Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.mft
File: TWn-EboAGxKm-9GJYpo_sYG9jJs.mft (raw, json)
Hash identifier: LKYVONd2Ve+kSU9xel148oMIvjHnRTFLayc62aeC3Co=
Subject key identifier: F3:F4:26:03:CC:E0:16:0A:36:BA:0D:2A:8C:70:4F:09:4A:5F:46:03
Authority key identifier: 4D:69:FE:11:BA:00:1B:12:A6:FB:D1:89:62:9A:3F:B1:81:BD:8C:9B
Certificate issuer: /CN=4d69fe11ba001b12a6fbd189629a3fb181bd8c9b
Certificate serial: 019CE6DB1F834A90D3DF36C35D2A9F4F9851
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TWn-EboAGxKm-9GJYpo_sYG9jJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.mft
Manifest number: 1866
Signing time: Fri 13 Mar 2026 11:00:45 +0000
Manifest this update: Fri 13 Mar 2026 11:00:45 +0000
Manifest next update: Sat 14 Mar 2026 11:00:45 +0000
Files and hashes: 1: TWn-EboAGxKm-9GJYpo_sYG9jJs.crl (hash: va2yAWbQVUVZFglZiUGQRavd5kYHw52azCX5NPSI0VI=)
2: d0gc-bfZVZ_wvr1zHWcpz3THoUw.roa (hash: omEL790d2ktapnfeuHtd9b9rxp1D6UXPaEs4yrE6gFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/TWn-EboAGxKm-9GJYpo_sYG9jJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:db:1f:83:4a:90:d3:df:36:c3:5d:2a:9f:4f:98:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d69fe11ba001b12a6fbd189629a3fb181bd8c9b
Validity
Not Before: Mar 13 11:00:45 2026 GMT
Not After : Mar 14 11:00:45 2026 GMT
Subject: CN=f3f42603cce0160a36ba0d2a8c704f094a5f4603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a1:ce:2c:40:3b:08:0a:d1:46:a7:a4:e6:8d:
b4:68:c8:3f:16:4f:94:05:50:f8:ed:0e:61:c7:0b:
20:32:30:5d:b1:6d:71:63:70:e5:58:a5:58:c4:b6:
56:95:8f:9a:97:f4:38:4d:8d:3b:ad:7b:e3:e9:9a:
5e:3e:00:12:ff:82:e4:68:8d:08:b9:54:f2:27:76:
15:22:4a:e0:e2:4d:df:95:57:bf:72:a6:fe:fa:87:
c3:02:ed:05:66:ce:ce:ff:1a:11:e6:3f:44:90:4b:
1f:55:20:8c:6b:4e:1b:f9:74:73:19:8e:72:b1:8a:
f3:0f:e2:24:fa:4c:17:06:40:cb:bc:21:75:1a:b9:
99:4a:46:05:1f:c9:74:81:ad:be:bf:4d:aa:5c:5c:
6e:1b:4b:95:e8:20:c8:87:27:98:da:ed:21:c2:63:
43:93:8e:19:0d:35:b6:ee:90:d2:9c:ee:31:f5:5e:
73:87:2b:d1:44:8c:31:a3:9b:27:88:8c:88:2c:95:
d3:ce:66:38:f8:33:28:b6:2e:fe:85:53:65:bd:a1:
0c:75:fb:4c:74:3d:15:7b:d6:52:fa:4b:8a:1e:0a:
80:7c:d1:5a:c5:04:f2:79:d0:1c:9e:cf:75:fb:e7:
d8:a0:91:e1:c2:4e:4b:d3:f9:3c:d9:97:94:4e:bc:
2d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:F4:26:03:CC:E0:16:0A:36:BA:0D:2A:8C:70:4F:09:4A:5F:46:03
X509v3 Authority Key Identifier:
keyid:4D:69:FE:11:BA:00:1B:12:A6:FB:D1:89:62:9A:3F:B1:81:BD:8C:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TWn-EboAGxKm-9GJYpo_sYG9jJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:95:b0:13:39:d2:cd:82:8a:52:8c:0f:50:8c:17:67:13:0d:
71:a6:ff:7f:66:d2:73:06:25:57:97:6b:e4:f6:79:99:43:ab:
84:78:bb:45:71:1c:e3:d9:5e:c4:01:63:bf:24:36:87:3d:7c:
95:2b:2f:39:70:51:8a:36:fd:df:81:23:e7:89:b6:ba:fa:ed:
e4:0c:20:93:6b:cd:a6:64:ae:83:1b:8b:d3:4d:5b:5a:61:1b:
db:6f:52:46:45:76:80:d6:91:ed:52:08:41:d2:92:e7:4d:d3:
14:e2:44:08:c3:52:62:09:21:ca:84:ce:98:74:49:a8:bc:30:
e2:2b:8c:c6:c4:fc:e3:81:1e:4b:a9:c2:5e:af:e8:c6:06:2c:
dd:bc:43:03:bf:73:46:cc:0e:3e:ec:95:41:c8:82:ae:3a:eb:
2d:be:a4:6f:42:bc:76:48:0d:66:f8:22:b5:a6:53:3d:94:1e:
0c:b9:0e:b4:7b:d2:95:61:20:3d:3e:92:4e:26:d8:4d:90:fb:
37:b5:b7:b3:c3:54:3e:b3:42:60:f3:cb:08:13:62:b2:b1:07:
58:05:33:3a:e3:49:98:62:45:08:95:7e:04:55:f2:96:e2:e4:
c3:62:e7:3c:34:1d:73:db:b0:44:4e:01:31:9e:b8:22:af:32:
7b:ae:f0:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 13:19:35 2026 by rpki-client