Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/572b15-bfd7-48e0-bd9b-e69562097086/1/TWJ6NJyeo81uXc2grNej_IQ-xzs.mft
File: TWJ6NJyeo81uXc2grNej_IQ-xzs.mft (raw, json)
Hash identifier: SGMDb7HpDnbciBdeFnnUjN10ma9jQHb9dU+e3UxDUHw=
Subject key identifier: F4:7E:61:5E:74:9F:2B:8D:31:5B:CC:44:8F:48:B9:B1:A7:BE:63:9D
Authority key identifier: 4D:62:7A:34:9C:9E:A3:CD:6E:5D:CD:A0:AC:D7:A3:FC:84:3E:C7:3B
Certificate issuer: /CN=4d627a349c9ea3cd6e5dcda0acd7a3fc843ec73b
Certificate serial: 01A107DC823B45B32F7AA25B54A031CC4CFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TWJ6NJyeo81uXc2grNej_IQ-xzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/572b15-bfd7-48e0-bd9b-e69562097086/1/TWJ6NJyeo81uXc2grNej_IQ-xzs.mft
Manifest number: 0159
Signing time: Sun 04 Oct 2026 17:00:53 +0000
Manifest this update: Sun 04 Oct 2026 17:00:53 +0000
Manifest next update: Mon 05 Oct 2026 17:00:53 +0000
Files and hashes: 1: TWJ6NJyeo81uXc2grNej_IQ-xzs.crl (hash: rTPo0x61p1/Hnz1L5k5iPDZrHWcSTIqovbYAgsIGw2s=)
2: c-MYYoNI7ANhpWNl4U8F_Hfzmow.roa (hash: skbSxRIkUCLTSaqSWg0+FjMPhARmWa5xKrDu6w4W5Wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/572b15-bfd7-48e0-bd9b-e69562097086/1/TWJ6NJyeo81uXc2grNej_IQ-xzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/572b15-bfd7-48e0-bd9b-e69562097086/1/TWJ6NJyeo81uXc2grNej_IQ-xzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/TWJ6NJyeo81uXc2grNej_IQ-xzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 17:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:dc:82:3b:45:b3:2f:7a:a2:5b:54:a0:31:cc:4c:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d627a349c9ea3cd6e5dcda0acd7a3fc843ec73b
Validity
Not Before: Oct 4 17:00:53 2026 GMT
Not After : Oct 5 17:00:53 2026 GMT
Subject: CN=f47e615e749f2b8d315bcc448f48b9b1a7be639d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8e:8c:1c:29:51:13:64:14:23:22:23:ee:ba:
77:b4:75:bc:ac:e4:68:c4:d3:7e:5d:5b:df:1b:12:
3c:4f:c6:84:d3:87:3d:4b:b2:7b:21:02:44:1f:36:
8b:3a:f5:a9:1d:bf:5f:bb:31:9d:48:71:12:ff:70:
9c:cf:7f:b2:81:9e:e3:37:d0:e0:65:2c:09:be:82:
56:95:84:8e:b9:3e:48:57:8a:7a:46:75:2b:a2:33:
8c:b8:5e:c5:5a:7c:fa:c5:91:35:78:d8:92:61:97:
bb:93:84:fd:94:97:9d:b3:3c:fa:2d:e8:5c:6e:f3:
0c:d9:8c:56:c0:2c:e0:ab:7d:01:15:9a:86:eb:9b:
50:8e:93:08:9e:3b:72:4d:13:5c:d2:b8:38:75:b3:
de:d7:10:52:7f:7f:46:0b:a0:91:1b:c9:a7:1c:55:
54:17:8c:50:e0:1d:ac:ff:2d:59:b5:c5:d4:48:64:
c9:f9:b1:5f:fb:b5:82:86:8c:44:45:e9:73:cb:5e:
70:0e:a7:4a:ab:8c:9b:78:ff:f2:0a:21:9d:51:38:
f3:9a:c6:4f:6a:26:70:3d:ba:20:1c:df:42:de:98:
b7:02:d6:e0:da:c4:c9:d1:e8:2d:7e:cd:b5:82:5a:
62:98:02:2d:52:1e:9f:ca:7c:c2:c3:c8:56:28:c3:
6b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:7E:61:5E:74:9F:2B:8D:31:5B:CC:44:8F:48:B9:B1:A7:BE:63:9D
X509v3 Authority Key Identifier:
keyid:4D:62:7A:34:9C:9E:A3:CD:6E:5D:CD:A0:AC:D7:A3:FC:84:3E:C7:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TWJ6NJyeo81uXc2grNej_IQ-xzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/572b15-bfd7-48e0-bd9b-e69562097086/1/TWJ6NJyeo81uXc2grNej_IQ-xzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/572b15-bfd7-48e0-bd9b-e69562097086/1/TWJ6NJyeo81uXc2grNej_IQ-xzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:ee:39:4c:33:8e:e8:79:03:76:d1:ce:73:c2:2c:54:48:06:
25:ed:41:ba:6b:f1:0b:f8:38:d2:34:fb:41:e4:6a:be:c5:44:
32:d4:ea:7f:f3:ef:93:ee:59:6f:10:ea:01:e0:1e:da:cf:da:
45:da:ac:c4:7a:fe:c1:42:c7:6b:c3:db:0d:13:b3:60:43:7f:
36:d0:87:3a:e8:70:ef:01:da:67:43:59:9b:bd:75:39:14:4a:
af:3a:53:b5:99:76:da:5d:98:a3:91:1e:a1:6b:49:6b:50:f6:
60:ac:ad:51:f4:a8:7a:3a:fa:4b:9d:aa:6f:f3:3f:48:41:7f:
48:51:8c:74:91:41:52:e1:02:14:72:23:ec:01:9b:77:8e:fe:
5c:26:94:b3:0a:b3:bb:76:a8:b1:7d:d8:49:77:ce:57:a8:c3:
36:d0:bf:f9:5d:90:3f:f0:bc:aa:02:03:ab:1b:89:96:92:a7:
d4:46:a1:96:e6:77:dd:a8:32:3b:d8:f5:d3:e5:ec:91:1f:4f:
31:cc:58:91:93:69:83:e7:b9:5e:a5:6d:8b:44:39:e2:4e:db:
18:26:4c:d2:c2:74:68:ea:b9:5d:c1:77:17:88:0b:b6:c8:f5:
2a:a4:93:b9:22:df:80:73:6f:5e:32:13:76:ff:0b:57:df:d0:
1f:38:90:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 08:35:15 2026 by rpki-client