Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.mft
File: TwMCBfo2Xp9J_06nUG35EtXtg2A.mft (raw, json)
Hash identifier: GhcidEF6kH/t54NPf8LL6wygHLzjQCTEtVdPZ+FOsOQ=
Subject key identifier: 1F:0A:46:3C:8B:B7:6A:A2:1B:6D:F9:9D:16:06:C5:A7:DD:FA:72:37
Authority key identifier: 4F:03:02:05:FA:36:5E:9F:49:FF:4E:A7:50:6D:F9:12:D5:ED:83:60
Certificate issuer: /CN=4f030205fa365e9f49ff4ea7506df912d5ed8360
Certificate serial: 019DA3AE9D420F7F26DBFB5A1FAC5E407563
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TwMCBfo2Xp9J_06nUG35EtXtg2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.mft
Manifest number: 18C7
Signing time: Sun 19 Apr 2026 03:00:22 +0000
Manifest this update: Sun 19 Apr 2026 03:00:22 +0000
Manifest next update: Mon 20 Apr 2026 03:00:22 +0000
Files and hashes: 1: 9xBP8gbc0Dsyc9Whz6ERIkAS30s.roa (hash: dwzxNjVen//HcW2Y8+RmbxhX6tKkrvGhVuNA4kOW63w=)
2: TwMCBfo2Xp9J_06nUG35EtXtg2A.crl (hash: ohyWMG2OspddqCqKVpbNwZjQaxTmXJ4H4IpE756YrIM=)
3: vAr22Hux-HUQ7hHfWUCqXP3N41A.roa (hash: QnhPhCSBsgOeJ1YHgFSoi0+/IdCT3hRUONTf3oiVAf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/TwMCBfo2Xp9J_06nUG35EtXtg2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:ae:9d:42:0f:7f:26:db:fb:5a:1f:ac:5e:40:75:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f030205fa365e9f49ff4ea7506df912d5ed8360
Validity
Not Before: Apr 19 03:00:22 2026 GMT
Not After : Apr 20 03:00:22 2026 GMT
Subject: CN=1f0a463c8bb76aa21b6df99d1606c5a7ddfa7237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f1:9a:4f:7e:b3:f8:76:2d:8e:1e:dc:e7:87:
33:e9:44:36:94:c5:6d:c2:28:24:6a:ab:0c:08:c5:
08:e6:fd:e3:f7:8a:b1:db:71:71:fc:7a:36:53:ea:
57:89:da:88:8e:7a:cc:e2:4c:98:15:4f:2a:2e:ee:
b9:05:20:a0:3c:1f:82:df:6e:d9:f6:5f:42:37:96:
05:ba:bc:70:60:21:85:af:6a:e2:fd:07:37:86:c8:
cf:b5:bb:16:03:aa:a5:f1:e7:9f:8a:1f:ad:a6:08:
23:5f:3b:ff:f3:ee:bb:18:f6:12:6b:27:5c:33:0b:
30:a7:80:3c:63:6a:24:81:42:c6:d9:32:34:06:23:
c6:b8:74:b3:20:af:87:b8:7e:bc:13:80:38:57:6f:
09:55:6d:66:46:0d:2f:95:e1:bd:b4:41:24:17:2d:
d6:4b:99:c5:76:e1:b1:e9:ef:2a:29:a6:b1:bc:e7:
4c:3c:62:08:02:e5:0a:57:b2:32:c7:2a:b5:a4:66:
34:47:44:29:3e:01:dd:7e:01:22:c8:b6:30:66:c1:
fa:a4:50:3a:8a:7c:3d:fc:18:0f:11:85:37:61:f6:
8d:83:d3:c0:62:80:bd:ec:da:b9:81:84:d1:f5:82:
11:ce:e9:a3:32:98:5c:aa:08:83:dd:3b:29:de:87:
d4:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:0A:46:3C:8B:B7:6A:A2:1B:6D:F9:9D:16:06:C5:A7:DD:FA:72:37
X509v3 Authority Key Identifier:
keyid:4F:03:02:05:FA:36:5E:9F:49:FF:4E:A7:50:6D:F9:12:D5:ED:83:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TwMCBfo2Xp9J_06nUG35EtXtg2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:8b:4b:b2:e0:ac:1d:c5:ff:ce:04:94:22:2b:28:61:75:13:
7a:d9:90:d5:ce:f6:bb:5d:bf:9d:c8:f3:da:46:dd:95:db:2b:
23:8d:03:be:c6:50:de:75:b0:e7:df:11:50:ad:1a:60:ed:9a:
17:f5:58:9a:30:ef:3b:7a:f9:6b:5e:71:3f:1e:5a:d8:35:66:
65:5d:d0:fd:58:fd:65:b3:57:0a:43:1d:7e:60:a7:5e:b2:ee:
44:3f:77:93:f4:dd:e9:1e:f5:0f:e3:c1:e9:a7:fb:72:c4:2a:
d0:c2:84:27:6d:35:6d:54:03:3c:d3:42:2d:74:60:0b:c7:3b:
38:ec:ca:83:d0:41:58:b0:c5:b4:02:dc:20:cd:2e:40:f5:53:
e2:52:7d:a3:e5:94:04:2c:43:aa:22:7f:55:b0:5a:94:a6:84:
35:43:4f:80:61:f0:71:c8:75:a9:c8:e5:aa:27:f5:2b:25:36:
30:09:12:d9:4a:84:5d:95:5b:60:84:5d:24:df:55:33:d5:89:
e1:5a:b2:33:91:e2:2b:d6:a1:95:53:00:bb:9d:39:6b:79:de:
dd:6a:bc:b9:9d:2a:c3:1d:b2:14:af:79:ed:55:84:c2:bc:08:
62:e3:47:10:91:5e:ec:6f:7d:90:7c:87:43:27:88:8f:a4:5b:
85:91:f0:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:30:14 2026 by rpki-client