Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/572b15-bfd7-48e0-bd9b-e69562097086/1/TWJ6NJyeo81uXc2grNej_IQ-xzs.mft
File: TWJ6NJyeo81uXc2grNej_IQ-xzs.mft (raw, json)
Hash identifier: thfr3lID9IeBItPsVd+++azh9OAnC+2u1zVKavOD/no=
Subject key identifier: 1C:3C:8E:87:77:A7:B9:15:B5:A5:9F:F8:5B:36:71:5B:65:83:46:03
Authority key identifier: 4D:62:7A:34:9C:9E:A3:CD:6E:5D:CD:A0:AC:D7:A3:FC:84:3E:C7:3B
Certificate issuer: /CN=4d627a349c9ea3cd6e5dcda0acd7a3fc843ec73b
Certificate serial: 01A18563515D370CBBC151529F217A237BEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TWJ6NJyeo81uXc2grNej_IQ-xzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/572b15-bfd7-48e0-bd9b-e69562097086/1/TWJ6NJyeo81uXc2grNej_IQ-xzs.mft
Manifest number: 019A
Signing time: Thu 29 Oct 2026 02:00:40 +0000
Manifest this update: Thu 29 Oct 2026 02:00:40 +0000
Manifest next update: Fri 30 Oct 2026 02:00:40 +0000
Files and hashes: 1: TWJ6NJyeo81uXc2grNej_IQ-xzs.crl (hash: D642Z9nCET0YDYZ15coXLVf34vJsA6iYqiT3M3qFd6A=)
2: c-MYYoNI7ANhpWNl4U8F_Hfzmow.roa (hash: skbSxRIkUCLTSaqSWg0+FjMPhARmWa5xKrDu6w4W5Wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/572b15-bfd7-48e0-bd9b-e69562097086/1/TWJ6NJyeo81uXc2grNej_IQ-xzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/572b15-bfd7-48e0-bd9b-e69562097086/1/TWJ6NJyeo81uXc2grNej_IQ-xzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/TWJ6NJyeo81uXc2grNej_IQ-xzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:85:63:51:5d:37:0c:bb:c1:51:52:9f:21:7a:23:7b:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d627a349c9ea3cd6e5dcda0acd7a3fc843ec73b
Validity
Not Before: Oct 29 02:00:40 2026 GMT
Not After : Oct 30 02:00:40 2026 GMT
Subject: CN=1c3c8e8777a7b915b5a59ff85b36715b65834603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:90:73:74:0c:36:79:53:81:a2:1e:15:cf:83:
e7:97:b2:d1:da:6a:b6:46:ea:bf:38:79:eb:ea:33:
20:55:76:d7:c1:9c:f0:87:ea:28:bb:ef:cb:b6:34:
7f:23:a8:8b:e8:52:21:07:b8:3c:7f:05:af:51:f7:
2e:46:46:3c:39:a7:11:19:de:34:94:3d:b2:49:28:
33:1b:61:1e:01:44:74:76:05:9d:22:42:26:10:b9:
6d:a2:40:15:07:51:99:fb:92:d3:a4:a7:4c:1c:ad:
72:34:72:eb:e4:b1:42:76:d5:6c:cb:c6:34:c7:d9:
64:ab:5b:9e:97:fa:44:d4:a8:f6:00:32:9d:70:ec:
d8:42:27:25:03:1a:75:37:92:4c:37:94:f7:ff:87:
d4:a6:d7:65:84:5f:57:e0:73:49:ca:51:1e:6e:43:
d2:55:80:34:46:df:9c:37:ec:55:21:57:21:30:d7:
84:af:14:8e:98:37:f9:f2:3c:d6:bc:52:99:93:61:
a1:aa:f5:09:95:1b:84:cd:9d:cd:c4:81:66:d0:5c:
ca:27:fe:94:f8:d5:08:0f:5e:ce:c1:e3:27:35:27:
be:25:13:5c:81:c8:bc:de:a3:c8:48:03:1c:6f:f6:
18:dc:7b:ad:e0:fe:d5:64:4d:1f:0f:a0:9e:16:b7:
79:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:3C:8E:87:77:A7:B9:15:B5:A5:9F:F8:5B:36:71:5B:65:83:46:03
X509v3 Authority Key Identifier:
keyid:4D:62:7A:34:9C:9E:A3:CD:6E:5D:CD:A0:AC:D7:A3:FC:84:3E:C7:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TWJ6NJyeo81uXc2grNej_IQ-xzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/572b15-bfd7-48e0-bd9b-e69562097086/1/TWJ6NJyeo81uXc2grNej_IQ-xzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/572b15-bfd7-48e0-bd9b-e69562097086/1/TWJ6NJyeo81uXc2grNej_IQ-xzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:b2:2b:4d:ab:ae:20:06:24:5d:c5:3b:45:7a:1d:2f:c6:ea:
51:24:d6:af:c9:2f:cb:b9:c5:1a:55:16:47:2c:f1:77:64:e4:
c4:ec:83:4c:1e:02:40:09:ac:a1:23:45:3c:ba:9a:af:22:b5:
64:67:a2:25:5b:98:5e:0a:e7:a0:01:9c:b1:78:35:11:52:9d:
82:4d:e5:e7:12:4f:47:a1:14:c5:a6:71:dc:a3:a8:2f:84:65:
e1:cd:dc:7f:99:92:71:7d:06:e5:2c:04:46:33:b6:6e:d7:1e:
7c:2e:b4:03:67:bc:78:6d:e5:33:10:aa:e2:24:f6:ae:c0:f1:
cf:c8:ed:b8:ea:73:d8:79:5e:47:b9:71:33:cd:dd:a8:36:36:
a0:74:dd:f9:27:d5:c1:73:1e:fe:f9:fa:6c:81:4c:ac:7d:23:
7c:a0:50:c6:3b:29:ad:04:6c:1d:d4:26:a9:b1:bf:9a:e7:78:
58:f2:c4:c0:46:52:fd:ea:39:02:c5:4c:a4:44:4b:72:4c:47:
7e:b0:d6:37:cf:10:7d:95:d5:ef:6f:6a:b1:e6:c6:f0:7d:04:
36:3e:4f:b2:a2:cf:93:e5:6c:09:fb:af:43:02:b6:d5:3b:ff:
e4:46:83:0c:85:c6:4d:fc:7b:54:78:4e:d4:59:17:fa:d7:e6:
dc:e4:26:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 05:37:01 2026 by rpki-client