Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.mft
File: e4f2uRGfqdzT4S5-a_twbf-XiCU.mft (raw, json)
Hash identifier: 01Lb+/9OmJ5qnJgZhjkYQOqa5Or51WvlYkt/YHS2Zf4=
Subject key identifier: 6C:1E:A9:DA:6F:95:F9:2F:38:E7:BB:BB:7B:B4:FD:60:24:DA:CC:EC
Authority key identifier: 7B:87:F6:B9:11:9F:A9:DC:D3:E1:2E:7E:6B:FB:70:6D:FF:97:88:25
Certificate issuer: /CN=7b87f6b9119fa9dcd3e12e7e6bfb706dff978825
Certificate serial: 01A0D07F93496B6481C4F92561D7A3D0DD8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4f2uRGfqdzT4S5-a_twbf-XiCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.mft
Manifest number: 0FD1
Signing time: Wed 23 Sep 2026 23:00:16 +0000
Manifest this update: Wed 23 Sep 2026 23:00:16 +0000
Manifest next update: Thu 24 Sep 2026 23:00:16 +0000
Files and hashes: 1: 4da3-XmLEkYcc3sAjFZripmjHEs.roa (hash: 1i27nzDEtTVh1XcH6FHCSz2Xc6Yvv2oFolpv88tvSsU=)
2: e4f2uRGfqdzT4S5-a_twbf-XiCU.crl (hash: 5q32859fWjh8FJ6d8+21OkHlgJe4cII5lJnNqAYU5u0=)
3: xSGU6r0B_I3lvM9xUa1OSbzHYVw.roa (hash: TCNyWuHnIfYABJLhXFXZbaq2jMFfVpuSOsPz4euzfpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/e4f2uRGfqdzT4S5-a_twbf-XiCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:7f:93:49:6b:64:81:c4:f9:25:61:d7:a3:d0:dd:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b87f6b9119fa9dcd3e12e7e6bfb706dff978825
Validity
Not Before: Sep 23 23:00:16 2026 GMT
Not After : Sep 24 23:00:16 2026 GMT
Subject: CN=6c1ea9da6f95f92f38e7bbbb7bb4fd6024daccec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:24:04:b2:9f:89:2b:3d:10:6a:c6:b7:72:c9:
cc:b8:08:34:55:89:65:76:c3:c1:01:00:29:02:30:
f4:b6:37:2b:04:bf:c5:d2:ec:41:62:62:40:2e:0c:
95:8c:d7:28:a1:2a:a7:5e:ee:69:a8:fe:0e:da:58:
20:e1:01:71:85:6b:d4:80:57:2a:11:7d:fe:46:e5:
21:02:e7:60:3d:a1:f9:39:ae:f8:8e:ac:35:4a:d6:
e9:f4:cb:b2:44:38:48:94:c9:b4:1f:92:df:a6:2a:
4f:58:c6:67:af:f5:59:ea:c5:d2:93:2e:e9:b3:7b:
07:85:8f:8e:cd:c1:13:2b:31:6c:ce:8c:40:b4:4e:
8d:70:aa:1d:4b:ed:a8:f8:d0:55:e8:f1:25:e8:07:
29:b9:d9:ec:54:ea:e7:c8:85:3c:d5:5f:3a:cf:68:
ee:bc:d1:6c:45:f4:d3:82:22:e8:46:60:6f:67:a4:
14:8f:5e:3a:55:51:8a:81:37:2d:56:6c:ce:64:36:
7f:32:9f:71:2d:8f:62:f1:6d:08:2a:91:3e:8c:8c:
8f:ac:2c:c1:3b:15:44:1d:0b:5a:f9:75:e3:17:5b:
f2:dd:56:c9:a6:0a:f3:20:b4:a6:94:2d:b2:b2:0a:
67:40:27:e6:65:f9:2d:fb:2f:15:5f:ad:8c:75:79:
5a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:1E:A9:DA:6F:95:F9:2F:38:E7:BB:BB:7B:B4:FD:60:24:DA:CC:EC
X509v3 Authority Key Identifier:
keyid:7B:87:F6:B9:11:9F:A9:DC:D3:E1:2E:7E:6B:FB:70:6D:FF:97:88:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4f2uRGfqdzT4S5-a_twbf-XiCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e0:8a:42:51:52:5d:72:e3:a9:6c:74:f5:01:06:61:53:5a:67:
8c:89:ba:85:30:5c:78:c4:9e:31:9c:59:70:32:80:a0:8d:05:
8a:c2:a0:f8:4e:2e:65:5c:b0:3b:95:af:95:e6:0b:41:cb:38:
5d:76:9a:ae:7a:e7:6f:a4:f6:5d:11:a6:19:d5:6b:f6:b3:67:
d8:f0:11:ea:56:86:dc:ca:67:d3:8f:4c:6e:e0:3b:44:e3:0d:
c3:81:63:6f:7d:d2:2a:0d:e1:ab:83:60:81:0e:30:68:f3:84:
06:4a:20:f1:46:15:2f:0b:12:02:96:22:2d:72:a8:ff:b5:9b:
fe:6b:5a:31:64:7b:f6:50:ab:7e:e7:8b:a2:8e:db:5b:5a:34:
8c:57:c5:56:ef:46:8b:da:74:31:33:2b:a7:ee:bf:d1:9c:73:
3a:3f:d1:35:0d:cf:10:2a:01:41:e0:39:f1:5e:0c:43:8b:74:
1f:e7:02:17:11:7f:1c:6f:5c:03:40:8e:d9:d9:49:3d:d4:32:
8c:54:07:66:b0:5e:d3:8d:b4:a1:da:52:5d:ac:1e:a5:95:e5:
98:06:9d:94:43:ae:88:ec:23:b7:f8:03:eb:01:b6:1a:7b:e2:
ad:1e:f1:d2:c0:92:47:0e:ca:cf:a9:ce:dd:0b:60:b3:74:26:
86:0c:d4:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 05:56:52 2026 by rpki-client