Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.mft
File: e4f2uRGfqdzT4S5-a_twbf-XiCU.mft (raw, json)
Hash identifier: VQIvpBsYLvnPsDgageMztdsI8Cj/6B2KygtXISEpElw=
Subject key identifier: B6:1E:69:37:0D:9F:0C:FD:C1:25:F1:F6:CF:F5:D0:D1:B6:F5:92:42
Authority key identifier: 7B:87:F6:B9:11:9F:A9:DC:D3:E1:2E:7E:6B:FB:70:6D:FF:97:88:25
Certificate issuer: /CN=7b87f6b9119fa9dcd3e12e7e6bfb706dff978825
Certificate serial: 01A0CE91C94027B351111CD404CBACA160B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4f2uRGfqdzT4S5-a_twbf-XiCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.mft
Manifest number: 0FD0
Signing time: Wed 23 Sep 2026 14:00:55 +0000
Manifest this update: Wed 23 Sep 2026 14:00:55 +0000
Manifest next update: Thu 24 Sep 2026 14:00:55 +0000
Files and hashes: 1: 4da3-XmLEkYcc3sAjFZripmjHEs.roa (hash: 1i27nzDEtTVh1XcH6FHCSz2Xc6Yvv2oFolpv88tvSsU=)
2: e4f2uRGfqdzT4S5-a_twbf-XiCU.crl (hash: /T4moWXuAhMUDcutCXAQuRiBd/xdE0X3ie4CKKHjGTY=)
3: xSGU6r0B_I3lvM9xUa1OSbzHYVw.roa (hash: TCNyWuHnIfYABJLhXFXZbaq2jMFfVpuSOsPz4euzfpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/e4f2uRGfqdzT4S5-a_twbf-XiCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:91:c9:40:27:b3:51:11:1c:d4:04:cb:ac:a1:60:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b87f6b9119fa9dcd3e12e7e6bfb706dff978825
Validity
Not Before: Sep 23 14:00:55 2026 GMT
Not After : Sep 24 14:00:55 2026 GMT
Subject: CN=b61e69370d9f0cfdc125f1f6cff5d0d1b6f59242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b5:f2:32:21:99:b2:8d:32:b7:c7:fa:aa:73:
82:69:17:7c:78:17:78:e3:65:30:31:0c:b4:43:f2:
16:af:c9:b3:55:a0:5c:b4:c8:97:57:3b:30:5b:98:
58:82:42:27:a9:e6:b6:53:9b:54:e7:93:b1:db:8b:
ee:93:47:66:d4:61:2c:ac:89:13:68:1f:ea:d8:34:
f4:fa:e8:34:21:10:a4:4f:14:0d:b3:0e:0d:40:e4:
5d:1e:a3:25:11:3c:7c:f0:6b:95:08:df:84:1a:80:
e2:14:68:33:f0:96:e9:2e:81:b1:7e:ac:19:fb:a8:
3e:f0:f4:eb:62:34:7c:c1:13:d7:73:ad:55:44:34:
7f:c2:fc:75:73:d7:1a:0a:2a:0e:9e:26:66:56:c5:
12:6c:5b:1b:ad:c7:0f:98:11:b9:38:02:15:fd:b9:
e7:32:56:f4:1f:e4:22:1d:08:43:a7:59:36:e8:70:
78:92:a7:61:2a:4b:5d:80:00:d3:eb:65:e7:da:bf:
54:a1:be:07:53:df:96:0a:f2:4f:cb:3f:69:ac:af:
75:10:c0:2f:8e:aa:89:74:01:b3:4e:42:84:c5:a9:
f7:7e:52:2e:cd:03:bd:8f:0a:f8:b7:a4:37:bc:06:
00:47:7c:a8:cf:80:bc:e9:61:40:11:79:a7:bf:5f:
c0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:1E:69:37:0D:9F:0C:FD:C1:25:F1:F6:CF:F5:D0:D1:B6:F5:92:42
X509v3 Authority Key Identifier:
keyid:7B:87:F6:B9:11:9F:A9:DC:D3:E1:2E:7E:6B:FB:70:6D:FF:97:88:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4f2uRGfqdzT4S5-a_twbf-XiCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:3a:4d:51:62:07:57:d4:e5:d1:a9:9d:9e:35:7c:55:ea:a0:
14:9a:4c:b8:4a:cd:db:91:0c:ad:5b:98:4a:49:89:b8:04:63:
a3:b6:22:00:2f:3d:ca:34:8a:3b:ba:03:c2:0f:d3:3f:33:de:
23:7a:8c:8f:19:19:c7:e3:e3:46:2f:f5:9f:71:8f:43:03:2f:
cb:02:b4:7f:85:4c:8b:8c:7d:42:fa:c3:13:3f:ca:13:77:85:
3a:6a:28:c0:93:9c:0a:80:f4:4d:30:d4:9d:a9:d7:84:ab:23:
bf:d7:3e:81:18:e5:4d:1d:4d:0a:a7:3b:32:8c:69:e1:1f:c1:
cc:db:04:f5:67:ed:20:16:a6:7f:fd:13:44:ab:63:bf:c9:75:
67:a3:19:9f:0b:2c:d9:13:0d:33:66:63:31:03:a5:6b:4d:62:
6d:4b:00:03:45:a2:04:dc:f0:99:5a:69:3a:80:e9:1c:13:58:
4c:85:f4:0d:67:f1:95:36:a6:62:ad:e5:a3:01:58:49:4c:2b:
ca:b6:35:c1:35:ef:5f:57:2e:73:2d:c9:6b:3f:45:ae:50:54:
95:35:08:34:04:20:06:f1:ce:b1:af:64:ef:31:19:5f:3a:db:
1f:ea:8f:93:5f:ca:5c:d7:d7:62:8b:47:38:7b:50:70:8a:f0:
02:2e:9c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:34:05 2026 by rpki-client