Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.mft
File: TwMCBfo2Xp9J_06nUG35EtXtg2A.mft (raw, json)
Hash identifier: FrfYn9gfnkUr56Zu2xCaDeaZL5gQiKpbNQP/kYIz/EE=
Subject key identifier: BC:A7:2C:09:F7:17:1F:37:56:F6:A3:35:EF:0E:9A:11:A8:93:0B:7C
Authority key identifier: 4F:03:02:05:FA:36:5E:9F:49:FF:4E:A7:50:6D:F9:12:D5:ED:83:60
Certificate issuer: /CN=4f030205fa365e9f49ff4ea7506df912d5ed8360
Certificate serial: 019CAA8F6CA73520ED4234EC200D7AC248AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TwMCBfo2Xp9J_06nUG35EtXtg2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 18:00:52 +0000
Manifest this update: Sun 01 Mar 2026 18:00:52 +0000
Manifest next update: Mon 02 Mar 2026 18:00:52 +0000
Files and hashes: 1: 9xBP8gbc0Dsyc9Whz6ERIkAS30s.roa (hash: dwzxNjVen//HcW2Y8+RmbxhX6tKkrvGhVuNA4kOW63w=)
2: TwMCBfo2Xp9J_06nUG35EtXtg2A.crl (hash: i5iVB3qb/MVNFkwKwUI43G3Bw+k+NLr4Usa/OuHuh4c=)
3: vAr22Hux-HUQ7hHfWUCqXP3N41A.roa (hash: QnhPhCSBsgOeJ1YHgFSoi0+/IdCT3hRUONTf3oiVAf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/TwMCBfo2Xp9J_06nUG35EtXtg2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:6c:a7:35:20:ed:42:34:ec:20:0d:7a:c2:48:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f030205fa365e9f49ff4ea7506df912d5ed8360
Validity
Not Before: Mar 1 18:00:52 2026 GMT
Not After : Mar 2 18:00:52 2026 GMT
Subject: CN=bca72c09f7171f3756f6a335ef0e9a11a8930b7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:45:93:c7:54:37:de:b6:65:ad:04:b5:41:59:
4c:f4:07:17:6b:07:8f:aa:7d:86:8c:76:56:e7:a5:
78:03:64:ba:46:31:46:e5:f4:a8:e7:05:2a:92:79:
93:ae:df:19:d9:e5:87:ba:8e:5d:50:0b:6c:a9:9d:
ec:ee:6e:97:94:db:a6:d6:1e:d5:4d:d1:6c:b0:05:
08:53:e1:15:20:55:e7:1b:64:4d:d9:58:d4:38:a7:
50:dd:75:52:30:e2:e7:5f:16:86:94:8a:a5:0e:9d:
ef:17:1c:97:79:96:c7:e7:67:34:e5:49:5e:1b:da:
eb:39:2d:d9:e7:66:25:66:50:78:df:f7:10:85:43:
13:f3:4f:ed:88:e3:d2:57:ca:58:1e:88:bb:24:59:
43:2a:44:2e:31:81:fe:0d:b8:df:0f:b5:9f:09:5e:
1d:ec:3f:72:44:3d:ef:29:7d:d1:f0:fc:02:e3:a2:
9d:01:50:7b:86:85:53:a1:e9:70:9d:f8:99:8c:15:
c3:c2:03:fe:67:de:04:8a:1f:15:03:b9:81:15:b9:
45:50:b9:b7:ef:c6:7d:b5:86:ca:e3:4f:05:13:50:
01:9a:4e:65:f6:cb:51:89:c9:66:dd:74:19:5b:44:
66:a6:e9:dc:eb:f2:a9:98:82:03:9b:b7:91:74:1e:
db:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:A7:2C:09:F7:17:1F:37:56:F6:A3:35:EF:0E:9A:11:A8:93:0B:7C
X509v3 Authority Key Identifier:
keyid:4F:03:02:05:FA:36:5E:9F:49:FF:4E:A7:50:6D:F9:12:D5:ED:83:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TwMCBfo2Xp9J_06nUG35EtXtg2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:c3:92:bf:bd:a2:b7:5d:a7:8b:c9:15:7a:3b:9c:54:8b:5e:
e0:70:ab:33:09:ef:37:51:91:91:73:75:f0:a9:76:e8:21:1c:
ca:d2:41:c2:12:7c:be:5c:00:f1:b3:06:00:9b:2d:b6:89:5d:
c2:0f:d1:13:b9:9a:cd:02:64:89:c0:f3:cc:34:d7:18:35:9c:
10:fb:6b:b4:ed:55:a3:c6:cb:db:e5:df:91:4a:fc:a5:3b:33:
9b:8b:c8:84:d9:a9:67:95:ea:0c:aa:a7:98:cd:38:50:86:1f:
65:97:30:c2:ae:6c:a9:ef:c6:07:f1:9d:c7:b0:56:b4:5f:0e:
7a:e9:1f:56:c1:0b:93:03:de:41:7a:2f:b8:ba:5e:a6:f6:5b:
36:91:99:26:8c:ea:95:51:ee:24:9c:9d:0a:16:08:a8:15:db:
a5:4e:eb:f7:6f:0c:45:e3:70:13:b3:07:f5:50:0f:c1:4f:25:
42:27:57:16:10:be:13:95:7e:26:cb:2b:8b:2c:46:4f:78:2d:
5b:13:8e:b4:48:e7:6d:b4:85:16:bc:a5:95:3c:fb:99:fb:4a:
b7:5b:a2:93:3a:b1:39:1a:e8:9c:54:7b:c1:0b:59:68:28:60:
f7:eb:f2:4e:5e:32:49:fb:7d:ce:ab:c1:94:1c:b8:46:3b:d4:
bb:04:70:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:07:08 2026 by rpki-client