Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/TO94CCwHKSqq4kD27P06_bp4uMo.mft
File: TO94CCwHKSqq4kD27P06_bp4uMo.mft (raw, json)
Hash identifier: xCH1hVYUocZatgd42eNcKTF7GA2y543oU94QEAdxJV4=
Subject key identifier: BF:F0:A6:CA:6A:F2:0B:A1:7F:0D:FF:0E:E2:F7:7A:D1:BB:30:D9:E9
Authority key identifier: 4C:EF:78:08:2C:07:29:2A:AA:E2:40:F6:EC:FD:3A:FD:BA:78:B8:CA
Certificate issuer: /CN=4cef78082c07292aaae240f6ecfd3afdba78b8ca
Certificate serial: 019DA3E69817A620887A5CFE9F58CE7DBB8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TO94CCwHKSqq4kD27P06_bp4uMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/TO94CCwHKSqq4kD27P06_bp4uMo.mft
Manifest number: 0671
Signing time: Sun 19 Apr 2026 04:01:31 +0000
Manifest this update: Sun 19 Apr 2026 04:01:31 +0000
Manifest next update: Mon 20 Apr 2026 04:01:31 +0000
Files and hashes: 1: DzOZLqQUulch0tfN19TPMP7l7NI.asa (hash: A7v4BAlqHExbGP1jRQY/Od094IwgACqCwokxSz1iOtQ=)
2: TO94CCwHKSqq4kD27P06_bp4uMo.crl (hash: bK32p+AH222/UTbYLIgJsA09F5U1u3BZQpjl6F3hOMo=)
3: vRz02q2XpG2yKdoejA6Edmj_d8k.roa (hash: jskIJxCVtupvjYcRL2UIAykBXf+yZJ8QG3OwF/ylsUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/TO94CCwHKSqq4kD27P06_bp4uMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/TO94CCwHKSqq4kD27P06_bp4uMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TO94CCwHKSqq4kD27P06_bp4uMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:98:17:a6:20:88:7a:5c:fe:9f:58:ce:7d:bb:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cef78082c07292aaae240f6ecfd3afdba78b8ca
Validity
Not Before: Apr 19 04:01:31 2026 GMT
Not After : Apr 20 04:01:31 2026 GMT
Subject: CN=bff0a6ca6af20ba17f0dff0ee2f77ad1bb30d9e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:19:7e:83:b6:c1:94:42:1b:f1:43:14:60:ad:
44:ac:df:4d:ae:f4:7d:39:3c:70:8a:12:ff:8d:22:
dc:9b:5c:24:6c:7b:40:a9:b6:76:b4:c4:f8:65:47:
06:e9:b0:e3:c9:b9:f9:ad:7e:91:7a:f9:2d:1d:5c:
de:7f:4d:24:4b:73:b0:c1:0e:cb:23:96:bb:83:c8:
6b:a9:c7:0e:a2:01:59:83:2d:e8:9c:06:6a:db:79:
8e:28:d6:b7:41:e6:ce:c3:82:fc:a6:f1:99:3f:92:
bc:ff:3d:ec:a5:17:99:da:ac:32:7a:bd:99:ae:3f:
9a:c4:0f:4c:7e:d3:27:36:c2:2a:96:dd:0f:fa:b2:
a0:76:63:bf:cc:e1:fa:fa:6d:30:db:28:f3:f2:1f:
c9:7e:62:2a:aa:bb:bc:0d:57:65:84:eb:d4:ab:c0:
02:b1:e6:3d:76:8b:bc:55:1a:24:a4:de:0c:a4:cf:
e6:cb:31:36:f6:3f:df:83:b3:57:37:71:5a:4f:dd:
0d:c1:90:91:d9:41:dc:af:eb:51:e8:7b:95:31:f3:
bc:86:7b:32:ca:d0:3c:59:2e:bc:01:f0:a8:99:91:
9e:99:a6:d2:30:b1:be:7b:5c:a9:0e:72:e7:8a:56:
59:7d:54:8a:a4:e0:e7:ec:80:3f:6e:b2:cf:59:d7:
1e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F0:A6:CA:6A:F2:0B:A1:7F:0D:FF:0E:E2:F7:7A:D1:BB:30:D9:E9
X509v3 Authority Key Identifier:
keyid:4C:EF:78:08:2C:07:29:2A:AA:E2:40:F6:EC:FD:3A:FD:BA:78:B8:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TO94CCwHKSqq4kD27P06_bp4uMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/TO94CCwHKSqq4kD27P06_bp4uMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/TO94CCwHKSqq4kD27P06_bp4uMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:33:14:b5:bf:88:61:15:2b:44:96:0d:13:85:63:37:63:bf:
aa:01:56:d7:c9:5d:c1:f4:54:8f:49:2a:64:d5:d5:2a:c4:53:
26:c8:4d:48:e6:06:96:68:62:75:df:3d:e3:fe:3a:26:c8:76:
cf:b3:48:34:6a:c4:41:dc:55:f5:88:eb:3b:21:bf:1a:cf:9f:
18:83:fe:92:c6:9c:3d:28:98:cd:43:4e:47:d1:47:cf:14:80:
41:85:8b:0c:d6:c0:7a:c9:c3:d7:58:38:d9:46:2c:98:5a:65:
88:2f:a3:93:6d:32:a7:14:1a:20:5d:0d:55:43:e5:c7:09:4c:
6a:dd:5d:48:a4:21:c0:d8:4b:3b:84:b7:b3:90:f6:3d:77:cc:
99:52:ea:40:7d:0d:3d:ee:30:a4:2b:80:1c:41:52:a6:1a:7c:
82:80:42:cc:ba:be:45:66:33:20:50:06:70:ca:6f:1e:f3:a8:
ad:0b:37:b1:f1:86:31:7e:a8:8b:e8:d2:92:c6:0a:c4:bc:15:
04:b4:b4:fa:fc:a6:90:7c:68:20:9e:49:ba:66:05:2c:97:7d:
66:27:37:83:39:06:21:c6:f6:9f:e0:51:9a:e0:e0:b8:b6:30:
32:47:97:27:1d:d8:4a:98:75:2b:8b:2e:90:79:12:5c:50:27:
18:d3:37:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2j5pgXpiCIelz+n1jOfbuKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjZWY3ODA4MmMwNzI5MmFhYWUyNDBmNmVjZmQzYWZkYmE3
OGI4Y2EwHhcNMjYwNDE5MDQwMTMxWhcNMjYwNDIwMDQwMTMxWjAzMTEwLwYDVQQD
EyhiZmYwYTZjYTZhZjIwYmExN2YwZGZmMGVlMmY3N2FkMWJiMzBkOWU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Bl+g7bBlEIb8UMUYK1ErN9NrvR9
OTxwihL/jSLcm1wkbHtAqbZ2tMT4ZUcG6bDjybn5rX6RevktHVzef00kS3OwwQ7L
I5a7g8hrqccOogFZgy3onAZq23mOKNa3QebOw4L8pvGZP5K8/z3spReZ2qwyer2Z
rj+axA9MftMnNsIqlt0P+rKgdmO/zOH6+m0w2yjz8h/JfmIqqru8DVdlhOvUq8AC
seY9dou8VRokpN4MpM/myzE29j/fg7NXN3FaT90NwZCR2UHcr+tR6HuVMfO8hnsy
ytA8WS68AfComZGemabSMLG+e1ypDnLnilZZfVSKpODn7IA/brLPWdceKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL/wpspq8guhfw3/DuL3etG7MNnpMB8GA1UdIwQY
MBaAFEzveAgsBykqquJA9uz9Ov26eLjKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVE85NENDd0hLU3FxNGtEMjdQMDZfYnA0dU1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8xNmZiYmYtNmNkZC00OWI3LThjMjEt
ODgzYjkwY2QxMzRhLzEvVE85NENDd0hLU3FxNGtEMjdQMDZfYnA0dU1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8xNmZiYmYtNmNkZC00OWI3LThjMjEtODgzYjkwY2QxMzRh
LzEvVE85NENDd0hLU3FxNGtEMjdQMDZfYnA0dU1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoTMUtb+I
YRUrRJYNE4VjN2O/qgFW18ldwfRUj0kqZNXVKsRTJshNSOYGlmhidd894/46Jsh2
z7NINGrEQdxV9YjrOyG/Gs+fGIP+ksacPSiYzUNOR9FHzxSAQYWLDNbAesnD11g4
2UYsmFpliC+jk20ypxQaIF0NVUPlxwlMat1dSKQhwNhLO4S3s5D2PXfMmVLqQH0N
Pe4wpCuAHEFSphp8goBCzLq+RWYzIFAGcMpvHvOorQs3sfGGMX6oi+jSksYKxLwV
BLS0+vymkHxoIJ5JumYFLJd9Zic3gzkGIcb2n+BRmuDguLYwMkeXJx3YSph1K4su
kHkSXFAnGNM3Mw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:35:24 2026 by rpki-client