:85:b7:39:bd:5e:
28:32:db:13:b9:33:09:8e:f2:1d:66:3b:96:1e:5e:
4d:94:b8:7e:76:d5:fe:54:02:0f:20:72:70:9e:4f:
42:6e:8f:85:44:89:66:a4:2d:42:13:7b:e6:60:0e:
9b:bf:5a:66:6f:2c:9b:30:40:32:92:90:48:ef:dd:
4d:04:20:17:01:de:c2:d4:dd:3a:b9:a8:46:50:f1:
d1:d9:0f:d9:3d:ac:f9:1c:c7:71:51:cb:01:3d:d6:
8c:90:12:de:87:6c:05:f5:a3:b4:3c:97:70:a9:18:
db:8d:6c:06:1a:19:f5:79:eb:36:40:61:ed:da:37:
e9:ea:4b:5d:1e:9a:f3:59:4a:96:e2:60:f1:70:98:
18:1a:db:78:99:94:6c:04:38:0e:c0:b6:08:d1:fa:
f9:fb:4a:f9:9a:3b:50:f2:5a:42:7d:6d:48:f3:f5:
c3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:9C:86:24:B1:28:3F:9A:A1:5F:B3:4E:D5:72:0F:8E:AB:AB:A7:2F
X509v3 Authority Key Identifier:
keyid:7B:87:F6:B9:11:9F:A9:DC:D3:E1:2E:7E:6B:FB:70:6D:FF:97:88:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4f2uRGfqdzT4S5-a_twbf-XiCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:84:e5:9c:ab:79:b5:76:fe:be:0c:be:a8:ab:8a:5a:5f:2b:
ff:a9:69:b4:14:1b:55:a0:ae:a4:18:9e:ec:dc:92:5d:68:8d:
f7:43:28:b1:8c:86:f0:99:3d:01:59:d6:af:2d:79:2b:37:05:
19:d7:39:d7:b7:c3:be:dc:de:f0:a8:25:18:3c:eb:1e:ad:e3:
2f:8b:ec:4a:ea:85:7e:b9:00:6a:70:f9:d8:bd:09:81:ca:40:
85:cb:4d:b3:56:4c:8d:9b:39:c9:5e:c0:70:56:3a:9b:54:62:
54:f5:8a:a0:fb:39:2e:b9:43:f0:77:d4:f0:01:09:da:10:05:
58:ca:c4:66:75:e3:87:22:9f:a5:e9:e5:a2:dd:97:1c:cf:d6:
f6:ea:73:9a:2c:14:04:2b:5d:b4:79:92:0b:49:10:45:a0:11:
d6:39:d3:e7:6a:8f:5b:59:e2:85:de:c5:63:9e:3c:5f:a1:cd:
3d:9a:f4:50:f2:5a:4a:8e:b1:b6:1b:18:90:08:51:27:5a:04:
0d:e6:19:46:05:dc:a0:a9:4d:d7:a9:a3:12:10:03:84:30:0e:
4c:50:89:3b:49:f0:4f:89:70:b0:b8:82:6d:ca:59:29:78:41:
de:41:1f:5a:41:2b:ab:b1:02:8f:54:0c:5d:ad:01:b9:ae:f8:
78:71:b5:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:43:57 2026 by rpki-client