Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.mft
File: TwMCBfo2Xp9J_06nUG35EtXtg2A.mft (raw, json)
Hash identifier: dZJoRhQ4Rmw0Ibmv5L+7seGWWy4le1FQIfbDHpz/yEk=
Subject key identifier: FF:0E:58:99:AE:25:F2:40:FB:0B:3D:1E:A9:4F:2C:BC:3F:51:5E:4E
Authority key identifier: 4F:03:02:05:FA:36:5E:9F:49:FF:4E:A7:50:6D:F9:12:D5:ED:83:60
Certificate issuer: /CN=4f030205fa365e9f49ff4ea7506df912d5ed8360
Certificate serial: 019D3977E8B49726494154E1052A52DA44B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TwMCBfo2Xp9J_06nUG35EtXtg2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 12:00:52 +0000
Manifest this update: Sun 29 Mar 2026 12:00:52 +0000
Manifest next update: Mon 30 Mar 2026 12:00:52 +0000
Files and hashes: 1: 9xBP8gbc0Dsyc9Whz6ERIkAS30s.roa (hash: dwzxNjVen//HcW2Y8+RmbxhX6tKkrvGhVuNA4kOW63w=)
2: TwMCBfo2Xp9J_06nUG35EtXtg2A.crl (hash: gEmbX5Fw2KEwICbiPjR0dEz2s4PtoitbYq7lKhwWzZY=)
3: vAr22Hux-HUQ7hHfWUCqXP3N41A.roa (hash: QnhPhCSBsgOeJ1YHgFSoi0+/IdCT3hRUONTf3oiVAf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/TwMCBfo2Xp9J_06nUG35EtXtg2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:e8:b4:97:26:49:41:54:e1:05:2a:52:da:44:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f030205fa365e9f49ff4ea7506df912d5ed8360
Validity
Not Before: Mar 29 12:00:52 2026 GMT
Not After : Mar 30 12:00:52 2026 GMT
Subject: CN=ff0e5899ae25f240fb0b3d1ea94f2cbc3f515e4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8e:2b:61:0a:62:1b:9d:0f:3c:c8:c9:f5:61:
9c:2d:b2:44:a1:d8:74:53:fa:a0:e9:61:d9:1f:67:
04:ec:4a:05:42:a5:6f:e5:ff:95:37:22:d6:57:cb:
fb:f0:2f:9b:ed:aa:8b:e7:a4:42:ab:a5:66:7c:88:
25:6c:b2:00:93:0c:87:b1:40:64:b2:e8:de:98:1c:
62:ba:4e:d0:9c:3d:7a:0e:63:2f:20:e0:0d:ee:a1:
1a:a7:15:a0:4d:a5:f5:aa:6b:45:17:75:f3:8c:15:
8f:96:b7:b8:39:ae:b3:13:62:4b:c5:6d:62:60:a3:
13:4b:e5:cd:f3:90:fa:1d:3e:7f:89:f2:cd:8f:c2:
31:14:72:f8:fd:8a:e8:67:06:97:22:c9:ce:56:a8:
cf:da:24:a2:f1:8b:b0:c4:49:b7:45:a0:4e:8c:b5:
1f:b2:b2:61:f3:30:0e:f2:e3:f7:d2:d5:56:c2:1f:
ed:2e:6a:15:03:f1:0b:ff:d1:54:8e:0b:f7:cb:a2:
09:b6:17:80:68:fe:d6:87:44:36:b9:2e:50:4f:98:
75:9d:9c:b2:86:32:37:f0:d2:29:92:97:ad:99:a8:
b6:cb:5d:ce:1c:3a:af:c5:3b:93:f5:43:2e:ca:3a:
ad:ba:f6:ba:25:e2:3d:d8:09:9e:ca:99:a6:30:00:
38:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:0E:58:99:AE:25:F2:40:FB:0B:3D:1E:A9:4F:2C:BC:3F:51:5E:4E
X509v3 Authority Key Identifier:
keyid:4F:03:02:05:FA:36:5E:9F:49:FF:4E:A7:50:6D:F9:12:D5:ED:83:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TwMCBfo2Xp9J_06nUG35EtXtg2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:52:0f:9f:1f:de:fb:75:16:bb:d1:cb:73:6c:7b:67:36:31:
30:3a:65:b1:21:d6:7c:53:6c:af:44:39:c1:46:84:22:3c:7a:
d9:0d:17:0a:8e:27:2e:35:12:dd:b0:4f:71:7f:df:d5:18:93:
70:d3:44:47:38:24:b2:52:52:23:31:c2:04:1f:ef:42:05:4f:
0e:dd:84:4b:ab:63:23:d2:04:06:46:51:f8:43:74:69:af:92:
70:05:07:cd:17:9a:49:0e:b5:12:8e:8d:78:08:a4:09:88:f0:
ca:c7:85:10:28:9a:2b:81:de:ce:fc:40:64:90:50:40:7b:d2:
f5:ac:41:44:f0:7b:50:34:72:23:22:52:93:52:f4:55:53:c7:
3b:99:c8:be:35:8d:c8:d5:dc:a6:38:75:be:ca:fb:ac:28:f2:
ba:02:3f:d5:ed:44:fe:44:ea:9f:84:44:5c:8e:f6:e8:e3:87:
7c:d3:87:2b:05:95:89:31:c0:41:65:88:5c:73:28:bc:d8:eb:
70:93:03:50:33:6c:1e:1c:ac:97:62:70:77:b7:34:2c:20:f9:
d3:f3:25:6d:63:a2:dc:53:03:7b:b9:89:5e:32:0f:48:c9:ac:
79:5a:74:f5:6b:cc:3c:57:44:7d:81:3b:3b:8f:48:45:61:b1:
d8:44:e1:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:03:12 2026 by rpki-client