Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.mft
File: Tw532cb_aNymjwXfj0Z17nvcsLw.mft (raw, json)
Hash identifier: QOCb0nSfd5Bo0BkQFiIQvYPPfm81QdvaZHr7fT0Vng4=
Subject key identifier: 22:F3:81:BA:38:3F:4A:A8:D6:7F:13:E3:72:52:E6:31:B1:05:35:AC
Authority key identifier: 4F:0E:77:D9:C6:FF:68:DC:A6:8F:05:DF:8F:46:75:EE:7B:DC:B0:BC
Certificate issuer: /CN=4f0e77d9c6ff68dca68f05df8f4675ee7bdcb0bc
Certificate serial: 019D270395F5E8D80854CAE255B0F2F54767
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tw532cb_aNymjwXfj0Z17nvcsLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.mft
Manifest number: 1890
Signing time: Wed 25 Mar 2026 22:00:39 +0000
Manifest this update: Wed 25 Mar 2026 22:00:39 +0000
Manifest next update: Thu 26 Mar 2026 22:00:39 +0000
Files and hashes: 1: 39rMz_WIR2e8L2mM9nRbVwSsWYs.asa (hash: 5o54GUaG5AJOqUjqrqNiS3NWFX9t0EEkMJIm09Gxdrg=)
2: 3XPbOVP5LZm9gbvbxeYXvE-UXNY.roa (hash: P5VCL1xp51uhegWvbhWmEVzPBE26QsXY7i6bNOoE28E=)
3: 4lw_9PAntET-B5MMVn16dO3Hcls.roa (hash: UDzY7XNVR7aRxZCWElIUyD0jHCPvLTcFxpVSeLZMRg4=)
4: Tw532cb_aNymjwXfj0Z17nvcsLw.crl (hash: 9LXX4WNvpU1oPnvZZUCuz4vV8qSIeLleWqaSCa86YIk=)
5: cqsm3cZPpf_tObwDEACdHxs7fkA.roa (hash: d+AU9b3PeXFxvtfVifLL55zjYWSVguy94TW2GQv8rLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tw532cb_aNymjwXfj0Z17nvcsLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:95:f5:e8:d8:08:54:ca:e2:55:b0:f2:f5:47:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f0e77d9c6ff68dca68f05df8f4675ee7bdcb0bc
Validity
Not Before: Mar 25 22:00:39 2026 GMT
Not After : Mar 26 22:00:39 2026 GMT
Subject: CN=22f381ba383f4aa8d67f13e37252e631b10535ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:02:ab:e6:42:7d:83:a5:21:a3:c7:56:c7:e6:
91:87:b4:11:60:68:25:00:d8:b7:cb:13:4d:29:94:
5a:64:f8:81:50:bd:4b:bf:0e:ca:cd:8b:45:57:c9:
78:40:8b:a9:ec:21:31:77:56:41:2e:30:38:52:af:
ef:59:4a:9b:0d:4a:fa:99:c8:5e:fc:02:6f:0e:c8:
d8:cc:6d:38:a6:4c:05:70:01:d8:98:e9:5f:a2:d0:
51:19:8f:0d:ce:d4:8f:7d:b3:55:6a:4f:17:b1:20:
97:5d:a2:84:84:fc:73:0b:c5:6c:9b:ab:9a:79:60:
ce:4b:54:9b:94:85:07:68:11:e4:d6:25:28:c9:1c:
a4:2a:f2:69:d0:9c:10:2e:3b:5c:7e:ef:42:f9:8a:
7c:54:31:f0:88:d0:02:dd:59:0c:61:e3:10:1d:b6:
da:be:0e:10:b7:e8:8b:8f:23:e9:a7:4b:7b:0d:35:
73:9b:67:a8:45:d5:aa:88:14:05:63:03:5b:d7:9a:
e1:2e:a2:c7:70:60:79:76:a9:37:9a:ee:2a:0a:6b:
34:9e:a2:93:02:b6:63:63:c3:dd:21:2f:81:b3:40:
23:70:e2:41:64:c0:3e:89:9d:b2:c4:69:a3:ed:5a:
52:2c:52:31:09:df:bb:61:d0:0b:44:51:9c:f4:54:
c5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:F3:81:BA:38:3F:4A:A8:D6:7F:13:E3:72:52:E6:31:B1:05:35:AC
X509v3 Authority Key Identifier:
keyid:4F:0E:77:D9:C6:FF:68:DC:A6:8F:05:DF:8F:46:75:EE:7B:DC:B0:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tw532cb_aNymjwXfj0Z17nvcsLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:84:9a:cb:cc:d0:6b:10:bf:bc:b6:df:ab:29:f1:89:1f:b5:
ba:f6:3f:e6:04:0f:69:f3:cd:23:cb:76:e9:c8:da:a6:d5:e2:
68:dc:41:a4:fb:f8:4b:fe:d7:50:7a:dc:66:f7:67:7a:01:82:
ba:58:e0:4a:05:6e:c6:31:0a:ac:20:a2:a7:6d:8a:a7:04:b1:
80:0f:24:89:5f:db:b4:30:e9:48:01:60:3a:2d:dd:d9:2d:ff:
f5:7b:bb:51:d0:cc:cb:73:b7:bb:7e:45:02:29:19:cc:93:b4:
53:29:59:e4:39:11:3b:a7:0a:64:d3:60:30:09:5e:05:4e:f1:
ee:94:f2:1d:79:c1:c1:d4:c3:eb:36:b9:fb:dd:b1:e0:39:c5:
05:47:0d:c1:9a:f0:25:0b:90:ff:0b:d4:b7:93:bd:f2:aa:c5:
a1:f4:a9:52:80:38:4d:83:0e:f7:93:f1:ed:4a:71:e7:5c:53:
84:e6:fd:c4:0b:76:b5:2a:d5:e0:cf:19:eb:d4:40:29:a5:05:
80:69:4c:c8:3a:c7:e6:3e:81:31:1c:d5:f3:5e:aa:03:44:91:
c8:26:f8:92:03:4b:d8:cc:1a:40:37:55:8d:1d:68:d5:13:59:
06:b8:fc:dd:ce:a3:ef:cb:bb:8a:eb:b0:6c:77:75:c0:01:d8:
55:ff:93:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:37:58 2026 by rpki-client