Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c5c595-2673-4d5f-8a85-ae8c81f96f42/1/TOSIxkAcj16WnhXWRlH7Sy0tzfc.mft
File: TOSIxkAcj16WnhXWRlH7Sy0tzfc.mft (raw, json)
Hash identifier: w+R+OAuiiz/Vi3GLAysaOsGSbYZ5AEqLrtZIdcAyX8Q=
Subject key identifier: FE:AA:1D:29:41:E4:9B:DB:41:A4:37:85:27:3E:3E:61:E6:8E:FF:16
Authority key identifier: 4C:E4:88:C6:40:1C:8F:5E:96:9E:15:D6:46:51:FB:4B:2D:2D:CD:F7
Certificate issuer: /CN=4ce488c6401c8f5e969e15d64651fb4b2d2dcdf7
Certificate serial: 019CAAC6123FF83A7D175268F2357FDE8B1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TOSIxkAcj16WnhXWRlH7Sy0tzfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c5c595-2673-4d5f-8a85-ae8c81f96f42/1/TOSIxkAcj16WnhXWRlH7Sy0tzfc.mft
Manifest number: 1240
Signing time: Sun 01 Mar 2026 19:00:32 +0000
Manifest this update: Sun 01 Mar 2026 19:00:32 +0000
Manifest next update: Mon 02 Mar 2026 19:00:32 +0000
Files and hashes: 1: DiJhG9UAf5Aq6LyghoK-sgPUw_8.roa (hash: 0d9H9Swwc6nGZfIaFZU+ZW5R7VglLxDawLaZ1amO0uI=)
2: TOSIxkAcj16WnhXWRlH7Sy0tzfc.crl (hash: ppStQ1XclpSa9cWhzUBmZ0YC1MHmluQ/zInxMAs5kjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/c5c595-2673-4d5f-8a85-ae8c81f96f42/1/TOSIxkAcj16WnhXWRlH7Sy0tzfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/c5c595-2673-4d5f-8a85-ae8c81f96f42/1/TOSIxkAcj16WnhXWRlH7Sy0tzfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TOSIxkAcj16WnhXWRlH7Sy0tzfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:12:3f:f8:3a:7d:17:52:68:f2:35:7f:de:8b:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce488c6401c8f5e969e15d64651fb4b2d2dcdf7
Validity
Not Before: Mar 1 19:00:32 2026 GMT
Not After : Mar 2 19:00:32 2026 GMT
Subject: CN=feaa1d2941e49bdb41a43785273e3e61e68eff16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b7:2b:ce:66:4c:8a:59:4b:a6:f6:8a:2b:8a:
35:f1:a0:2d:8c:08:f2:34:f1:f4:3c:d0:37:ed:67:
ac:a2:d3:3e:d9:06:41:0d:9e:45:65:67:57:3f:c8:
c8:af:26:66:b9:61:ae:cc:d5:44:f8:79:e3:e0:96:
a7:2f:8b:39:bc:9b:e9:66:54:36:0f:61:60:d7:00:
09:96:3d:98:5c:54:a8:e2:a0:84:11:f5:0c:69:14:
9d:d4:7c:aa:03:c8:1c:46:e8:9c:22:15:ae:ca:65:
67:b3:87:c8:b5:a0:dc:0c:39:4a:e7:60:72:ea:c4:
05:0f:7e:b7:6b:ca:e4:3f:41:7a:02:83:8e:06:86:
be:bd:e9:68:87:77:36:05:6e:f8:2a:32:56:1c:aa:
cd:2b:79:69:27:15:2b:fc:82:2c:9f:e8:bf:90:5a:
eb:24:b3:67:fc:fc:c3:01:64:1a:1a:cd:51:a4:da:
2c:f1:42:71:80:61:c8:56:4f:b0:e3:62:7e:5d:c8:
28:5d:d6:df:18:9e:95:9d:8a:69:47:fc:1d:0e:83:
31:36:53:32:36:d4:32:00:ce:ea:19:9b:a4:0c:d4:
e9:83:4c:5e:4e:26:a6:26:50:2c:ae:5a:9e:7c:fa:
05:e0:a0:45:b8:16:24:50:1f:5f:ab:f9:96:25:36:
96:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:AA:1D:29:41:E4:9B:DB:41:A4:37:85:27:3E:3E:61:E6:8E:FF:16
X509v3 Authority Key Identifier:
keyid:4C:E4:88:C6:40:1C:8F:5E:96:9E:15:D6:46:51:FB:4B:2D:2D:CD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOSIxkAcj16WnhXWRlH7Sy0tzfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c5c595-2673-4d5f-8a85-ae8c81f96f42/1/TOSIxkAcj16WnhXWRlH7Sy0tzfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c5c595-2673-4d5f-8a85-ae8c81f96f42/1/TOSIxkAcj16WnhXWRlH7Sy0tzfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:61:dc:0b:0f:71:8f:d5:5e:80:a1:de:9d:89:e4:94:91:97:
7b:fc:07:13:4c:0a:13:34:02:42:4f:b3:6d:b0:68:6b:46:39:
d3:cb:b9:f6:e5:cd:b7:34:8d:f3:90:47:95:47:77:3f:40:e5:
af:34:fb:35:f2:35:1c:e5:3e:ad:3d:92:ed:c1:12:ea:22:d1:
48:8f:df:9e:25:c1:34:75:a1:3c:64:15:da:ca:57:80:ac:19:
ab:03:75:21:a2:90:1d:b1:ca:8d:af:ac:b3:cf:75:99:3a:7b:
c3:21:37:c2:3e:ec:00:13:5a:49:f1:2a:38:fe:97:b6:08:3a:
da:d9:59:4f:64:8a:25:13:9f:6a:99:45:09:54:be:66:2d:03:
19:e3:af:35:a4:d3:bf:77:61:e2:be:7c:a7:43:9a:96:37:9f:
77:d4:c7:3f:e0:e4:82:9d:ee:8a:7b:4b:ee:cb:08:96:be:1c:
47:30:db:77:a5:36:47:b1:23:67:a4:5c:86:a2:5f:6b:0e:29:
2c:09:1e:36:02:cf:22:c3:5f:49:e0:27:7f:c5:76:d9:99:7e:
77:84:62:6b:d4:bf:b5:ab:d7:b8:b9:1b:b7:df:a2:e2:47:90:
09:18:5f:45:75:c2:c9:1e:2d:fc:6f:ab:48:e8:7f:51:52:e5:
c6:57:ec:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:45:06 2026 by rpki-client