Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.mft
File: Tw532cb_aNymjwXfj0Z17nvcsLw.mft (raw, json)
Hash identifier: 6lsUJ0OtXN7O3XDC/mPCH8lkc3tHrklYVWTgR6RwF34=
Subject key identifier: 97:6E:9F:22:2E:86:65:EC:2C:50:B9:BF:C8:0A:36:5E:D2:63:79:4F
Authority key identifier: 4F:0E:77:D9:C6:FF:68:DC:A6:8F:05:DF:8F:46:75:EE:7B:DC:B0:BC
Certificate issuer: /CN=4f0e77d9c6ff68dca68f05df8f4675ee7bdcb0bc
Certificate serial: 01A0E8C1C37FCE1DA1EEBA75D0EDA5310DCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tw532cb_aNymjwXfj0Z17nvcsLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.mft
Manifest number: 1A82
Signing time: Mon 28 Sep 2026 16:03:27 +0000
Manifest this update: Mon 28 Sep 2026 16:03:27 +0000
Manifest next update: Tue 29 Sep 2026 16:03:27 +0000
Files and hashes: 1: 39rMz_WIR2e8L2mM9nRbVwSsWYs.asa (hash: 5o54GUaG5AJOqUjqrqNiS3NWFX9t0EEkMJIm09Gxdrg=)
2: 3XPbOVP5LZm9gbvbxeYXvE-UXNY.roa (hash: P5VCL1xp51uhegWvbhWmEVzPBE26QsXY7i6bNOoE28E=)
3: 4lw_9PAntET-B5MMVn16dO3Hcls.roa (hash: UDzY7XNVR7aRxZCWElIUyD0jHCPvLTcFxpVSeLZMRg4=)
4: Tw532cb_aNymjwXfj0Z17nvcsLw.crl (hash: 6w99Ye5y5bEfBXbQfbmsBxKofdqJWGVben2ydonq5/s=)
5: cqsm3cZPpf_tObwDEACdHxs7fkA.roa (hash: d+AU9b3PeXFxvtfVifLL55zjYWSVguy94TW2GQv8rLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tw532cb_aNymjwXfj0Z17nvcsLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:c1:c3:7f:ce:1d:a1:ee:ba:75:d0:ed:a5:31:0d:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f0e77d9c6ff68dca68f05df8f4675ee7bdcb0bc
Validity
Not Before: Sep 28 16:03:27 2026 GMT
Not After : Sep 29 16:03:27 2026 GMT
Subject: CN=976e9f222e8665ec2c50b9bfc80a365ed263794f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a2:4d:74:2a:74:c1:e1:8f:ab:d2:d0:08:c1:
b3:ca:ea:92:a7:3f:9e:f3:c5:aa:16:04:82:9e:35:
89:4d:82:c5:99:02:c9:2a:e2:28:20:b1:5f:78:61:
a0:9b:d5:47:47:e7:7c:03:31:e2:d6:40:ca:ee:11:
28:bd:38:7d:d0:0c:44:c5:ea:ef:33:07:29:54:03:
5c:cb:e7:e0:fa:79:0c:0d:1a:60:4d:61:62:74:44:
3a:03:ff:13:f8:ac:a6:de:c6:5c:ea:2d:7c:e2:88:
7e:9b:83:36:1c:33:18:f8:ea:1c:a7:d5:15:a8:fa:
ff:84:d1:c1:7a:6c:bc:1b:2d:7e:9c:95:a9:03:21:
96:03:51:f6:69:76:ce:00:8d:be:90:51:e1:96:84:
ab:89:27:ad:5f:f9:70:fa:e0:74:8f:2e:5b:c8:4c:
c9:3a:7e:af:1d:8c:06:17:75:00:63:99:57:3f:e1:
df:bf:4a:b2:5e:94:85:61:26:89:d1:f7:95:c5:13:
36:5f:cf:aa:21:24:1d:45:af:aa:db:7a:9d:03:02:
53:5f:f4:f1:63:3f:7b:dd:07:33:6b:7b:e2:75:f7:
84:d8:f0:bc:46:9e:a3:b0:01:c1:a7:f3:dc:67:49:
ba:9e:5c:8a:78:82:8e:be:1c:aa:f3:09:0e:03:5a:
a0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:6E:9F:22:2E:86:65:EC:2C:50:B9:BF:C8:0A:36:5E:D2:63:79:4F
X509v3 Authority Key Identifier:
keyid:4F:0E:77:D9:C6:FF:68:DC:A6:8F:05:DF:8F:46:75:EE:7B:DC:B0:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tw532cb_aNymjwXfj0Z17nvcsLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:d5:2c:15:58:d6:32:e0:da:89:bf:86:cc:98:5e:20:4b:dc:
51:25:00:9a:2e:b2:fb:1e:17:6b:24:7a:a7:0b:b6:04:7d:aa:
03:12:4f:ce:ae:33:22:09:60:63:5d:9f:9f:41:fd:49:7a:29:
38:88:0e:4c:4e:cc:ea:a8:5f:bd:46:0e:49:41:68:e2:3b:cd:
57:93:66:5a:f2:1c:f1:09:41:1f:2a:b0:1f:1c:4e:b5:ee:b5:
f4:ad:8b:b6:ce:15:4f:cc:27:31:e4:23:ab:9d:7c:ba:c7:71:
1e:30:fb:48:0a:61:8d:ef:74:34:5c:21:54:c0:72:84:a5:d3:
6a:c6:8c:ac:44:5a:a3:2c:83:21:45:96:95:ea:7f:5d:3e:b4:
ad:e6:9b:cb:c7:42:25:5c:4b:7a:95:b6:20:6a:54:c1:38:9a:
38:fe:a8:e5:48:82:66:1f:48:8d:f3:26:0e:ed:a7:07:4e:38:
33:ac:2f:8d:e5:88:11:f2:da:c9:ae:5d:21:e3:55:16:61:cb:
2e:73:f0:5c:be:81:bc:f1:3a:1e:d2:7e:36:43:83:8c:c3:4e:
27:00:9c:0d:b4:bd:f6:3f:94:f9:a4:b3:12:a7:1d:5c:87:02:
2d:54:e2:58:49:09:1c:e3:8a:19:49:57:da:30:14:df:96:38:
76:4f:33:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 18:07:44 2026 by rpki-client