Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.mft
File: TweIqtIqxDcNUYy3-53-cktB-Vc.mft (raw, json)
Hash identifier: RTwx7XFTBaY7+wWhNlRVDlHXrM2HsPZySW6aNah5KYg=
Subject key identifier: 79:C4:FC:20:10:D1:B4:C4:44:03:38:23:0B:9A:CF:CC:23:21:0A:F6
Authority key identifier: 4F:07:88:AA:D2:2A:C4:37:0D:51:8C:B7:FB:9D:FE:72:4B:41:F9:57
Certificate issuer: /CN=4f0788aad22ac4370d518cb7fb9dfe724b41f957
Certificate serial: 019D390A3B27983BD1895D7DC926DBCF40F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TweIqtIqxDcNUYy3-53-cktB-Vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.mft
Manifest number: 14A5
Signing time: Sun 29 Mar 2026 10:01:04 +0000
Manifest this update: Sun 29 Mar 2026 10:01:04 +0000
Manifest next update: Mon 30 Mar 2026 10:01:04 +0000
Files and hashes: 1: TweIqtIqxDcNUYy3-53-cktB-Vc.crl (hash: VQywM3qRj99zPNGW8qgahSzDiz2kG+Uj94Ngus1LoxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TweIqtIqxDcNUYy3-53-cktB-Vc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:3b:27:98:3b:d1:89:5d:7d:c9:26:db:cf:40:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f0788aad22ac4370d518cb7fb9dfe724b41f957
Validity
Not Before: Mar 29 10:01:04 2026 GMT
Not After : Mar 30 10:01:04 2026 GMT
Subject: CN=79c4fc2010d1b4c4440338230b9acfcc23210af6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:65:39:ff:8a:43:b4:1e:b3:c0:f4:9a:b9:30:
7f:98:a4:e4:e6:a1:e9:ee:09:fa:0f:ac:f4:cd:78:
ea:de:9f:e9:0d:05:aa:97:da:ed:b3:45:00:21:9b:
bf:b4:fb:4d:47:f4:b2:5c:be:2e:d8:ed:f4:b3:95:
93:12:3d:6c:f0:97:5c:38:f4:f6:d7:25:2d:1a:89:
73:ac:c9:7d:82:4c:b8:7c:c1:39:18:3e:17:90:4e:
f8:b4:1e:97:8b:3d:89:fd:e5:1d:10:1f:44:b2:d0:
9a:4d:de:e0:91:7e:35:df:59:23:02:00:63:04:e5:
21:5a:d6:95:3d:54:8f:04:78:cf:a0:1d:9c:30:30:
84:34:e9:83:27:c6:3a:b1:88:88:ad:a9:54:df:b8:
0e:40:c5:cf:77:3c:71:71:0b:b6:b0:23:4c:49:17:
d4:c7:7e:c3:e0:79:20:ea:ee:df:d6:b1:9f:96:84:
53:9c:4f:d6:bd:ae:97:51:56:83:53:70:85:6d:9b:
8d:c2:50:7f:fe:e6:62:20:11:4b:be:ab:d8:e5:49:
33:43:fe:02:04:cb:f9:97:c4:7e:c2:26:d3:e3:4c:
b2:52:91:c4:1b:17:05:40:31:41:54:d8:b4:61:2c:
ea:1e:42:0d:63:5b:b3:3c:2d:66:7e:b5:e1:75:ed:
8d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:C4:FC:20:10:D1:B4:C4:44:03:38:23:0B:9A:CF:CC:23:21:0A:F6
X509v3 Authority Key Identifier:
keyid:4F:07:88:AA:D2:2A:C4:37:0D:51:8C:B7:FB:9D:FE:72:4B:41:F9:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TweIqtIqxDcNUYy3-53-cktB-Vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:31:7e:47:c3:17:6a:42:3a:49:66:63:c1:d8:fe:8e:a8:c2:
c1:d8:54:2e:9b:1e:2d:3a:b2:fe:9e:c5:79:42:36:50:5a:41:
70:55:d6:cd:05:a8:42:99:ca:a0:2f:b0:f6:6f:5b:d1:5b:e5:
cf:d6:91:25:57:55:00:a0:ec:59:f1:19:29:2e:04:04:ad:0e:
07:af:10:5f:81:a6:54:58:01:46:a9:7c:d0:96:6f:c5:9a:36:
d2:17:83:04:74:81:85:9b:84:21:c2:2b:1a:ba:11:f8:d8:3e:
93:bb:70:88:89:c4:16:88:c9:80:39:f6:14:11:84:d1:e6:cf:
23:de:54:15:f8:2e:1f:bd:e7:7f:42:68:0a:d6:c5:48:57:59:
68:27:a7:53:1e:66:a0:8c:94:eb:c5:9b:48:fb:11:12:5f:11:
4b:58:dd:dc:08:07:84:ca:5c:82:ad:80:2c:9e:a2:ce:90:7b:
73:95:d3:d4:e0:7e:64:18:bf:7a:08:c1:f1:ae:3a:85:b8:e5:
02:8d:51:f7:89:d2:83:ca:a8:1d:8f:bc:6d:b0:fd:e0:4b:43:
49:54:64:15:40:66:78:ba:48:b4:2c:c5:49:da:6d:0a:48:3e:
29:b5:f5:91:3b:55:6a:f4:35:d7:06:69:11:a5:6f:ef:e0:d6:
cd:b1:48:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:34:46 2026 by rpki-client