
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/2d542d-1ec5-4943-b63e-915120b63093/1/TOCCAEkieEhNbIj1OGuns5aWy5Y.mft
File: TOCCAEkieEhNbIj1OGuns5aWy5Y.mft (raw, json)
Hash identifier: twwtaAKGYjMk5pP6/Otns9gRQRtUHXMtLICGdow0LPo=
Subject key identifier: 47:40:40:86:83:AA:A2:4C:63:6F:70:0E:C7:5B:65:92:84:A2:4F:EB
Authority key identifier: 4C:E0:82:00:49:22:78:48:4D:6C:88:F5:38:6B:A7:B3:96:96:CB:96
Certificate issuer: /CN=4ce08200492278484d6c88f5386ba7b39696cb96
Certificate serial: 019CABD9728156C2CF181817314663DD2529
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TOCCAEkieEhNbIj1OGuns5aWy5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/2d542d-1ec5-4943-b63e-915120b63093/1/TOCCAEkieEhNbIj1OGuns5aWy5Y.mft
Manifest number: 0F19
Signing time: Mon 02 Mar 2026 00:01:20 +0000
Manifest this update: Mon 02 Mar 2026 00:01:20 +0000
Manifest next update: Tue 03 Mar 2026 00:01:20 +0000
Files and hashes: 1: TOCCAEkieEhNbIj1OGuns5aWy5Y.crl (hash: fJL5vkG8XY7sG0ZnqQF9WM5c/X0s5teu1QtWSPnf2Q0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/2d542d-1ec5-4943-b63e-915120b63093/1/TOCCAEkieEhNbIj1OGuns5aWy5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/2d542d-1ec5-4943-b63e-915120b63093/1/TOCCAEkieEhNbIj1OGuns5aWy5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/TOCCAEkieEhNbIj1OGuns5aWy5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:72:81:56:c2:cf:18:18:17:31:46:63:dd:25:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce08200492278484d6c88f5386ba7b39696cb96
Validity
Not Before: Mar 2 00:01:20 2026 GMT
Not After : Mar 3 00:01:20 2026 GMT
Subject: CN=4740408683aaa24c636f700ec75b659284a24feb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:76:27:e3:aa:ca:f5:5b:49:23:fe:4b:25:c6:
53:e7:57:a5:3e:4f:a4:52:46:0e:ca:df:a2:c5:d2:
44:f6:72:ad:3a:66:a2:eb:0d:81:e2:0e:a9:d7:76:
9a:69:29:bd:21:8a:d6:c4:03:d5:03:a3:f4:f6:62:
e2:fb:84:7a:5d:09:a3:74:a2:6c:c2:0d:1d:ac:4d:
f3:98:63:cb:eb:5e:3c:19:1c:7d:f4:07:70:38:ec:
58:27:2d:f9:12:de:53:f0:d2:25:f7:bd:0b:26:da:
14:c3:15:30:07:39:47:c1:4d:4d:63:51:e0:b7:bc:
eb:20:dd:3f:28:33:72:12:d7:18:6f:78:96:82:cc:
de:6e:6b:c9:e0:44:28:90:f5:0e:b1:79:fc:94:31:
76:0c:1f:9e:8e:d5:c8:38:fb:c3:79:6c:4a:4b:02:
0f:69:9e:24:43:48:bd:93:2c:42:cb:73:ce:77:a2:
05:df:61:1c:7c:ed:5f:c8:9d:0a:8c:96:41:26:e2:
34:11:7b:54:a8:56:57:b9:06:df:db:e9:32:8d:d8:
a4:13:1e:20:71:ff:30:05:03:84:99:f3:06:68:f5:
a4:f9:e8:0f:99:25:34:58:a4:74:aa:1a:61:78:54:
41:30:3a:72:26:9b:b3:e2:1f:bb:91:bf:eb:6e:8b:
08:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:40:40:86:83:AA:A2:4C:63:6F:70:0E:C7:5B:65:92:84:A2:4F:EB
X509v3 Authority Key Identifier:
keyid:4C:E0:82:00:49:22:78:48:4D:6C:88:F5:38:6B:A7:B3:96:96:CB:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOCCAEkieEhNbIj1OGuns5aWy5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2d542d-1ec5-4943-b63e-915120b63093/1/TOCCAEkieEhNbIj1OGuns5aWy5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2d542d-1ec5-4943-b63e-915120b63093/1/TOCCAEkieEhNbIj1OGuns5aWy5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:db:06:77:9a:78:24:b5:d3:0f:0b:58:15:b7:68:c1:35:4c:
53:58:92:61:72:a2:53:4e:b1:c1:35:35:8c:24:ac:83:61:05:
b6:69:ad:bf:f1:92:33:2d:17:31:f6:72:cf:88:60:74:ee:57:
8e:57:cd:fd:db:92:da:c5:61:b8:91:fd:91:c6:56:71:2b:5d:
39:4a:51:c7:70:71:cd:00:8f:bf:f9:56:98:c5:7d:0a:41:80:
33:d8:3b:04:87:6a:64:67:cb:e5:40:be:06:01:60:1a:7b:4d:
32:e7:fe:f2:b7:7a:08:a9:49:30:78:03:dc:23:b9:b6:0f:dc:
71:fa:8d:cc:0a:9b:f1:c6:a3:48:a5:d6:2b:12:87:43:7b:2a:
84:a0:17:5b:5d:22:3b:5c:63:91:10:1b:dd:c2:95:91:05:f4:
30:20:d7:d8:b5:7d:66:a2:93:c3:7c:03:59:63:12:21:aa:ab:
a0:39:86:d6:b8:db:19:23:f3:a8:8c:2e:12:26:1f:64:8e:25:
c1:b7:0c:a1:3a:b7:b7:01:52:fe:06:d1:e0:30:c7:40:be:c3:
e0:66:e8:bc:6a:64:bd:d9:45:5c:ea:85:ba:6a:4f:0f:7a:30:
e9:35:a6:44:af:0c:44:dd:58:c6:03:ff:d8:0d:a2:8d:39:1e:
02:6c:51:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:01:06 2026 by rpki-client