Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.mft
File: e4f2uRGfqdzT4S5-a_twbf-XiCU.mft (raw, json)
Hash identifier: n3tFFUQsPXp+2pZkMtfbtA5U9HGZlv4N2BHva5nX+Zo=
Subject key identifier: 38:5A:2F:22:60:A8:E3:48:8D:BA:8D:8C:E2:CA:5B:86:0B:2F:7B:F4
Authority key identifier: 7B:87:F6:B9:11:9F:A9:DC:D3:E1:2E:7E:6B:FB:70:6D:FF:97:88:25
Certificate issuer: /CN=7b87f6b9119fa9dcd3e12e7e6bfb706dff978825
Certificate serial: 019D33766D2A2378ACDFFE37F6B2041D5BD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4f2uRGfqdzT4S5-a_twbf-XiCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.mft
Manifest number: 0DF2
Signing time: Sat 28 Mar 2026 08:01:32 +0000
Manifest this update: Sat 28 Mar 2026 08:01:32 +0000
Manifest next update: Sun 29 Mar 2026 08:01:32 +0000
Files and hashes: 1: 4da3-XmLEkYcc3sAjFZripmjHEs.roa (hash: 1i27nzDEtTVh1XcH6FHCSz2Xc6Yvv2oFolpv88tvSsU=)
2: e4f2uRGfqdzT4S5-a_twbf-XiCU.crl (hash: md18QbBadS+IINTNnrjXbhmj0Fi99KiNTMIvx/l8wzI=)
3: xSGU6r0B_I3lvM9xUa1OSbzHYVw.roa (hash: TCNyWuHnIfYABJLhXFXZbaq2jMFfVpuSOsPz4euzfpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/e4f2uRGfqdzT4S5-a_twbf-XiCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:76:6d:2a:23:78:ac:df:fe:37:f6:b2:04:1d:5b:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b87f6b9119fa9dcd3e12e7e6bfb706dff978825
Validity
Not Before: Mar 28 08:01:32 2026 GMT
Not After : Mar 29 08:01:32 2026 GMT
Subject: CN=385a2f2260a8e3488dba8d8ce2ca5b860b2f7bf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a8:bb:76:40:0a:a1:e5:f9:b4:c2:6f:2e:ba:
2c:03:80:13:2d:f8:36:c3:59:96:b7:2d:52:d9:90:
31:55:37:6f:fc:fb:18:76:ab:18:9b:bd:0a:0c:12:
60:1f:06:ea:24:d6:ce:5c:11:5e:49:09:0e:f9:9b:
7a:83:26:39:cf:88:e5:03:59:b3:1e:c1:76:10:d9:
10:be:5b:08:a7:9b:f8:1c:27:68:ba:a5:05:fd:55:
c7:87:92:7b:f9:72:80:d5:31:9e:86:4e:31:f1:aa:
80:40:17:6b:ad:1c:7d:ba:40:c0:10:4e:f8:94:e3:
de:d4:86:4b:4a:95:ef:29:57:a3:17:74:43:cf:0a:
99:7f:9a:18:1b:14:fe:fa:4a:a1:8c:b6:f2:cd:a4:
d6:d7:86:d5:03:b7:ff:ba:cd:f9:42:26:63:28:b2:
4d:36:3c:40:02:aa:aa:3f:38:d9:f5:f6:7a:c2:68:
de:ed:76:7f:3f:41:a6:4e:4c:f8:a3:39:13:fb:cb:
84:e6:d3:f8:44:20:29:dc:af:08:3d:52:77:cd:9a:
8d:5b:15:99:df:c2:23:32:5c:5b:43:50:f7:08:98:
98:18:d3:fc:4e:79:e8:26:42:a4:a7:e1:c3:03:79:
1d:62:1e:77:6b:91:8c:01:d3:b2:d7:a0:5e:71:67:
09:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:5A:2F:22:60:A8:E3:48:8D:BA:8D:8C:E2:CA:5B:86:0B:2F:7B:F4
X509v3 Authority Key Identifier:
keyid:7B:87:F6:B9:11:9F:A9:DC:D3:E1:2E:7E:6B:FB:70:6D:FF:97:88:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4f2uRGfqdzT4S5-a_twbf-XiCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:2b:be:0f:81:77:b3:0a:22:61:cb:16:c8:6d:90:86:98:a0:
6b:46:88:f1:dd:ce:aa:01:08:c5:3b:26:be:2c:cf:e6:3c:dc:
48:7b:13:e1:5b:8a:1a:dc:90:a6:d6:17:bd:35:c8:9f:0c:4b:
85:4a:43:5b:63:80:ea:92:37:22:c8:38:ad:cd:44:fe:83:9c:
a3:d8:78:8d:d1:e5:5f:d5:96:73:57:ad:eb:8d:06:35:00:09:
e8:36:c2:43:09:53:b4:bb:b8:5a:d8:bd:9b:83:f6:1b:9e:b6:
56:b4:ee:f0:8a:58:5f:b7:21:0a:49:ab:4b:bf:b8:2f:26:f6:
dd:08:1a:ef:f2:5b:62:ab:46:5a:d6:15:c0:8a:3c:e2:3e:2f:
bd:00:77:ea:98:55:d6:64:f9:f6:37:6e:cf:92:0c:bb:5a:5c:
24:07:c1:11:1e:e4:6c:1b:08:93:a1:44:7f:d2:fc:22:a3:e6:
b5:94:c8:da:36:50:83:26:ef:1b:1d:54:36:04:7b:98:04:79:
41:78:dc:7e:db:bc:28:4e:ec:9c:d3:59:8d:fc:25:b6:8c:6c:
53:55:d7:bd:26:5a:75:37:97:04:20:1e:6b:6e:9c:ad:cb:9f:
26:6a:ca:4f:66:3f:17:bd:00:d0:22:da:87:d6:ce:32:04:5e:
92:77:14:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:32:38 2026 by rpki-client