Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.mft
File: e4f2uRGfqdzT4S5-a_twbf-XiCU.mft (raw, json)
Hash identifier: xS1nvg1YrILWBOCkrsfNiKhRL3Sh06UqBrEW1iBGrsw=
Subject key identifier: 43:E2:01:7C:D8:33:4A:8A:24:71:EE:43:13:11:26:F9:73:3C:52:A0
Authority key identifier: 7B:87:F6:B9:11:9F:A9:DC:D3:E1:2E:7E:6B:FB:70:6D:FF:97:88:25
Certificate issuer: /CN=7b87f6b9119fa9dcd3e12e7e6bfb706dff978825
Certificate serial: 019DCDF564C0CE23EA74583A41650894638B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4f2uRGfqdzT4S5-a_twbf-XiCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.mft
Manifest number: 0E42
Signing time: Mon 27 Apr 2026 08:01:44 +0000
Manifest this update: Mon 27 Apr 2026 08:01:44 +0000
Manifest next update: Tue 28 Apr 2026 08:01:44 +0000
Files and hashes: 1: 4da3-XmLEkYcc3sAjFZripmjHEs.roa (hash: 1i27nzDEtTVh1XcH6FHCSz2Xc6Yvv2oFolpv88tvSsU=)
2: e4f2uRGfqdzT4S5-a_twbf-XiCU.crl (hash: TdByGXwvnz6fAQmVF79xr1ve4D0pN4O36Jle1st+4oQ=)
3: xSGU6r0B_I3lvM9xUa1OSbzHYVw.roa (hash: TCNyWuHnIfYABJLhXFXZbaq2jMFfVpuSOsPz4euzfpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/e4f2uRGfqdzT4S5-a_twbf-XiCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:f5:64:c0:ce:23:ea:74:58:3a:41:65:08:94:63:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b87f6b9119fa9dcd3e12e7e6bfb706dff978825
Validity
Not Before: Apr 27 08:01:44 2026 GMT
Not After : Apr 28 08:01:44 2026 GMT
Subject: CN=43e2017cd8334a8a2471ee43131126f9733c52a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:f9:90:9f:52:08:47:be:1a:04:fa:43:4c:9a:
f2:f7:90:67:f7:ff:0c:39:f0:d4:16:48:62:63:d5:
8a:2e:16:a9:37:94:02:ed:82:08:20:a6:dc:74:c7:
cf:63:19:b1:3f:56:f5:d2:4a:1d:91:5f:81:cb:19:
e9:1f:de:46:73:f6:42:5f:93:0c:e7:bc:f7:41:c6:
e7:d8:a1:0d:a5:30:a0:6e:38:5f:cc:db:40:f9:28:
79:20:60:1e:c7:c8:1e:78:cf:5c:0b:52:21:0d:99:
a5:35:5f:84:2b:00:73:58:49:dc:e6:20:01:2a:7e:
53:5c:a2:60:6a:b0:0c:86:98:f8:e9:86:58:51:84:
27:d2:4a:cb:76:a9:7f:55:fb:58:51:f8:1f:1b:86:
dc:9e:16:15:be:50:ac:65:6f:f9:b4:3c:a7:52:6d:
e9:60:96:59:28:31:a0:f2:ee:47:69:e3:a3:9b:4f:
dd:18:b8:0b:a0:ed:fc:c5:cb:27:0c:75:7b:ff:6d:
bf:80:67:6e:b9:4c:04:3f:f1:e8:ad:00:d2:88:f8:
f3:11:5b:98:92:f7:45:62:8b:ee:08:f0:2a:69:fc:
e0:05:3e:a1:34:49:cd:00:f8:46:b2:4f:66:96:99:
97:7d:0e:da:f6:a6:22:0c:2f:d9:15:6c:ff:e7:aa:
80:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:E2:01:7C:D8:33:4A:8A:24:71:EE:43:13:11:26:F9:73:3C:52:A0
X509v3 Authority Key Identifier:
keyid:7B:87:F6:B9:11:9F:A9:DC:D3:E1:2E:7E:6B:FB:70:6D:FF:97:88:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4f2uRGfqdzT4S5-a_twbf-XiCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:2e:48:70:c2:2e:9c:e0:e4:47:f6:2d:08:f2:91:86:7b:a5:
e6:76:24:52:00:3d:37:c4:f7:b4:5f:7a:c9:5e:b2:44:d6:0a:
a1:0a:bc:fa:f5:89:0a:60:0f:3e:ee:75:d9:34:90:07:1c:1f:
76:61:70:5d:fc:ca:9d:53:f2:40:c8:6c:05:ac:22:e9:5d:26:
b9:ab:46:81:5a:89:68:7c:24:26:c9:fb:19:89:61:56:a3:6e:
82:89:10:ae:89:ec:15:f9:fb:6b:e6:22:fe:74:65:6f:01:21:
fc:fb:e1:29:cc:61:7c:83:db:70:30:58:97:4b:51:0e:ce:d7:
3c:b7:5d:ca:11:97:44:17:67:76:0d:3e:39:73:13:53:db:d9:
ff:41:09:56:81:df:96:6f:d3:b7:a7:a7:0f:81:1d:a9:04:56:
a7:80:ec:eb:b1:94:62:7b:1c:30:7d:e1:55:11:de:4a:31:9b:
e8:7b:3c:cf:5c:7c:76:7c:e9:de:3b:99:68:6a:ce:57:ec:61:
58:14:26:b1:e5:ed:ab:37:cd:2a:d2:31:03:4a:03:47:e9:9c:
6f:dd:2c:55:89:89:90:56:0c:0b:80:ec:1e:6d:ac:ae:a4:85:
4e:eb:87:1c:ce:64:19:06:9d:f9:dc:8e:96:26:41:ad:cc:37:
81:0d:e2:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 18:31:03 2026 by rpki-client