Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.mft
File: e4f2uRGfqdzT4S5-a_twbf-XiCU.mft (raw, json)
Hash identifier: 5kCKLmAjBzVnJH6F12AYKZspskQpcYs8fSS35xmtXK8=
Subject key identifier: B8:AF:F6:A9:FB:BD:DA:6B:8F:32:4C:21:A5:9D:83:81:B7:87:A4:82
Authority key identifier: 7B:87:F6:B9:11:9F:A9:DC:D3:E1:2E:7E:6B:FB:70:6D:FF:97:88:25
Certificate issuer: /CN=7b87f6b9119fa9dcd3e12e7e6bfb706dff978825
Certificate serial: 01A0890BAF0BA9787E50BAA3A061E52A1D4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4f2uRGfqdzT4S5-a_twbf-XiCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.mft
Manifest number: 0FAC
Signing time: Thu 10 Sep 2026 02:00:39 +0000
Manifest this update: Thu 10 Sep 2026 02:00:39 +0000
Manifest next update: Fri 11 Sep 2026 02:00:39 +0000
Files and hashes: 1: 4da3-XmLEkYcc3sAjFZripmjHEs.roa (hash: 1i27nzDEtTVh1XcH6FHCSz2Xc6Yvv2oFolpv88tvSsU=)
2: e4f2uRGfqdzT4S5-a_twbf-XiCU.crl (hash: JnlvhkhuxPg8mMFBxcrHtkf2qxtkRHJcPTITqsXAD74=)
3: xSGU6r0B_I3lvM9xUa1OSbzHYVw.roa (hash: TCNyWuHnIfYABJLhXFXZbaq2jMFfVpuSOsPz4euzfpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/e4f2uRGfqdzT4S5-a_twbf-XiCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 02:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:0b:af:0b:a9:78:7e:50:ba:a3:a0:61:e5:2a:1d:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b87f6b9119fa9dcd3e12e7e6bfb706dff978825
Validity
Not Before: Sep 10 02:00:39 2026 GMT
Not After : Sep 11 02:00:39 2026 GMT
Subject: CN=b8aff6a9fbbdda6b8f324c21a59d8381b787a482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a9:cd:41:d7:97:21:83:b7:e2:da:ea:ff:6d:
7d:92:5b:20:73:08:e5:b4:09:c1:3c:62:fa:53:95:
60:54:bf:fc:2a:ef:7c:2c:3b:31:e7:b4:64:56:9c:
b2:d2:fa:1f:79:da:96:5c:db:fd:2f:48:3c:ad:18:
cc:81:96:dd:40:fe:0a:51:bc:8a:ab:a4:c9:41:ec:
5f:ce:d2:80:4f:80:d0:e8:7b:eb:ea:49:e1:57:10:
b8:f0:df:09:fc:86:02:e8:26:4e:85:aa:1e:13:64:
8b:f8:5d:c4:6d:75:24:be:a1:ad:e4:7b:ac:d8:36:
03:f7:69:a1:78:fd:b6:1d:60:bb:c5:94:9e:28:ef:
a1:55:ce:97:49:76:62:5d:fe:c3:73:67:27:83:08:
77:51:18:52:0d:6a:b5:59:d3:16:2e:78:81:58:c1:
80:72:e4:ed:d3:a1:85:ff:c4:fd:43:3c:c6:aa:51:
3f:71:3e:87:22:8a:7b:91:a5:dd:4c:4a:50:fb:d4:
bd:95:ab:a3:33:de:4a:01:32:46:4e:10:89:98:85:
5e:bb:a3:80:ad:84:0e:66:19:aa:89:e8:74:e5:a6:
15:ac:11:f8:7f:f6:a6:cd:eb:01:40:73:db:43:14:
6a:be:02:05:6c:07:62:08:53:33:10:c0:5e:f1:34:
e8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:AF:F6:A9:FB:BD:DA:6B:8F:32:4C:21:A5:9D:83:81:B7:87:A4:82
X509v3 Authority Key Identifier:
keyid:7B:87:F6:B9:11:9F:A9:DC:D3:E1:2E:7E:6B:FB:70:6D:FF:97:88:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4f2uRGfqdzT4S5-a_twbf-XiCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:a5:88:b2:82:61:7a:7e:6c:bb:63:d1:25:b0:8d:22:46:c4:
b6:db:9b:de:b1:72:92:ef:0d:46:af:39:25:02:6f:10:a5:94:
d7:73:f5:ff:64:08:52:95:37:bc:5f:64:b9:a4:07:ea:15:36:
dc:43:77:5f:21:5c:82:46:07:22:30:b1:25:e8:dd:d2:0a:8f:
78:41:0f:cb:59:df:49:e3:07:d8:fc:89:bf:81:c0:df:98:98:
24:c2:eb:b9:c2:52:94:d1:96:e1:cc:ff:c2:f8:aa:da:a7:d5:
56:d4:c2:81:58:e9:66:9c:cd:74:12:db:64:7c:b2:fa:38:52:
c8:20:01:3a:bc:a0:20:ef:88:44:91:e2:69:8b:0c:f7:70:0d:
ab:53:cf:3c:9c:b6:0d:de:84:5a:dd:5a:7d:ee:d3:98:89:a7:
7c:e8:c8:20:f9:2b:87:09:48:36:d3:2e:f5:b0:4d:78:35:3f:
ff:06:0c:55:b1:54:53:98:00:6c:00:31:98:66:31:92:10:7d:
2a:39:0a:79:57:e1:5a:5e:6a:c3:3a:4a:b0:18:2a:e9:28:b1:
9d:85:74:70:08:32:b5:64:d1:04:00:e8:4d:46:d6:20:66:89:
55:cc:a0:12:d0:4e:a7:63:40:b3:97:6a:31:f0:44:86:e4:49:
a0:32:cb:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 11:24:14 2026 by rpki-client