Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/64ecd9-a2f8-4685-a872-b4056916b18b/1/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.mft
File: TwEzP4bKlwcaD5YSa6OOIlLnCjQ.mft (raw, json)
Hash identifier: VaAa4D/w2YnovfMmEND2fOaiUiMgI7v1J4IiAsqcg9I=
Subject key identifier: 10:DC:F9:E1:DB:05:90:4D:C3:D4:0E:4D:BA:CD:10:FD:A0:FF:60:C3
Authority key identifier: 4F:01:33:3F:86:CA:97:07:1A:0F:96:12:6B:A3:8E:22:52:E7:0A:34
Certificate issuer: /CN=4f01333f86ca97071a0f96126ba38e2252e70a34
Certificate serial: 019D28BB5E736B5A1D02231BF1BFCDE03232
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/64ecd9-a2f8-4685-a872-b4056916b18b/1/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.mft
Manifest number: 0B75
Signing time: Thu 26 Mar 2026 06:01:01 +0000
Manifest this update: Thu 26 Mar 2026 06:01:01 +0000
Manifest next update: Fri 27 Mar 2026 06:01:01 +0000
Files and hashes: 1: TwEzP4bKlwcaD5YSa6OOIlLnCjQ.crl (hash: n9MQVTp3fwAapJ7Cf1QSp+CrbEbBcTfTHzoPzndveZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/64ecd9-a2f8-4685-a872-b4056916b18b/1/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/64ecd9-a2f8-4685-a872-b4056916b18b/1/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:5e:73:6b:5a:1d:02:23:1b:f1:bf:cd:e0:32:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f01333f86ca97071a0f96126ba38e2252e70a34
Validity
Not Before: Mar 26 06:01:01 2026 GMT
Not After : Mar 27 06:01:01 2026 GMT
Subject: CN=10dcf9e1db05904dc3d40e4dbacd10fda0ff60c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:40:08:e0:9b:d7:dc:cd:3a:71:6d:40:85:1e:
c5:c9:04:61:5f:56:5c:20:a0:da:61:5b:dc:3d:a2:
ad:7f:da:81:0c:b2:31:48:39:f7:47:e2:44:79:ca:
22:09:64:90:35:0a:6f:dc:27:ba:87:1e:7c:42:e0:
9e:c4:d3:fb:1c:ca:d3:85:1a:64:3a:49:8a:70:ad:
8f:56:fa:86:3f:51:3c:af:82:48:00:62:8b:01:f3:
8c:1b:ac:b1:52:5c:ef:2f:cb:d2:59:41:f1:01:85:
ca:80:51:18:2b:d5:bd:12:3c:32:a8:b3:e2:8d:5d:
b2:f5:19:9c:17:70:36:85:98:f9:a0:08:75:fa:ef:
17:c9:59:5c:75:0a:1c:59:10:29:25:16:2b:fe:4a:
38:22:da:ef:65:4a:49:01:31:b1:ed:c4:e6:7e:d0:
39:bf:fb:94:45:9b:88:7c:9f:42:ab:33:22:e0:37:
06:48:56:2d:b7:f7:ae:43:68:e3:c0:be:68:b7:26:
33:6e:4c:15:91:aa:54:31:13:7b:78:66:fc:47:d8:
34:99:88:18:5d:19:4d:13:eb:2c:38:56:bf:77:ea:
6a:e5:af:a2:bb:c9:11:e9:90:ea:9f:27:f0:2a:61:
c4:65:d1:22:32:a9:67:b3:3a:3b:91:07:5c:7a:75:
f3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:DC:F9:E1:DB:05:90:4D:C3:D4:0E:4D:BA:CD:10:FD:A0:FF:60:C3
X509v3 Authority Key Identifier:
keyid:4F:01:33:3F:86:CA:97:07:1A:0F:96:12:6B:A3:8E:22:52:E7:0A:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/64ecd9-a2f8-4685-a872-b4056916b18b/1/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/64ecd9-a2f8-4685-a872-b4056916b18b/1/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:0c:51:79:63:cc:74:7b:44:e3:f6:5d:0f:91:60:a9:1a:b3:
3e:13:ee:8c:15:ce:6d:66:eb:4a:cc:b3:22:ee:f4:cf:86:2d:
48:3e:28:66:ed:11:07:9e:48:ee:27:47:65:7b:53:41:ac:b0:
d0:57:26:ac:b9:94:9d:c8:af:fc:50:78:e3:15:6b:99:14:7c:
fe:5f:56:a9:26:0b:58:7f:b9:15:e4:ce:fc:06:3e:c9:d4:3d:
ce:78:27:77:37:f0:9c:70:31:1b:0d:2b:f1:31:f2:57:55:0e:
b5:a1:3d:0f:77:70:b3:29:fe:23:5b:c7:7e:99:63:22:15:a5:
ea:c7:32:c4:74:00:d5:3a:ec:f3:0b:6c:cb:54:ab:b3:1b:60:
eb:bd:59:65:cb:5d:1f:2d:0d:c0:6a:4c:06:ec:41:b4:78:44:
8a:aa:a2:03:80:28:02:90:f7:c0:cb:2e:e9:f7:41:fa:28:9b:
7d:b7:19:ee:da:3f:11:38:2f:f9:3c:73:56:e2:a8:62:7e:0a:
f0:54:d1:c9:28:8f:8d:79:bc:88:29:7f:27:15:34:03:93:c7:
45:d1:1a:d8:da:fe:e4:b4:5a:b3:5e:9d:89:81:9f:0e:47:a4:
e1:1b:d4:10:f9:32:eb:1f:54:73:22:cc:e0:89:ee:85:e9:39:
72:7e:78:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:58:27 2026 by rpki-client