Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/572b15-bfd7-48e0-bd9b-e69562097086/1/TWJ6NJyeo81uXc2grNej_IQ-xzs.mft
File: TWJ6NJyeo81uXc2grNej_IQ-xzs.mft (raw, json)
Hash identifier: 72mLe0YhttooYT545ljFDJ8BkO32U//FZSaV45rtNo8=
Subject key identifier: FF:2C:CF:DE:B5:87:AF:F2:32:96:F8:8A:A4:74:4F:8A:4F:42:20:A9
Authority key identifier: 4D:62:7A:34:9C:9E:A3:CD:6E:5D:CD:A0:AC:D7:A3:FC:84:3E:C7:3B
Certificate issuer: /CN=4d627a349c9ea3cd6e5dcda0acd7a3fc843ec73b
Certificate serial: 01A08C4380D54B962A6F7C95F0CFE0387E09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TWJ6NJyeo81uXc2grNej_IQ-xzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/572b15-bfd7-48e0-bd9b-e69562097086/1/TWJ6NJyeo81uXc2grNej_IQ-xzs.mft
Manifest number: 0119
Signing time: Thu 10 Sep 2026 17:00:29 +0000
Manifest this update: Thu 10 Sep 2026 17:00:29 +0000
Manifest next update: Fri 11 Sep 2026 17:00:29 +0000
Files and hashes: 1: TWJ6NJyeo81uXc2grNej_IQ-xzs.crl (hash: 5GKbosw0lI1yDQa5ydhTwnVLdG2xk2byBqsEMkAMkAc=)
2: c-MYYoNI7ANhpWNl4U8F_Hfzmow.roa (hash: skbSxRIkUCLTSaqSWg0+FjMPhARmWa5xKrDu6w4W5Wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/572b15-bfd7-48e0-bd9b-e69562097086/1/TWJ6NJyeo81uXc2grNej_IQ-xzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/572b15-bfd7-48e0-bd9b-e69562097086/1/TWJ6NJyeo81uXc2grNej_IQ-xzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/TWJ6NJyeo81uXc2grNej_IQ-xzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:43:80:d5:4b:96:2a:6f:7c:95:f0:cf:e0:38:7e:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d627a349c9ea3cd6e5dcda0acd7a3fc843ec73b
Validity
Not Before: Sep 10 17:00:29 2026 GMT
Not After : Sep 11 17:00:29 2026 GMT
Subject: CN=ff2ccfdeb587aff23296f88aa4744f8a4f4220a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:05:6a:a9:81:c8:d4:ca:3b:89:18:ee:a6:e5:
f6:a3:4f:a0:09:d5:38:34:49:53:08:c2:a9:19:de:
dd:f0:18:60:15:01:81:f2:24:f7:09:d5:aa:50:96:
b6:e4:52:d6:c2:c7:80:c5:00:0e:e0:7f:7d:e2:20:
84:43:9b:88:5b:e2:7f:f8:82:3f:02:bc:82:1e:3b:
bb:d7:21:09:7c:97:e7:c3:65:b2:17:4b:bd:63:2e:
40:80:fd:11:f9:5d:e9:be:4c:d8:78:96:7a:d4:0f:
59:11:20:3e:f7:3c:98:71:bf:fa:09:45:32:38:38:
e1:dd:ae:18:fa:a4:2a:51:4a:8a:73:c0:3d:35:b9:
a6:30:81:5d:d0:78:93:df:39:5f:48:a7:79:09:df:
f0:ec:5e:0b:98:f8:2b:ac:2f:69:f5:34:fb:c0:a6:
01:01:38:c1:f0:f4:78:ff:88:3e:4e:1a:7b:3b:fd:
d0:f0:1e:5b:6f:ea:04:84:47:01:91:33:bb:34:b6:
8f:e8:a8:03:e3:c5:0f:92:44:d6:84:94:e0:c9:93:
26:29:53:e8:09:ee:a1:aa:02:8b:b2:ff:18:b5:d3:
36:01:cf:a8:52:ba:04:7f:82:b2:cc:f5:8e:0d:66:
b0:fc:d4:f2:4f:e2:5c:bc:7b:e9:df:97:06:5b:fb:
d3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:2C:CF:DE:B5:87:AF:F2:32:96:F8:8A:A4:74:4F:8A:4F:42:20:A9
X509v3 Authority Key Identifier:
keyid:4D:62:7A:34:9C:9E:A3:CD:6E:5D:CD:A0:AC:D7:A3:FC:84:3E:C7:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TWJ6NJyeo81uXc2grNej_IQ-xzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/572b15-bfd7-48e0-bd9b-e69562097086/1/TWJ6NJyeo81uXc2grNej_IQ-xzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/572b15-bfd7-48e0-bd9b-e69562097086/1/TWJ6NJyeo81uXc2grNej_IQ-xzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:dd:a7:84:71:d2:8c:e8:f2:ae:f9:83:6b:ce:bd:66:be:22:
92:d6:67:e6:40:09:33:46:a7:b6:0e:3a:2a:95:8b:c5:20:f3:
3d:c8:e3:c7:76:a0:da:94:dd:ae:a1:53:6a:d4:6e:e2:d1:71:
9b:0d:a7:36:7a:21:d7:71:16:d9:bc:28:1b:ac:7b:4d:fc:05:
4c:25:99:ec:27:04:43:55:00:92:4b:14:12:a8:b1:e1:0b:0e:
e5:a9:75:94:31:ae:ca:0c:25:9f:5b:83:e2:ec:8b:48:32:2d:
12:0c:aa:8e:cf:55:99:06:f0:17:5e:b3:f7:6d:66:eb:de:75:
31:4c:ae:b2:11:ea:cd:94:1e:ff:ad:3f:23:14:6f:df:b4:42:
c5:e2:ca:b4:59:26:36:f7:fc:16:be:a7:d2:92:d3:12:a9:f8:
09:5a:fe:32:c9:52:92:08:fe:b4:38:d0:a9:da:df:84:0b:10:
e3:e4:d7:2a:62:0e:1d:31:a0:c1:47:81:c6:1a:60:aa:51:6f:
d9:13:db:71:b3:46:43:3d:c0:9d:ee:1b:df:96:ac:7b:5e:f1:
af:7b:23:f6:cb:af:46:4c:0a:94:d7:8d:00:29:fb:ab:8d:b3:
e7:52:19:33:5e:e2:d3:4f:1a:db:c2:2d:d7:ec:0f:b6:3c:20:
02:8b:89:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:20:03 2026 by rpki-client