Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/64ecd9-a2f8-4685-a872-b4056916b18b/1/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.mft
File: TwEzP4bKlwcaD5YSa6OOIlLnCjQ.mft (raw, json)
Hash identifier: 4y+AG7JDt7ZBDK7UCjEileCEUXDZXwEyHz1y8CN86eQ=
Subject key identifier: 16:62:FB:B1:C8:9C:72:A6:96:2C:01:D5:46:8A:C6:2D:71:B4:4F:F2
Authority key identifier: 4F:01:33:3F:86:CA:97:07:1A:0F:96:12:6B:A3:8E:22:52:E7:0A:34
Certificate issuer: /CN=4f01333f86ca97071a0f96126ba38e2252e70a34
Certificate serial: 019D9AAB890AB094AB53880B5B18E4E0CE37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/64ecd9-a2f8-4685-a872-b4056916b18b/1/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.mft
Manifest number: 0BB0
Signing time: Fri 17 Apr 2026 09:00:26 +0000
Manifest this update: Fri 17 Apr 2026 09:00:26 +0000
Manifest next update: Sat 18 Apr 2026 09:00:26 +0000
Files and hashes: 1: TwEzP4bKlwcaD5YSa6OOIlLnCjQ.crl (hash: 9JqKLCGGfi6rpjkPLUySdJdIR+tE8Dc+FOkuG4Qr9uE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/64ecd9-a2f8-4685-a872-b4056916b18b/1/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/64ecd9-a2f8-4685-a872-b4056916b18b/1/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:89:0a:b0:94:ab:53:88:0b:5b:18:e4:e0:ce:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f01333f86ca97071a0f96126ba38e2252e70a34
Validity
Not Before: Apr 17 09:00:26 2026 GMT
Not After : Apr 18 09:00:26 2026 GMT
Subject: CN=1662fbb1c89c72a6962c01d5468ac62d71b44ff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:61:66:f2:7c:7e:89:0e:15:43:eb:be:51:77:
c0:dc:9c:40:3c:1b:70:34:ad:81:de:f2:aa:0b:28:
a4:9d:c5:41:0f:5f:c1:01:19:9c:67:ef:be:0d:fd:
be:a3:fe:f5:57:bf:82:ac:e8:90:73:19:54:14:f1:
65:82:0f:39:b3:a7:25:5b:90:6e:04:54:de:21:2c:
b8:cc:9f:03:6d:80:e0:26:ab:79:84:fc:ce:01:57:
90:35:08:09:a3:7c:32:cf:36:b8:56:d4:58:ed:e7:
b2:f9:d3:54:4a:76:95:b2:af:ab:7f:db:2c:a1:07:
75:5b:be:dc:3c:a6:e2:eb:b0:03:69:ea:2e:72:4a:
79:da:f2:5a:0b:e3:0e:41:1b:24:3e:d8:5e:04:77:
01:41:d0:de:a5:2d:f7:a5:9c:e9:68:52:e6:f4:49:
b6:9b:cc:c0:27:5c:0f:a5:17:bf:03:9d:5c:0d:4b:
7b:02:93:fc:c2:b8:a2:ff:33:ed:e1:ce:c6:be:18:
a7:cc:a3:c5:48:8d:6f:33:d9:23:2d:44:0c:33:ae:
06:cc:74:5b:fb:f1:86:4d:a5:53:45:14:25:b5:c7:
b8:85:4f:b9:5a:26:24:e8:2a:99:9d:d9:a7:6f:f5:
d5:83:f7:ca:4e:9c:b7:53:be:d0:71:65:69:b8:4e:
ea:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:62:FB:B1:C8:9C:72:A6:96:2C:01:D5:46:8A:C6:2D:71:B4:4F:F2
X509v3 Authority Key Identifier:
keyid:4F:01:33:3F:86:CA:97:07:1A:0F:96:12:6B:A3:8E:22:52:E7:0A:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/64ecd9-a2f8-4685-a872-b4056916b18b/1/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/64ecd9-a2f8-4685-a872-b4056916b18b/1/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:5a:5e:b5:90:bb:00:fb:da:a9:71:b5:31:c6:aa:34:38:be:
2d:5f:b1:3e:e9:d1:1f:41:c0:b3:11:2e:7a:44:01:e4:1b:7a:
1c:cc:15:59:e9:40:8d:93:f5:01:dd:48:56:26:2d:c2:c2:79:
90:b7:1a:5c:57:0d:ba:78:75:5a:6b:45:74:8c:97:d9:01:e3:
85:e2:09:92:e9:6b:5b:ea:1f:b5:5f:26:7b:5f:95:e3:ef:7e:
b3:f2:98:73:0b:7a:d0:6c:63:ae:a3:88:ae:b4:62:4a:c4:86:
cc:ba:e0:e0:94:b4:22:e5:b2:f0:1a:28:ef:10:eb:48:24:de:
ba:93:e4:8b:8f:c6:df:ce:3f:eb:d5:f7:25:90:dc:45:52:07:
cf:7f:d0:b2:0b:bb:86:3f:8a:bd:d3:83:31:73:89:4b:c9:39:
87:cb:77:64:f0:44:90:88:8c:7a:65:d9:46:c8:f7:57:6a:9c:
19:ae:3e:d0:cf:d3:92:04:db:61:a5:75:69:0e:d6:8a:c1:d7:
04:75:48:67:fd:d5:1d:22:f3:51:e5:f8:83:67:01:6a:1d:d4:
bf:99:6d:76:f8:60:4e:c8:0f:51:73:84:2e:41:60:d5:5b:9c:
97:ec:64:66:a9:b0:12:e5:82:03:f0:01:7f:c4:5a:16:74:0f:
b4:81:46:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:34:46 2026 by rpki-client