Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c5c595-2673-4d5f-8a85-ae8c81f96f42/1/TOSIxkAcj16WnhXWRlH7Sy0tzfc.mft
File: TOSIxkAcj16WnhXWRlH7Sy0tzfc.mft (raw, json)
Hash identifier: 43S7pUfjGbTmvOacuUaPGOHFY0ArH/tyFRbL/IA0xOE=
Subject key identifier: A2:D7:7B:67:9B:90:56:30:1B:CD:2C:89:E8:6D:63:49:B1:72:0A:F9
Authority key identifier: 4C:E4:88:C6:40:1C:8F:5E:96:9E:15:D6:46:51:FB:4B:2D:2D:CD:F7
Certificate issuer: /CN=4ce488c6401c8f5e969e15d64651fb4b2d2dcdf7
Certificate serial: 019D9A3E84EF9967CCDCCEA3A385DF93DA4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TOSIxkAcj16WnhXWRlH7Sy0tzfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c5c595-2673-4d5f-8a85-ae8c81f96f42/1/TOSIxkAcj16WnhXWRlH7Sy0tzfc.mft
Manifest number: 12BC
Signing time: Fri 17 Apr 2026 07:01:21 +0000
Manifest this update: Fri 17 Apr 2026 07:01:21 +0000
Manifest next update: Sat 18 Apr 2026 07:01:21 +0000
Files and hashes: 1: DiJhG9UAf5Aq6LyghoK-sgPUw_8.roa (hash: 0d9H9Swwc6nGZfIaFZU+ZW5R7VglLxDawLaZ1amO0uI=)
2: TOSIxkAcj16WnhXWRlH7Sy0tzfc.crl (hash: Ve1fNTJFITt3yL5eemr4/MdgVgLQyqlAnXJTZEt92uQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/c5c595-2673-4d5f-8a85-ae8c81f96f42/1/TOSIxkAcj16WnhXWRlH7Sy0tzfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/c5c595-2673-4d5f-8a85-ae8c81f96f42/1/TOSIxkAcj16WnhXWRlH7Sy0tzfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TOSIxkAcj16WnhXWRlH7Sy0tzfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:84:ef:99:67:cc:dc:ce:a3:a3:85:df:93:da:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce488c6401c8f5e969e15d64651fb4b2d2dcdf7
Validity
Not Before: Apr 17 07:01:21 2026 GMT
Not After : Apr 18 07:01:21 2026 GMT
Subject: CN=a2d77b679b9056301bcd2c89e86d6349b1720af9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:82:84:a3:80:49:51:aa:16:df:ca:f0:02:c0:
d8:3b:06:40:a1:3a:2a:a3:83:a6:c9:ed:81:73:40:
51:d2:8d:20:38:ea:97:9c:dd:f0:d6:ee:53:67:a6:
82:20:69:e4:69:71:a2:28:a4:9b:f1:12:4c:d1:0e:
bd:45:ac:d3:f3:b5:5f:5b:14:e5:4a:c7:1c:f0:66:
8f:ea:02:d4:a5:01:07:df:86:c5:99:1b:64:25:98:
44:4b:c5:b6:20:9a:ea:42:29:98:54:b7:9e:ec:41:
6c:6e:3d:4f:a9:fa:14:3e:ca:80:b3:c6:07:56:6a:
83:d7:b2:9e:be:d1:11:8f:95:6e:c0:62:d7:c8:1a:
3f:da:8d:39:3f:7b:40:f8:a0:12:b5:db:49:a8:56:
57:47:03:23:46:ee:b0:6f:cf:60:b5:43:12:6c:2f:
c9:ef:9d:9b:12:4d:b7:0b:f2:8c:b7:da:00:3b:f2:
32:12:bc:ed:df:c0:13:22:3e:86:68:d2:e6:c4:eb:
f0:80:b6:ef:17:fa:6c:66:6b:14:6e:b5:83:11:ee:
b8:dd:46:0a:1b:7d:6e:ae:17:38:e3:c5:9b:ab:56:
3b:c6:5e:d2:d7:48:05:42:66:80:00:d1:17:49:da:
ae:3a:1a:8e:23:9a:3a:a1:95:87:bd:e7:4f:66:a1:
39:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:D7:7B:67:9B:90:56:30:1B:CD:2C:89:E8:6D:63:49:B1:72:0A:F9
X509v3 Authority Key Identifier:
keyid:4C:E4:88:C6:40:1C:8F:5E:96:9E:15:D6:46:51:FB:4B:2D:2D:CD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOSIxkAcj16WnhXWRlH7Sy0tzfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c5c595-2673-4d5f-8a85-ae8c81f96f42/1/TOSIxkAcj16WnhXWRlH7Sy0tzfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c5c595-2673-4d5f-8a85-ae8c81f96f42/1/TOSIxkAcj16WnhXWRlH7Sy0tzfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:66:23:dd:31:f0:51:72:6c:7c:69:2f:39:9a:19:73:cf:7c:
66:92:5f:85:fe:be:78:30:cf:d0:26:a7:d5:3d:68:df:82:20:
7f:18:55:c4:40:0d:31:db:d8:1d:c7:7a:0e:49:27:e9:12:f7:
3b:da:39:04:b5:e2:87:c3:25:28:11:45:73:24:31:80:f9:a3:
57:58:78:56:cd:c7:9f:22:12:87:4e:8b:76:60:d5:79:f2:5f:
36:c7:cd:a4:8a:dd:27:a3:cc:2a:fd:56:de:d4:69:ff:e4:52:
89:f7:65:2e:a0:8e:b2:24:87:cd:0e:25:2e:8f:98:8b:ae:74:
ea:fe:ab:dc:f4:7e:23:53:4d:cf:fe:0a:2a:db:13:d6:eb:f6:
49:2c:18:40:21:c7:27:82:97:16:fd:5b:7b:c8:8b:c4:c5:48:
30:38:5c:27:e6:e4:37:9a:da:a4:25:56:01:fb:19:52:4e:df:
ef:8e:73:62:84:10:b2:59:8f:f7:cf:d3:13:20:dd:7e:5e:d1:
cb:42:a7:4c:f1:75:fe:84:c0:ff:46:a2:ce:53:eb:ce:6b:9d:
ea:a9:e1:cf:89:eb:4e:2f:67:59:2c:a9:7a:fb:ad:ea:ba:c3:
8d:d4:5f:e6:d7:23:b4:43:03:b6:de:1a:8a:d7:a8:63:f9:ed:
e1:14:7a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:03:07 2026 by rpki-client