Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/133bb5-11fb-4f94-8f29-aca3b8283fe3/1/TW8ORKf28MiMzpxG26jscuxhdSs.mft
File: TW8ORKf28MiMzpxG26jscuxhdSs.mft (raw, json)
Hash identifier: BV/f3r1w975EFhpPo1Ekopuxs6hu6xWXOqCrUe1HBN0=
Subject key identifier: 3B:63:74:17:2F:36:50:15:F0:8C:F3:3D:66:5D:93:9F:F4:E6:9E:6A
Authority key identifier: 4D:6F:0E:44:A7:F6:F0:C8:8C:CE:9C:46:DB:A8:EC:72:EC:61:75:2B
Certificate issuer: /CN=4d6f0e44a7f6f0c88cce9c46dba8ec72ec61752b
Certificate serial: 019D28F20FBF723302224609FBA66C1028EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TW8ORKf28MiMzpxG26jscuxhdSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/133bb5-11fb-4f94-8f29-aca3b8283fe3/1/TW8ORKf28MiMzpxG26jscuxhdSs.mft
Manifest number: 0B3C
Signing time: Thu 26 Mar 2026 07:00:45 +0000
Manifest this update: Thu 26 Mar 2026 07:00:45 +0000
Manifest next update: Fri 27 Mar 2026 07:00:45 +0000
Files and hashes: 1: TW8ORKf28MiMzpxG26jscuxhdSs.crl (hash: aVFZ2riGO9AeFToMVzToYX7yB7c9VdxckYuYaEm7gmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/133bb5-11fb-4f94-8f29-aca3b8283fe3/1/TW8ORKf28MiMzpxG26jscuxhdSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/133bb5-11fb-4f94-8f29-aca3b8283fe3/1/TW8ORKf28MiMzpxG26jscuxhdSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/TW8ORKf28MiMzpxG26jscuxhdSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:0f:bf:72:33:02:22:46:09:fb:a6:6c:10:28:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d6f0e44a7f6f0c88cce9c46dba8ec72ec61752b
Validity
Not Before: Mar 26 07:00:45 2026 GMT
Not After : Mar 27 07:00:45 2026 GMT
Subject: CN=3b6374172f365015f08cf33d665d939ff4e69e6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:16:61:db:bb:f1:14:10:6a:f1:59:86:ee:d5:
47:e3:7d:e6:96:b9:6f:9e:a3:9f:93:d3:32:09:aa:
c0:44:ac:0f:5d:fd:91:37:56:78:f3:1d:ad:b7:d7:
9c:aa:1f:0f:7f:8d:f3:13:20:55:02:b3:2d:0d:f1:
37:ee:ac:3f:1b:b3:1f:e8:3f:34:1e:ef:78:a2:9c:
c8:25:aa:38:34:5e:74:d5:0a:44:3f:79:8d:a8:f7:
19:b7:b3:e7:68:cb:d4:d7:cb:5c:fe:53:2e:8e:46:
79:a7:ca:2d:76:02:a7:d6:64:e2:9f:3d:9f:36:a8:
23:8a:5f:01:47:e2:c1:dc:c5:ff:da:9a:0d:8e:6e:
dc:75:bc:42:00:bb:a5:5f:c7:27:fe:11:1f:a1:e5:
30:2b:fb:5e:bd:68:de:37:09:42:ce:a5:e3:80:f0:
29:7f:47:cf:bd:90:97:b1:36:6a:11:c3:c8:25:b5:
5f:c7:7a:04:d3:54:9e:3e:b0:4b:b0:51:a7:9e:08:
a4:c2:f5:dc:54:da:4c:85:86:35:a4:85:55:5a:9a:
02:36:24:bc:bd:ce:54:a7:55:f4:cd:1b:a3:7d:5b:
61:d3:3d:7e:33:4c:4d:b3:84:ad:7a:a0:17:db:cc:
ac:14:d4:34:9d:af:37:64:44:ae:09:21:c9:15:59:
85:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:63:74:17:2F:36:50:15:F0:8C:F3:3D:66:5D:93:9F:F4:E6:9E:6A
X509v3 Authority Key Identifier:
keyid:4D:6F:0E:44:A7:F6:F0:C8:8C:CE:9C:46:DB:A8:EC:72:EC:61:75:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TW8ORKf28MiMzpxG26jscuxhdSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/133bb5-11fb-4f94-8f29-aca3b8283fe3/1/TW8ORKf28MiMzpxG26jscuxhdSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/133bb5-11fb-4f94-8f29-aca3b8283fe3/1/TW8ORKf28MiMzpxG26jscuxhdSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:b3:1d:9d:71:30:f4:d5:98:c5:40:78:d8:bb:85:61:cb:f1:
15:51:0b:3f:16:73:4d:6a:75:db:e1:f1:a9:4f:07:87:d4:ba:
86:45:9f:ee:1e:49:1c:6b:f3:fa:b0:03:87:d8:03:cb:9d:e1:
17:84:50:65:13:44:1b:04:bc:cc:2f:e7:31:1a:51:22:83:d0:
e6:fb:da:c5:f6:d6:e3:f8:5a:10:01:06:b4:f0:5b:88:a7:12:
a2:7c:54:5b:1a:08:d5:d6:68:c5:53:81:80:d5:10:07:09:6a:
a2:af:ff:93:15:e0:1e:dc:1c:37:2e:4c:ab:1c:45:24:da:54:
f9:d2:7b:d6:2d:8c:b8:9b:c7:a4:d1:3a:88:31:55:f5:72:91:
f7:1e:bb:65:d2:2b:01:ca:8c:1f:aa:3b:a6:b8:e9:9c:7b:0a:
58:93:79:fb:29:c9:4b:3c:81:75:0c:cd:25:e6:13:0f:f8:77:
1e:14:a4:ec:79:3c:fe:8a:cb:af:99:a6:7d:72:5e:28:12:43:
33:dc:ca:95:96:ab:3d:71:08:24:15:69:af:4d:b4:28:de:54:
d0:af:ef:40:28:62:04:b8:31:db:28:c1:ae:1e:cb:2f:59:37:
78:3b:e1:44:a7:d5:92:3d:6c:eb:ad:24:44:8a:c4:bd:b3:83:
23:63:af:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:49:47 2026 by rpki-client