Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.mft
File: TweIqtIqxDcNUYy3-53-cktB-Vc.mft (raw, json)
Hash identifier: N8x0FCFJeNZBFWU/hwQ9sA1E6HLBOYZZaAE2klzCF6E=
Subject key identifier: AE:69:D7:07:E7:54:D9:52:B6:98:E6:6E:D9:64:63:3B:7E:D5:D1:2A
Authority key identifier: 4F:07:88:AA:D2:2A:C4:37:0D:51:8C:B7:FB:9D:FE:72:4B:41:F9:57
Certificate issuer: /CN=4f0788aad22ac4370d518cb7fb9dfe724b41f957
Certificate serial: 019CAA2200154BB2D245138C9AE312BC018D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TweIqtIqxDcNUYy3-53-cktB-Vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.mft
Manifest number: 145B
Signing time: Sun 01 Mar 2026 16:01:20 +0000
Manifest this update: Sun 01 Mar 2026 16:01:20 +0000
Manifest next update: Mon 02 Mar 2026 16:01:20 +0000
Files and hashes: 1: TweIqtIqxDcNUYy3-53-cktB-Vc.crl (hash: 9Jwu0/3s0nIzDHYADN3z9yn7xah1whsY8MkeXNW3g6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TweIqtIqxDcNUYy3-53-cktB-Vc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:22:00:15:4b:b2:d2:45:13:8c:9a:e3:12:bc:01:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f0788aad22ac4370d518cb7fb9dfe724b41f957
Validity
Not Before: Mar 1 16:01:20 2026 GMT
Not After : Mar 2 16:01:20 2026 GMT
Subject: CN=ae69d707e754d952b698e66ed964633b7ed5d12a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:69:b2:20:4f:7c:f5:ea:a7:4d:9d:4e:39:f2:
54:61:6b:a1:1c:f5:00:0b:39:81:da:77:d9:35:e6:
9d:c8:b6:99:5c:71:89:cc:cc:71:b0:79:76:93:50:
e4:66:65:ec:b2:b3:e7:18:dc:fd:8d:46:dd:12:6e:
44:00:7a:43:ab:71:0d:96:53:92:58:f4:75:ef:75:
b0:7b:ee:0b:72:ba:46:96:8c:c1:3c:c8:43:1b:07:
df:c0:b7:46:a3:e2:02:6c:39:2d:d2:bf:97:10:cb:
6b:d1:6d:8c:b5:cf:ef:54:4b:1f:c8:56:3f:e3:be:
07:4c:2e:fd:10:8b:d2:a0:d4:09:83:24:f6:0f:19:
f9:aa:7b:f9:bc:e9:df:2e:8c:02:d1:aa:76:34:3a:
e3:f8:18:ad:4a:80:c9:79:96:b8:bc:9a:83:2a:2e:
23:40:a6:cd:d4:1b:a5:19:90:97:28:08:40:c1:f2:
eb:e9:36:ca:9e:f7:de:56:88:00:5c:f6:d9:e7:20:
e7:4c:a6:99:b4:d3:9f:70:13:78:f0:da:a6:ee:57:
1b:2d:02:53:df:a1:6f:ff:5d:14:df:ee:70:29:5f:
ca:de:bf:6a:db:21:d5:94:98:b6:ef:7a:71:67:62:
c6:80:21:6d:7c:94:4f:e1:f7:74:da:e5:32:96:1b:
9c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:69:D7:07:E7:54:D9:52:B6:98:E6:6E:D9:64:63:3B:7E:D5:D1:2A
X509v3 Authority Key Identifier:
keyid:4F:07:88:AA:D2:2A:C4:37:0D:51:8C:B7:FB:9D:FE:72:4B:41:F9:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TweIqtIqxDcNUYy3-53-cktB-Vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:58:e7:11:52:94:37:2b:61:93:d3:66:7c:0b:24:f7:41:41:
32:ae:d2:f0:9b:0b:8a:c1:62:15:3d:15:cb:9d:97:f4:3a:03:
aa:ec:41:96:f1:81:15:14:96:26:6d:fe:21:ba:80:9a:c3:d7:
bc:77:c4:65:a9:06:3f:47:10:03:a1:e0:16:95:d2:f7:73:40:
19:cf:d2:5c:1d:a6:ed:30:fb:fd:79:0f:56:98:c7:4c:c3:b2:
2c:98:f0:50:c3:0a:ae:85:37:43:a9:f3:29:17:64:c4:3f:0e:
b5:73:9f:4f:35:3c:a9:51:0f:b3:3b:c3:32:06:e8:d3:1f:8f:
a8:39:11:77:a2:9a:74:e0:cd:b9:28:d7:a7:45:b4:6d:65:bd:
bd:df:c1:5d:7a:d7:bb:44:d7:52:c8:89:3e:fa:16:21:93:96:
cd:83:5b:c7:92:94:33:a1:76:a7:84:3f:71:7e:33:63:f3:7c:
85:dd:41:d4:56:9c:b0:f9:b0:5e:41:87:96:27:fe:0a:d4:a3:
f7:40:08:39:b3:a6:e5:d2:27:75:ae:34:b7:e5:ea:5f:b9:d2:
69:d6:88:24:ba:a1:5b:37:7f:c6:8c:39:ad:52:db:42:33:e5:
1d:48:e5:47:93:4c:2a:79:be:e8:1f:9a:ba:40:33:ce:57:4c:
d3:1f:23:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:07:53 2026 by rpki-client