Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.mft
File: TWh9higIIltFn6OZ5l-KBpRpq6M.mft (raw, json)
Hash identifier: kJD4skakqchtmN34OFQCd36HFQNHmg8pmg62JaWZBS0=
Subject key identifier: 5E:AF:0E:53:82:84:DC:61:3D:26:33:B4:20:E4:11:0F:F9:E8:9B:1F
Authority key identifier: 4D:68:7D:86:28:08:22:5B:45:9F:A3:99:E6:5F:8A:06:94:69:AB:A3
Certificate issuer: /CN=4d687d862808225b459fa399e65f8a069469aba3
Certificate serial: 01A172B8F035D753890749725A8803D59D3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TWh9higIIltFn6OZ5l-KBpRpq6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.mft
Manifest number: 1A52
Signing time: Sun 25 Oct 2026 11:01:25 +0000
Manifest this update: Sun 25 Oct 2026 11:01:25 +0000
Manifest next update: Mon 26 Oct 2026 11:01:25 +0000
Files and hashes: 1: TWh9higIIltFn6OZ5l-KBpRpq6M.crl (hash: OW4M+AgMvN5ti46G+Wh7zug9ff82c7KdgMfEbm/l7m4=)
2: aLO1_dk6LgzX4fm5tLs5_fRvIQg.roa (hash: ZIj/y9+pucp6g8B0V5z39DYYd8b4wFUj1DSlFdjES/E=)
3: wk26zi3ldsjZ_XJitrGy59Nt3RU.roa (hash: Y/LqsA9Orheu884pJMTCuEfdY61dLN5gUejTk6JnsDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/TWh9higIIltFn6OZ5l-KBpRpq6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:72:b8:f0:35:d7:53:89:07:49:72:5a:88:03:d5:9d:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d687d862808225b459fa399e65f8a069469aba3
Validity
Not Before: Oct 25 11:01:25 2026 GMT
Not After : Oct 26 11:01:25 2026 GMT
Subject: CN=5eaf0e538284dc613d2633b420e4110ff9e89b1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9f:06:7d:77:bd:f8:1d:5f:48:d1:cd:80:37:
29:d0:7c:08:17:5b:ae:f3:81:44:d7:d2:f5:1c:d1:
ac:1d:de:75:74:e2:6f:e9:82:fa:82:53:17:71:03:
21:0f:a7:6f:6e:e1:dc:24:6a:a8:7f:06:ab:69:ff:
6e:31:36:dc:02:df:d3:0f:d4:97:dc:98:29:bc:c4:
7a:41:86:0f:98:17:67:9d:58:5d:47:af:31:bb:cb:
73:d0:47:e7:d3:30:20:cb:de:c8:dc:ea:4d:6d:aa:
96:cb:aa:92:7a:eb:3e:9c:8f:c0:10:d5:00:ab:18:
c1:39:ab:b5:41:57:97:91:64:f0:4d:14:79:03:95:
0d:14:08:5f:73:bd:d1:f3:96:e8:85:74:e8:43:4d:
52:46:dd:20:0d:f7:c3:83:5f:57:05:ae:4f:61:8a:
6d:36:1f:9c:0e:b2:c0:38:68:95:6a:e0:28:82:46:
58:6b:9b:f1:31:4a:a8:33:5a:05:de:d4:d1:1a:cd:
5d:a9:a0:07:76:1b:57:06:e8:48:b3:c7:98:33:5e:
7c:f7:74:ca:61:fb:b2:1b:9e:79:9a:e1:ed:b2:fc:
eb:ae:5f:b8:a1:2a:b9:8b:d5:c1:12:f1:d7:04:84:
04:e2:12:52:0e:46:61:2a:56:9b:7c:e8:c5:15:7f:
50:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:AF:0E:53:82:84:DC:61:3D:26:33:B4:20:E4:11:0F:F9:E8:9B:1F
X509v3 Authority Key Identifier:
keyid:4D:68:7D:86:28:08:22:5B:45:9F:A3:99:E6:5F:8A:06:94:69:AB:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TWh9higIIltFn6OZ5l-KBpRpq6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:0b:e1:e6:a5:25:a3:eb:3a:94:6a:f2:e5:6c:bc:ec:0d:4b:
b9:f9:51:8e:08:6c:38:62:82:60:de:86:7d:0a:b4:44:d6:e7:
61:1b:e6:10:c9:97:ec:f7:ec:7f:5b:68:b4:d5:76:8c:00:92:
17:0c:97:45:05:69:5b:8e:cf:33:77:db:c4:98:68:0d:6c:b5:
a2:da:3c:e2:94:d3:77:04:4b:d6:79:e5:a4:5c:09:eb:1c:cf:
15:e3:ef:34:08:6a:9b:44:4a:de:0e:e1:7f:f2:33:58:b0:59:
f6:c9:3d:d1:72:72:13:cd:c6:44:41:cb:9a:8f:9d:bc:33:84:
88:f9:6e:a3:19:30:a1:3b:d7:7e:14:ad:59:79:15:3d:13:f0:
58:4e:0c:49:8a:68:2b:06:37:11:b1:02:6f:f8:93:64:b6:82:
d0:c2:02:7c:d4:bf:d9:b8:a6:ab:33:ae:57:d6:3b:e9:e8:52:
8a:54:8a:b7:8b:b7:9f:a6:c9:f6:94:af:a5:1e:1a:3f:aa:e1:
b1:52:2f:1a:9a:ac:4f:9c:ef:a1:f6:3f:8d:27:6f:b9:69:99:
10:54:d9:ef:d7:c9:03:b8:d9:2f:1d:4a:fb:3a:4a:c7:2c:ef:
20:fa:7d:9a:68:ee:7c:84:a3:26:49:77:ac:5b:13:1e:15:2c:
48:74:70:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 20:06:56 2026 by rpki-client