Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.mft
File: TWh9higIIltFn6OZ5l-KBpRpq6M.mft (raw, json)
Hash identifier: zU+we5Yx/roOEITBA1z7MI3Ms0ICHTb86ggNfSszl/A=
Subject key identifier: 9C:77:32:A8:67:EA:9E:D5:09:40:C2:6D:75:DD:E2:18:AC:06:07:1C
Authority key identifier: 4D:68:7D:86:28:08:22:5B:45:9F:A3:99:E6:5F:8A:06:94:69:AB:A3
Certificate issuer: /CN=4d687d862808225b459fa399e65f8a069469aba3
Certificate serial: 01A12579A11DCE4DBCCFFF96A31807D74816
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TWh9higIIltFn6OZ5l-KBpRpq6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.mft
Manifest number: 1A2A
Signing time: Sat 10 Oct 2026 11:01:30 +0000
Manifest this update: Sat 10 Oct 2026 11:01:30 +0000
Manifest next update: Sun 11 Oct 2026 11:01:30 +0000
Files and hashes: 1: TWh9higIIltFn6OZ5l-KBpRpq6M.crl (hash: a6AJEbpuKm2Hk+lBRFXO658sFx9F6RIF2XWdXEVUk7U=)
2: aLO1_dk6LgzX4fm5tLs5_fRvIQg.roa (hash: ZIj/y9+pucp6g8B0V5z39DYYd8b4wFUj1DSlFdjES/E=)
3: wk26zi3ldsjZ_XJitrGy59Nt3RU.roa (hash: Y/LqsA9Orheu884pJMTCuEfdY61dLN5gUejTk6JnsDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/TWh9higIIltFn6OZ5l-KBpRpq6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:79:a1:1d:ce:4d:bc:cf:ff:96:a3:18:07:d7:48:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d687d862808225b459fa399e65f8a069469aba3
Validity
Not Before: Oct 10 11:01:30 2026 GMT
Not After : Oct 11 11:01:30 2026 GMT
Subject: CN=9c7732a867ea9ed50940c26d75dde218ac06071c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1d:ea:a8:8a:91:3a:0f:2c:04:ff:15:90:5e:
ac:7a:56:90:f3:03:5b:08:b3:8f:3c:31:85:9b:fd:
46:3e:bb:98:7c:07:89:12:21:ef:34:bf:c0:52:98:
b1:a1:65:81:61:70:80:bb:2c:4c:76:56:ea:25:63:
f7:c6:6d:97:50:7d:56:55:cb:4f:1e:cb:5e:23:d3:
36:66:35:95:f5:70:6c:e0:e7:86:6f:c8:21:92:48:
a2:61:5a:5c:71:61:b3:bf:c9:6e:01:68:2a:6d:9a:
d7:51:83:8a:bc:ff:17:0c:7e:c4:6b:28:5b:ba:c0:
51:0b:58:12:de:e6:bd:11:46:74:7d:49:20:ab:5e:
e0:b7:93:d6:aa:40:2d:be:de:0d:52:55:dc:3b:d3:
4f:b6:a6:f0:46:d4:5a:b4:94:de:13:8c:e5:52:ed:
71:c3:fe:13:32:db:fa:98:3f:7c:3c:c4:06:cb:7e:
24:34:4c:b3:be:e7:11:0f:55:3b:e3:ed:ef:7c:31:
80:3b:00:d0:48:00:57:a0:b2:35:e7:ed:12:69:fc:
39:09:e7:d3:76:a0:22:2c:91:0f:6d:52:b6:e8:33:
36:46:e8:4f:e1:4a:fc:2f:17:84:26:4f:ad:22:c5:
4d:0f:f0:2f:72:fd:9f:e5:17:de:d5:df:93:73:76:
56:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:77:32:A8:67:EA:9E:D5:09:40:C2:6D:75:DD:E2:18:AC:06:07:1C
X509v3 Authority Key Identifier:
keyid:4D:68:7D:86:28:08:22:5B:45:9F:A3:99:E6:5F:8A:06:94:69:AB:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TWh9higIIltFn6OZ5l-KBpRpq6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:ae:db:ee:27:5a:86:46:41:3d:9b:28:4d:10:a0:85:d9:b5:
c7:d9:a5:7c:34:4c:c1:46:3b:42:07:b8:ac:52:69:11:a8:95:
33:d5:83:fd:1d:62:ce:79:65:63:87:15:71:e3:aa:67:dc:b2:
f8:aa:d9:41:ef:1d:3e:f5:c2:02:cd:cd:e9:41:91:ab:ce:c1:
28:64:30:7d:84:ac:42:9a:33:99:5e:96:db:da:63:0f:34:91:
99:fd:44:18:75:01:c8:f9:c3:f0:98:55:e4:67:e7:09:fd:c2:
b8:f2:eb:6e:43:ce:bd:b7:51:43:74:ab:05:41:96:99:e3:1e:
2a:24:65:7b:ff:bc:22:ad:aa:fc:94:ab:8b:d8:a5:85:f7:ce:
29:5c:55:47:0d:19:6c:fe:fb:fc:14:03:e3:a7:4e:a5:84:9e:
67:86:0f:33:d9:58:62:e5:56:e8:f5:ce:ca:f6:ef:cf:91:bd:
f6:2d:a3:3a:b4:d8:e7:83:9c:a7:cd:e2:49:61:6d:d4:13:9c:
79:2d:4a:9c:a6:9b:58:9e:10:10:70:2b:60:1f:4d:a1:68:c4:
76:64:87:82:70:04:53:b9:06:c7:35:74:1d:d2:b7:43:b1:e6:
80:0a:47:a4:65:ff:98:e9:99:0d:65:4d:6a:0a:95:01:10:93:
4a:16:5b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 17:16:40 2026 by rpki-client