Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.mft
File: e4f2uRGfqdzT4S5-a_twbf-XiCU.mft (raw, json)
Hash identifier: UU7sML+gI8gV7Gd+Sgg7K+CLV5Yg9jaN+82t1f+H9nc=
Subject key identifier: 20:02:A8:B4:61:B1:77:F6:07:B2:87:93:88:D1:70:E1:E2:1C:CC:49
Authority key identifier: 7B:87:F6:B9:11:9F:A9:DC:D3:E1:2E:7E:6B:FB:70:6D:FF:97:88:25
Certificate issuer: /CN=7b87f6b9119fa9dcd3e12e7e6bfb706dff978825
Certificate serial: 01A17C60ADE27EA3D24A1ED295B09A836161
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4f2uRGfqdzT4S5-a_twbf-XiCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.mft
Manifest number: 102A
Signing time: Tue 27 Oct 2026 08:01:12 +0000
Manifest this update: Tue 27 Oct 2026 08:01:12 +0000
Manifest next update: Wed 28 Oct 2026 08:01:12 +0000
Files and hashes: 1: 4da3-XmLEkYcc3sAjFZripmjHEs.roa (hash: 1i27nzDEtTVh1XcH6FHCSz2Xc6Yvv2oFolpv88tvSsU=)
2: e4f2uRGfqdzT4S5-a_twbf-XiCU.crl (hash: 8K7MLXwfGwlVEewDfYbiGfkCoG1k/ziLeTXUAWWyFp8=)
3: xSGU6r0B_I3lvM9xUa1OSbzHYVw.roa (hash: TCNyWuHnIfYABJLhXFXZbaq2jMFfVpuSOsPz4euzfpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/e4f2uRGfqdzT4S5-a_twbf-XiCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:60:ad:e2:7e:a3:d2:4a:1e:d2:95:b0:9a:83:61:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b87f6b9119fa9dcd3e12e7e6bfb706dff978825
Validity
Not Before: Oct 27 08:01:12 2026 GMT
Not After : Oct 28 08:01:12 2026 GMT
Subject: CN=2002a8b461b177f607b2879388d170e1e21ccc49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:00:c0:11:cc:c3:ad:53:0b:f2:1a:87:e2:54:
80:60:13:ff:81:96:f0:9b:f4:7f:df:63:c1:3b:74:
52:33:a9:f5:79:ba:8e:7c:c0:6a:75:c3:06:5a:7b:
e2:ee:c8:f3:ca:bf:a7:70:9b:74:99:c3:17:95:b2:
56:7f:e7:b4:98:bf:f8:9f:38:32:05:32:35:85:5b:
3f:73:91:68:50:f2:89:1e:b2:80:45:00:a1:e5:58:
87:34:3f:93:3c:68:1e:7b:89:2b:95:64:26:ab:4e:
cb:29:ce:22:cf:7a:e7:db:2a:26:95:8e:ee:7c:b6:
e2:29:46:47:77:db:96:f4:72:05:09:6f:92:bb:58:
4b:69:bf:a5:bf:94:e1:44:69:07:4f:9e:42:e9:03:
2b:56:b5:c0:c8:30:65:26:7e:34:da:9d:13:87:a7:
8b:dc:59:6d:e5:46:7c:dd:37:dd:86:91:b9:a4:94:
06:44:9c:5f:11:98:25:31:d8:04:85:9a:1e:b8:3a:
fb:f5:09:05:2d:3b:da:6e:a0:c4:44:0c:a7:6e:c8:
57:99:1d:e2:7d:0c:85:33:cc:6c:3d:c8:52:e9:60:
f7:77:41:23:43:f2:e4:8c:00:d7:14:8b:c4:2c:fe:
1e:b3:72:57:57:b9:d1:62:ec:2d:43:3e:da:68:a8:
21:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:02:A8:B4:61:B1:77:F6:07:B2:87:93:88:D1:70:E1:E2:1C:CC:49
X509v3 Authority Key Identifier:
keyid:7B:87:F6:B9:11:9F:A9:DC:D3:E1:2E:7E:6B:FB:70:6D:FF:97:88:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4f2uRGfqdzT4S5-a_twbf-XiCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:88:64:53:8b:37:d1:f9:ba:c2:9c:4e:a0:47:38:1a:03:b8:
69:f7:96:f4:9c:df:54:06:0f:38:d7:e8:e4:91:b8:fd:7c:f4:
42:8c:a1:c1:1c:33:ca:87:81:cd:c0:c9:98:ad:f2:45:40:95:
5b:ee:e3:9e:de:07:e4:0c:4d:3d:a2:6b:59:bf:2f:17:3a:63:
d2:9b:d8:19:50:a1:15:d4:e4:4b:5d:43:3b:2c:82:4c:a4:0a:
1d:96:22:de:2c:70:e4:a7:ed:74:9c:7e:ab:72:e7:de:3b:39:
f3:b8:ec:e4:21:ab:c6:d4:9f:1b:82:12:fa:65:8e:71:f8:a9:
bb:b9:e5:29:e0:1d:66:62:ce:c8:6d:a3:d9:fc:56:df:60:9c:
6d:ab:54:8d:30:7f:27:69:3a:28:72:c0:91:2d:8e:69:df:ac:
b8:33:d7:68:47:d2:55:2d:0a:ea:62:ff:66:5e:8c:11:ac:64:
18:c0:1c:cd:f5:73:48:04:16:40:5b:f8:40:bc:9c:52:fa:d2:
78:c8:86:93:7c:d6:28:91:08:ea:f7:28:dd:83:b5:97:06:f8:
6b:37:64:48:5e:d4:86:2f:99:ee:b7:07:3f:17:8e:12:65:ab:
e2:66:79:ae:7c:62:ec:a3:ad:c9:a7:40:a4:46:cc:57:2d:fb:
8c:90:0a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 12:43:56 2026 by rpki-client