Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.mft
File: TWh9higIIltFn6OZ5l-KBpRpq6M.mft (raw, json)
Hash identifier: aJcWNPQaL3BW0IVxY5x/wDkKd/Uoz+Fx7TyzW3TGEq8=
Subject key identifier: 33:67:3A:91:B7:D9:DB:21:1E:31:48:14:C9:61:C3:27:C4:5A:E4:08
Authority key identifier: 4D:68:7D:86:28:08:22:5B:45:9F:A3:99:E6:5F:8A:06:94:69:AB:A3
Certificate issuer: /CN=4d687d862808225b459fa399e65f8a069469aba3
Certificate serial: 019D2960B64B73C527C5C4BCD0F7D31F712D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TWh9higIIltFn6OZ5l-KBpRpq6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.mft
Manifest number: 1818
Signing time: Thu 26 Mar 2026 09:01:37 +0000
Manifest this update: Thu 26 Mar 2026 09:01:37 +0000
Manifest next update: Fri 27 Mar 2026 09:01:37 +0000
Files and hashes: 1: TWh9higIIltFn6OZ5l-KBpRpq6M.crl (hash: gQfedyFPl3hF892bsXSPztAc55lhum3RD1W522BiopQ=)
2: wk26zi3ldsjZ_XJitrGy59Nt3RU.roa (hash: Y/LqsA9Orheu884pJMTCuEfdY61dLN5gUejTk6JnsDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/TWh9higIIltFn6OZ5l-KBpRpq6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:b6:4b:73:c5:27:c5:c4:bc:d0:f7:d3:1f:71:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d687d862808225b459fa399e65f8a069469aba3
Validity
Not Before: Mar 26 09:01:37 2026 GMT
Not After : Mar 27 09:01:37 2026 GMT
Subject: CN=33673a91b7d9db211e314814c961c327c45ae408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e9:17:b8:6f:cc:ac:98:60:db:7a:78:17:8c:
e5:d1:7a:a1:04:aa:ae:f6:44:1d:24:98:ad:dc:e8:
a1:2b:5a:e8:a2:4d:48:88:20:d1:aa:a8:dd:e7:23:
92:c1:4f:61:fd:4d:00:16:52:4b:d5:40:85:d7:bb:
bb:b7:3c:61:26:9a:77:b7:c7:94:55:30:f0:0b:67:
43:ab:94:7f:d0:04:d5:99:4f:a3:ee:b2:be:37:12:
10:d8:e7:e6:a7:3b:6f:dc:5a:f5:4c:d5:88:26:ee:
56:9e:dc:6e:a1:0e:1d:65:ba:5a:b9:24:51:3e:22:
56:ed:28:da:fb:4a:b3:a1:a3:81:23:9d:72:6a:ab:
e5:ac:fa:05:e9:f2:b3:b8:5e:ee:5d:77:10:b1:c5:
87:2d:24:6c:f6:69:3a:f6:f4:80:40:8d:39:56:76:
99:e5:12:4d:d9:0a:44:2a:21:ec:d2:07:e9:37:58:
6f:44:a9:68:14:6b:60:1c:72:86:82:9b:25:79:30:
ad:53:4b:62:f3:a6:87:72:66:9f:d4:c7:02:c4:3e:
34:ec:1d:d6:3e:38:9e:c0:2c:e5:73:f3:44:e0:1f:
3f:05:11:fe:c6:56:46:b0:49:41:da:36:b0:bb:0d:
d2:2e:ff:25:ce:ec:c9:b1:af:6f:01:a4:fb:22:3d:
d1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:67:3A:91:B7:D9:DB:21:1E:31:48:14:C9:61:C3:27:C4:5A:E4:08
X509v3 Authority Key Identifier:
keyid:4D:68:7D:86:28:08:22:5B:45:9F:A3:99:E6:5F:8A:06:94:69:AB:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TWh9higIIltFn6OZ5l-KBpRpq6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:df:b0:7e:4b:64:34:df:a1:e0:5d:c4:21:da:12:52:d1:12:
42:3d:1e:e0:bc:39:ca:b4:96:8f:e3:ba:24:0b:25:2c:f3:99:
10:87:7e:2f:bf:fa:65:bf:a1:3f:ac:ea:5a:41:09:9e:64:c1:
32:63:04:54:d3:c6:b5:4a:2d:91:85:c8:b1:fe:a2:7a:93:db:
0b:e9:eb:17:76:6c:22:34:3e:6b:bf:fd:4a:83:d9:4c:d3:37:
34:72:e0:59:92:b3:88:b0:fc:b9:b9:c5:a4:fd:4a:99:73:f2:
6e:c4:3e:e2:0d:60:1f:4f:0d:ec:8e:9b:e7:39:49:d4:5f:0a:
f2:8c:a2:35:4b:b8:73:88:f2:a4:e8:89:3b:51:82:45:2a:02:
b5:ea:f2:aa:d5:3b:17:0b:32:c4:51:75:0b:26:85:3a:85:af:
b9:72:45:e0:93:3d:a4:43:d0:52:77:bf:e7:22:d2:aa:37:e7:
6a:8a:31:d9:9e:00:f5:a0:5e:d6:01:ca:2f:64:52:d7:fa:7d:
5d:e9:aa:7a:17:cb:87:71:5b:76:77:79:a8:54:8a:cc:1f:62:
9d:cf:02:f0:47:14:d9:12:28:41:66:9a:6c:a3:46:b0:81:6d:
cd:b7:30:e5:1c:91:c1:b7:ae:df:81:54:97:fe:60:67:31:7b:
80:36:ed:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:57:42 2026 by rpki-client