Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.mft
File: e4f2uRGfqdzT4S5-a_twbf-XiCU.mft (raw, json)
Hash identifier: J+E15TnoWW6rHmr025kOPggj1M/B++7yJIAnx3IX3Y4=
Subject key identifier: 14:8C:E4:30:AB:BE:A8:CF:0A:D2:5D:FE:C6:99:A2:E9:71:D8:1E:36
Authority key identifier: 7B:87:F6:B9:11:9F:A9:DC:D3:E1:2E:7E:6B:FB:70:6D:FF:97:88:25
Certificate issuer: /CN=7b87f6b9119fa9dcd3e12e7e6bfb706dff978825
Certificate serial: 019ED2AAD99858B3B4BD0A60C088A5C04144
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4f2uRGfqdzT4S5-a_twbf-XiCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.mft
Manifest number: 0EC9
Signing time: Tue 16 Jun 2026 23:01:12 +0000
Manifest this update: Tue 16 Jun 2026 23:01:12 +0000
Manifest next update: Wed 17 Jun 2026 23:01:12 +0000
Files and hashes: 1: 4da3-XmLEkYcc3sAjFZripmjHEs.roa (hash: 1i27nzDEtTVh1XcH6FHCSz2Xc6Yvv2oFolpv88tvSsU=)
2: e4f2uRGfqdzT4S5-a_twbf-XiCU.crl (hash: HaF21aJ4zJEum0y4ra1i6OE0Dk6RiY8WlVan1gqrnG0=)
3: xSGU6r0B_I3lvM9xUa1OSbzHYVw.roa (hash: TCNyWuHnIfYABJLhXFXZbaq2jMFfVpuSOsPz4euzfpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/e4f2uRGfqdzT4S5-a_twbf-XiCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d2:aa:d9:98:58:b3:b4:bd:0a:60:c0:88:a5:c0:41:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b87f6b9119fa9dcd3e12e7e6bfb706dff978825
Validity
Not Before: Jun 16 23:01:12 2026 GMT
Not After : Jun 17 23:01:12 2026 GMT
Subject: CN=148ce430abbea8cf0ad25dfec699a2e971d81e36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c6:fe:2c:ba:7d:73:ca:af:4e:9e:bb:5d:5a:
e1:b1:08:9d:6d:47:45:d2:af:22:78:52:e3:3c:79:
19:d6:c4:05:cd:c7:da:9a:b1:d4:40:39:98:0f:9b:
0a:ad:44:08:7f:b2:f9:5a:a2:dd:c5:b8:74:d4:24:
26:3d:e0:94:06:a5:bb:8d:56:7c:d6:77:04:5b:3f:
87:e0:cb:5c:fd:fd:63:af:c7:4c:3c:9a:81:08:33:
1e:ad:33:ff:f9:c4:ca:11:f0:5a:4a:8d:b1:61:c9:
2f:6d:51:fb:0a:64:ca:46:04:e6:a4:44:6a:31:ca:
b7:e4:b9:47:b0:3e:a6:5b:94:4d:5b:08:56:d0:3c:
88:19:fd:bd:61:40:f4:8f:35:8c:78:8c:65:7f:fd:
8c:f5:3f:83:c9:3e:c9:d9:4f:84:2f:e7:73:a9:63:
79:05:70:1f:00:ad:e8:8f:79:61:dc:ae:f1:56:64:
77:e0:06:b6:26:3c:24:73:a9:b0:8e:20:44:34:5c:
41:60:1f:47:2d:03:c7:f7:bf:47:02:24:1e:8b:dd:
83:0c:0e:88:d0:92:8e:59:65:4b:31:08:ba:ea:7c:
cc:a2:46:57:2a:b8:53:23:e5:70:33:4e:a4:3e:52:
bf:03:09:5b:c7:00:84:1b:34:cf:93:d5:ae:7b:9d:
35:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:8C:E4:30:AB:BE:A8:CF:0A:D2:5D:FE:C6:99:A2:E9:71:D8:1E:36
X509v3 Authority Key Identifier:
keyid:7B:87:F6:B9:11:9F:A9:DC:D3:E1:2E:7E:6B:FB:70:6D:FF:97:88:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4f2uRGfqdzT4S5-a_twbf-XiCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:e8:f4:ed:2a:5f:c4:2a:6b:27:50:5a:d4:a8:55:94:93:17:
22:f4:bb:8f:33:1c:28:33:2b:69:ec:47:a8:80:24:ab:19:d7:
05:57:e6:86:2a:92:c4:76:27:19:c9:3c:84:f5:43:f0:89:03:
f6:5a:db:d5:c3:2c:6d:55:87:71:b7:c0:ab:79:4a:b1:33:48:
96:1d:e0:1a:36:84:bc:d8:e1:53:8c:cf:f0:93:30:5c:8b:35:
8b:13:5a:b3:22:d5:d1:c9:60:c5:ed:73:3a:5f:b6:aa:fd:14:
f5:e7:a8:81:aa:c2:84:0c:28:ab:ed:0d:3a:fc:19:97:f7:72:
e7:16:8f:81:ef:78:ad:92:ee:97:9d:16:8b:b1:8b:cd:3f:cc:
00:66:77:e9:50:54:96:cd:04:84:0b:0d:b2:bd:63:68:5f:f5:
00:a3:29:f8:6d:dd:03:74:c3:24:36:a1:17:1f:fc:c2:c2:d0:
3e:c9:9e:12:d8:00:01:33:49:ab:9f:8d:3d:38:6f:5a:67:46:
cb:32:cf:e3:75:a7:99:a6:2d:d2:5b:99:3e:65:de:16:ac:78:
b4:a3:4f:ae:0e:a1:c0:57:7c:bd:1b:04:9e:e2:12:e2:43:ba:
4e:71:42:fa:39:b0:46:c3:21:ac:5a:10:56:12:eb:77:40:c0:
25:4e:4a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:09:16 2026 by rpki-client