Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.mft
File: e4f2uRGfqdzT4S5-a_twbf-XiCU.mft (raw, json)
Hash identifier: de7j7jt4prX0BDOP9kWB5LYUU6j6ggL7zTVJwYYFcBM=
Subject key identifier: AE:9B:EE:F9:66:5A:5A:48:85:0B:E7:C0:02:48:16:9E:38:FA:5E:62
Authority key identifier: 7B:87:F6:B9:11:9F:A9:DC:D3:E1:2E:7E:6B:FB:70:6D:FF:97:88:25
Certificate issuer: /CN=7b87f6b9119fa9dcd3e12e7e6bfb706dff978825
Certificate serial: 019CA869CF939BF0655AE50B797ED9565F8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4f2uRGfqdzT4S5-a_twbf-XiCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.mft
Manifest number: 0DAA
Signing time: Sun 01 Mar 2026 08:00:32 +0000
Manifest this update: Sun 01 Mar 2026 08:00:32 +0000
Manifest next update: Mon 02 Mar 2026 08:00:32 +0000
Files and hashes: 1: 4da3-XmLEkYcc3sAjFZripmjHEs.roa (hash: 1i27nzDEtTVh1XcH6FHCSz2Xc6Yvv2oFolpv88tvSsU=)
2: e4f2uRGfqdzT4S5-a_twbf-XiCU.crl (hash: g8/8SmCPQ9LVSl8A4j+6g4Od7g3TIavw17naOBoV/ds=)
3: xSGU6r0B_I3lvM9xUa1OSbzHYVw.roa (hash: TCNyWuHnIfYABJLhXFXZbaq2jMFfVpuSOsPz4euzfpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/e4f2uRGfqdzT4S5-a_twbf-XiCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 08:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:69:cf:93:9b:f0:65:5a:e5:0b:79:7e:d9:56:5f:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b87f6b9119fa9dcd3e12e7e6bfb706dff978825
Validity
Not Before: Mar 1 08:00:32 2026 GMT
Not After : Mar 2 08:00:32 2026 GMT
Subject: CN=ae9beef9665a5a48850be7c00248169e38fa5e62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5d:aa:29:f3:43:a1:e9:4d:cf:45:37:2f:6c:
cd:3b:63:3a:fa:9e:22:cd:4c:2c:f0:d6:8e:de:e8:
80:20:16:4c:49:86:f9:ce:c4:a5:1b:89:fc:02:9b:
72:ad:3b:78:18:5b:c2:7b:6a:fd:f3:73:df:ef:e8:
e1:3f:22:76:6c:34:3e:d8:1d:11:0c:85:1d:e8:a2:
30:41:e6:bb:65:f7:3b:de:1f:d6:bb:7d:7e:0a:35:
4a:e9:b1:2e:b6:92:cb:a0:92:06:8a:c4:bc:49:67:
7d:e1:21:01:e4:b4:78:5d:a6:af:e4:a1:fb:24:5d:
6a:9e:88:50:3a:c5:c6:0c:76:b6:c4:49:75:18:25:
16:5a:02:83:8f:e7:e5:42:2e:8a:46:98:29:e3:ee:
4e:95:a7:79:b4:85:c1:72:67:da:59:9d:b9:ff:6b:
5e:0f:6b:5d:28:35:59:f2:7f:79:58:bb:9d:1b:47:
ee:b5:59:39:79:27:62:25:d0:56:24:ac:eb:8a:2a:
7e:99:fe:2d:3a:42:52:85:58:04:c6:df:1f:f2:46:
75:99:68:2f:76:0f:8c:fe:ed:76:07:2d:25:8a:c1:
8a:60:f1:af:de:ce:95:f6:4c:9c:fd:ca:e4:f4:8c:
62:01:d1:f8:44:32:7e:3e:65:74:7e:a7:42:67:20:
a7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:9B:EE:F9:66:5A:5A:48:85:0B:E7:C0:02:48:16:9E:38:FA:5E:62
X509v3 Authority Key Identifier:
keyid:7B:87:F6:B9:11:9F:A9:DC:D3:E1:2E:7E:6B:FB:70:6D:FF:97:88:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4f2uRGfqdzT4S5-a_twbf-XiCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:24:20:cf:55:12:53:ab:36:91:f5:42:97:f1:fe:db:77:11:
f8:93:eb:69:e7:b5:fb:5a:e2:17:41:f0:3a:69:98:d4:c6:fe:
28:77:4e:15:ef:e2:8c:7c:4d:59:8d:e1:79:7b:00:c8:51:63:
97:e1:fd:e6:e5:23:26:18:37:27:28:77:cc:24:ea:27:20:ae:
65:87:03:83:ee:fb:73:90:9a:d8:0d:f8:f0:ec:71:50:d3:b8:
1a:14:5c:5b:09:a8:bd:64:89:a4:a9:14:8e:18:dd:ca:e8:09:
dc:34:f8:65:22:ad:36:77:e4:db:25:1e:08:34:69:34:22:30:
f2:4b:7b:69:ec:86:93:88:9f:33:88:87:9f:ad:bb:c1:32:82:
6d:e7:67:a6:40:8b:e7:83:12:80:20:8a:e9:b0:26:16:68:d0:
0e:25:93:bc:9f:ed:d3:19:dd:97:b9:c8:11:0f:a2:5c:b8:0a:
54:02:1e:86:7e:af:e1:18:80:1c:66:9b:b9:87:aa:a9:aa:dc:
8e:60:64:bb:db:eb:3e:e0:35:b9:06:5e:01:0a:70:fe:54:8f:
d2:2b:c6:2e:fe:6e:28:5d:d2:46:6c:c0:33:75:66:c7:55:82:
6c:46:9e:47:2e:5d:28:6a:2e:c0:c6:a0:21:20:d6:f9:54:1f:
a7:b2:8b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:16:20 2026 by rpki-client