Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/64ecd9-a2f8-4685-a872-b4056916b18b/1/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.mft
File: TwEzP4bKlwcaD5YSa6OOIlLnCjQ.mft (raw, json)
Hash identifier: qU2OXq8TNloV3M+4ZmWoJ01yjEpzQJTfh3bEVNBOS4o=
Subject key identifier: F6:AD:E3:4B:ED:AD:4A:D0:85:75:59:0B:96:D6:4C:E0:D1:9F:B6:BC
Authority key identifier: 4F:01:33:3F:86:CA:97:07:1A:0F:96:12:6B:A3:8E:22:52:E7:0A:34
Certificate issuer: /CN=4f01333f86ca97071a0f96126ba38e2252e70a34
Certificate serial: 019CA94604C0270C927573EA072D6DD722C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/64ecd9-a2f8-4685-a872-b4056916b18b/1/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.mft
Manifest number: 0B33
Signing time: Sun 01 Mar 2026 12:01:04 +0000
Manifest this update: Sun 01 Mar 2026 12:01:04 +0000
Manifest next update: Mon 02 Mar 2026 12:01:04 +0000
Files and hashes: 1: TwEzP4bKlwcaD5YSa6OOIlLnCjQ.crl (hash: aTl05Ovk/mGVNkYQkzmIET+C6R3mqUlFXNNWepGs/ac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/64ecd9-a2f8-4685-a872-b4056916b18b/1/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/64ecd9-a2f8-4685-a872-b4056916b18b/1/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 12:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:46:04:c0:27:0c:92:75:73:ea:07:2d:6d:d7:22:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f01333f86ca97071a0f96126ba38e2252e70a34
Validity
Not Before: Mar 1 12:01:04 2026 GMT
Not After : Mar 2 12:01:04 2026 GMT
Subject: CN=f6ade34bedad4ad08575590b96d64ce0d19fb6bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3a:ac:69:1c:dd:04:e3:be:16:b7:40:22:57:
b7:fe:41:94:44:e8:6f:9a:0c:a6:bd:c6:62:06:f8:
c3:c8:df:59:12:ac:c1:a1:41:75:57:b5:b2:0a:7d:
ec:f5:29:ac:83:f3:2a:69:ef:cc:40:20:f3:cc:cd:
14:32:3c:7c:b1:00:95:ea:b9:2b:6d:24:2c:b9:c2:
03:16:1d:a7:0f:00:4e:f9:3a:f2:95:c2:b5:cd:6b:
37:9f:ee:10:63:a0:5a:e3:e0:a0:52:6c:62:4c:fd:
e4:93:39:59:b0:5f:04:49:4a:a6:d6:fa:46:af:e9:
95:e3:be:84:5d:04:1e:c7:19:ba:5c:38:34:ba:47:
92:15:26:54:90:9f:94:86:08:62:53:a3:dc:67:4c:
d2:5c:cc:7d:ad:48:ae:5c:9e:e6:71:7d:54:86:08:
79:d0:66:cd:b6:d7:db:2f:cd:da:6e:fa:35:17:8e:
2b:ca:98:03:a3:e2:35:80:aa:63:34:d0:e3:5b:6a:
cd:4c:16:65:79:b0:66:f6:f8:fe:2c:27:08:33:5d:
c0:fe:f6:a8:95:98:14:a0:2b:3e:b0:9e:d8:8b:d0:
56:81:ce:af:ff:a0:61:a6:3c:e6:4a:58:d9:2c:4e:
e1:9b:64:9f:02:91:27:5f:3d:6c:9e:7a:f3:5c:02:
44:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:AD:E3:4B:ED:AD:4A:D0:85:75:59:0B:96:D6:4C:E0:D1:9F:B6:BC
X509v3 Authority Key Identifier:
keyid:4F:01:33:3F:86:CA:97:07:1A:0F:96:12:6B:A3:8E:22:52:E7:0A:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/64ecd9-a2f8-4685-a872-b4056916b18b/1/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/64ecd9-a2f8-4685-a872-b4056916b18b/1/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:80:3e:c0:a8:e2:01:00:b3:fc:ed:bf:8c:d3:4c:e0:18:20:
7e:45:fc:c1:2c:a0:a0:f7:a5:c0:05:54:63:01:f5:8d:03:83:
19:85:5f:49:d8:29:f9:b8:eb:cb:29:b1:f2:b7:4d:2c:32:db:
e1:b7:b1:d8:a6:4a:b0:15:d9:be:4d:ee:75:c1:74:9f:9c:40:
14:da:71:da:77:ea:ab:aa:f6:73:82:85:8b:6b:ef:62:31:87:
6f:2b:ee:6a:2c:8e:f0:81:90:45:b2:c0:6d:5a:49:fc:48:3a:
78:82:3e:36:6a:19:72:ba:e6:73:bc:ac:5e:84:77:03:4d:9c:
85:b0:69:44:a4:43:72:b4:a8:2a:f5:89:21:e3:db:66:2a:8c:
c2:51:58:d8:18:dd:54:84:36:6a:63:4e:94:4b:8f:b2:cc:36:
e6:78:c3:03:1e:1e:33:d7:3b:02:bd:41:ce:8c:d9:0a:86:bb:
74:6f:d4:fc:31:b6:75:3c:f3:91:36:d2:10:98:08:5c:4d:31:
dd:9f:e6:37:e7:5d:f9:e2:c8:98:66:20:88:e6:6b:8c:6f:00:
dd:11:33:9b:10:7b:70:d5:ee:6a:62:8e:04:fb:05:0c:78:e3:
c0:80:a3:d3:7d:f5:92:10:fc:39:51:6b:64:49:7f:51:75:ee:
bb:49:2c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:59:17 2026 by rpki-client