Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/fe6363-6ed5-467d-b96e-8e0bdff237f8/1/TWJ4HKFDbZbWd1uiDFzyx139E-k.mft
File: TWJ4HKFDbZbWd1uiDFzyx139E-k.mft (raw, json)
Hash identifier: CRH/I4dTQ0IYy9cvn/CaVsnmM7GFuxGmbsPQ2YHeSF0=
Subject key identifier: 25:30:A1:02:3A:3C:62:16:DC:B2:C1:72:FA:68:A3:F0:67:DE:CC:E4
Authority key identifier: 4D:62:78:1C:A1:43:6D:96:D6:77:5B:A2:0C:5C:F2:C7:5D:FD:13:E9
Certificate issuer: /CN=4d62781ca1436d96d6775ba20c5cf2c75dfd13e9
Certificate serial: 019D389BE662CFEFE3FBDFD25BA40EE0461D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TWJ4HKFDbZbWd1uiDFzyx139E-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/fe6363-6ed5-467d-b96e-8e0bdff237f8/1/TWJ4HKFDbZbWd1uiDFzyx139E-k.mft
Manifest number: 17E8
Signing time: Sun 29 Mar 2026 08:00:34 +0000
Manifest this update: Sun 29 Mar 2026 08:00:34 +0000
Manifest next update: Mon 30 Mar 2026 08:00:34 +0000
Files and hashes: 1: GLNDYXAUnDzKSzn1_YuLfC8bH5w.roa (hash: BzzkzH+5YXbHtZ+h0iTwqK2cTDVEy9WeBJ/Car4rJzc=)
2: TWJ4HKFDbZbWd1uiDFzyx139E-k.crl (hash: 8EF0AV+gtRd46HX5gfYyIVDcPoh549GGdgoylfpTd8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/fe6363-6ed5-467d-b96e-8e0bdff237f8/1/TWJ4HKFDbZbWd1uiDFzyx139E-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/fe6363-6ed5-467d-b96e-8e0bdff237f8/1/TWJ4HKFDbZbWd1uiDFzyx139E-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/TWJ4HKFDbZbWd1uiDFzyx139E-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:e6:62:cf:ef:e3:fb:df:d2:5b:a4:0e:e0:46:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d62781ca1436d96d6775ba20c5cf2c75dfd13e9
Validity
Not Before: Mar 29 08:00:34 2026 GMT
Not After : Mar 30 08:00:34 2026 GMT
Subject: CN=2530a1023a3c6216dcb2c172fa68a3f067decce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a9:68:8d:72:dc:20:47:04:a1:22:53:40:d2:
24:78:41:84:b9:bd:38:83:5a:8c:ce:a2:40:e7:88:
9e:b8:db:c5:cc:40:01:db:7d:ca:da:3f:c0:2e:1c:
b7:61:f4:91:8a:5e:23:56:66:e8:51:7b:d4:c2:a8:
8a:f0:f9:2e:85:46:87:20:bf:95:39:c3:29:c0:38:
96:03:ef:a6:6d:f1:de:69:72:c3:48:73:2d:de:6c:
83:c6:fe:75:8e:db:52:77:52:d9:5e:c9:3e:cb:48:
a2:93:7e:cf:9f:2b:64:aa:ab:71:63:7a:10:f7:7d:
d9:db:ac:a3:49:ef:cf:80:ba:29:24:45:58:2c:2f:
62:cc:08:6f:83:98:09:3e:b0:fb:9f:01:f1:f4:3d:
ce:57:76:4b:13:00:62:6a:51:56:7e:42:71:a2:f0:
0c:27:34:e8:64:9d:c2:9c:10:e9:8e:91:85:51:dc:
b3:3a:2b:12:93:ef:69:f8:e9:25:bd:8c:5b:93:ba:
c3:8f:0b:bf:31:30:30:f5:4e:0d:89:86:ef:12:ca:
4b:94:ab:d9:77:24:84:66:5b:e4:46:48:e5:9f:19:
2d:f7:4f:84:d9:d4:ca:83:9b:1e:f4:3b:4b:ae:be:
4a:b5:77:2c:85:3a:19:bd:7b:d4:0f:4b:63:f4:c0:
8f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:30:A1:02:3A:3C:62:16:DC:B2:C1:72:FA:68:A3:F0:67:DE:CC:E4
X509v3 Authority Key Identifier:
keyid:4D:62:78:1C:A1:43:6D:96:D6:77:5B:A2:0C:5C:F2:C7:5D:FD:13:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TWJ4HKFDbZbWd1uiDFzyx139E-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/fe6363-6ed5-467d-b96e-8e0bdff237f8/1/TWJ4HKFDbZbWd1uiDFzyx139E-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/fe6363-6ed5-467d-b96e-8e0bdff237f8/1/TWJ4HKFDbZbWd1uiDFzyx139E-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:46:9f:cb:f8:81:65:a2:44:b7:48:a2:c3:81:e2:1a:28:f4:
f6:55:af:ec:f9:c9:4f:f1:47:02:89:0b:70:d0:6b:82:72:7a:
d8:a7:f3:ce:1d:98:2a:29:7a:36:92:7b:bb:c0:9b:3c:05:54:
77:af:7d:1b:7e:63:d2:d1:59:da:96:28:7a:fe:02:d3:76:e5:
54:8f:cb:bb:e1:d7:a8:af:ad:0e:27:5f:3f:2e:3c:d2:ff:45:
4e:a4:c8:dd:bd:8c:fc:22:b3:9e:96:4c:9e:fc:3c:e8:12:f1:
27:db:65:69:36:d4:52:f2:b4:7d:81:7b:be:46:f4:ee:05:f1:
27:20:6e:bd:4c:0f:ac:e1:53:97:09:8d:99:7d:46:0f:c3:e1:
4e:c5:0c:f7:41:be:17:07:1c:f0:ab:d0:1e:a5:f3:c0:9f:a3:
c2:e1:55:8f:58:d1:5b:8d:ab:52:87:d1:05:99:db:79:67:c0:
df:0a:75:3c:d6:43:3f:d0:c7:12:e3:03:e5:ef:58:90:4e:79:
07:57:d6:cd:a1:45:f5:17:68:97:a1:d2:ba:6d:7e:44:26:b3:
c3:0e:77:b3:5d:48:67:af:7a:ac:50:39:e2:f6:bc:a4:1c:df:
c0:e0:7e:2d:bc:27:4d:a6:1e:a6:d2:25:ce:bd:2a:13:1e:98:
fd:7f:b2:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04m+Ziz+/j+9/SW6QO4EYdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkNjI3ODFjYTE0MzZkOTZkNjc3NWJhMjBjNWNmMmM3NWRm
ZDEzZTkwHhcNMjYwMzI5MDgwMDM0WhcNMjYwMzMwMDgwMDM0WjAzMTEwLwYDVQQD
EygyNTMwYTEwMjNhM2M2MjE2ZGNiMmMxNzJmYTY4YTNmMDY3ZGVjY2U0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6lojXLcIEcEoSJTQNIkeEGEub04
g1qMzqJA54ieuNvFzEAB233K2j/ALhy3YfSRil4jVmboUXvUwqiK8PkuhUaHIL+V
OcMpwDiWA++mbfHeaXLDSHMt3myDxv51jttSd1LZXsk+y0iik37PnytkqqtxY3oQ
933Z26yjSe/PgLopJEVYLC9izAhvg5gJPrD7nwHx9D3OV3ZLEwBialFWfkJxovAM
JzToZJ3CnBDpjpGFUdyzOisSk+9p+OklvYxbk7rDjwu/MTAw9U4NiYbvEspLlKvZ
dySEZlvkRkjlnxkt90+E2dTKg5se9DtLrr5KtXcshToZvXvUD0tj9MCP/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCUwoQI6PGIW3LLBcvpoo/Bn3szkMB8GA1UdIwQY
MBaAFE1ieByhQ22W1ndbogxc8sdd/RPpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFdKNEhLRkRiWmJXZDF1aURGenl4MTM5RS1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9mZTYzNjMtNmVkNS00NjdkLWI5NmUt
OGUwYmRmZjIzN2Y4LzEvVFdKNEhLRkRiWmJXZDF1aURGenl4MTM5RS1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9mZTYzNjMtNmVkNS00NjdkLWI5NmUtOGUwYmRmZjIzN2Y4
LzEvVFdKNEhLRkRiWmJXZDF1aURGenl4MTM5RS1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi0afy/iB
ZaJEt0iiw4HiGij09lWv7PnJT/FHAokLcNBrgnJ62Kfzzh2YKil6NpJ7u8CbPAVU
d699G35j0tFZ2pYoev4C03blVI/Lu+HXqK+tDidfPy480v9FTqTI3b2M/CKznpZM
nvw86BLxJ9tlaTbUUvK0fYF7vkb07gXxJyBuvUwPrOFTlwmNmX1GD8PhTsUM90G+
Fwcc8KvQHqXzwJ+jwuFVj1jRW42rUofRBZnbeWfA3wp1PNZDP9DHEuMD5e9YkE55
B1fWzaFF9Rdol6HSum1+RCazww53s11IZ696rFA54va8pBzfwOB+LbwnTaYeptIl
zr0qEx6Y/X+yaw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:44:40 2026 by rpki-client