Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/TODEiXTgrnBa9Q7Q1lJH0afmL9s.mft
File: TODEiXTgrnBa9Q7Q1lJH0afmL9s.mft (raw, json)
Hash identifier: SNJ786MF6qq5ulTa2TVcmHQ6k/S/cfBC0WRcTtQybrM=
Subject key identifier: E6:3B:E8:A3:48:EA:75:C6:AA:6B:E2:B7:86:63:2D:D1:42:CE:0D:8A
Authority key identifier: 4C:E0:C4:89:74:E0:AE:70:5A:F5:0E:D0:D6:52:47:D1:A7:E6:2F:DB
Certificate issuer: /CN=4ce0c48974e0ae705af50ed0d65247d1a7e62fdb
Certificate serial: 01A113A9A0507CB5206AA82CB384F14B7873
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TODEiXTgrnBa9Q7Q1lJH0afmL9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/TODEiXTgrnBa9Q7Q1lJH0afmL9s.mft
Manifest number: 0108
Signing time: Wed 07 Oct 2026 00:00:45 +0000
Manifest this update: Wed 07 Oct 2026 00:00:45 +0000
Manifest next update: Thu 08 Oct 2026 00:00:45 +0000
Files and hashes: 1: TODEiXTgrnBa9Q7Q1lJH0afmL9s.crl (hash: 6AP00oepf8cky4Df1nTPhvNwro3ABGbF8nBJRTgFv1o=)
2: ebblHkxH_4mxEtlIvQdRAh9glJA.roa (hash: 3iH299M2+mtu/XgvXbZ9sMSTDosmnZ7V4KjCGJX9hzQ=)
3: i5z3KQc2e0-K2v0h5qLdZBQJJXU.roa (hash: KrOQvD/t0VuGa9aPl/HCdbKeqmz1JIB0jRemVYeffNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/TODEiXTgrnBa9Q7Q1lJH0afmL9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/TODEiXTgrnBa9Q7Q1lJH0afmL9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/TODEiXTgrnBa9Q7Q1lJH0afmL9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:13:a9:a0:50:7c:b5:20:6a:a8:2c:b3:84:f1:4b:78:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce0c48974e0ae705af50ed0d65247d1a7e62fdb
Validity
Not Before: Oct 7 00:00:45 2026 GMT
Not After : Oct 8 00:00:45 2026 GMT
Subject: CN=e63be8a348ea75c6aa6be2b786632dd142ce0d8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:89:32:47:db:9e:d7:eb:46:17:41:88:14:49:
91:26:dd:57:79:be:18:3a:e7:bb:26:11:f0:f5:b9:
ae:82:1f:7a:3d:72:10:a1:30:2a:e5:54:ab:82:1e:
03:39:6c:bb:ba:90:39:f6:a7:b3:b4:8b:3e:f3:c9:
18:10:23:33:4a:da:af:f2:51:1f:64:39:fe:7f:6b:
bf:0e:eb:56:21:7b:c3:9f:44:18:94:ee:48:40:e9:
60:31:4d:b0:70:63:62:3e:ab:a6:82:88:6b:a3:30:
4b:6b:7b:34:cf:15:8e:ab:54:ea:3f:90:7a:4e:b4:
e4:90:eb:13:15:3b:58:e8:32:d2:68:51:86:c5:0f:
88:2e:e5:f3:61:25:26:db:1f:a5:90:ea:af:9d:71:
8a:ee:28:80:d0:c5:a5:33:b8:c4:41:8f:a6:05:c3:
54:4d:5f:46:1e:4c:59:31:8e:10:4d:61:61:e8:5b:
df:0f:2b:46:d6:83:ea:f3:63:26:b9:00:60:65:79:
71:50:4d:02:17:1f:91:0a:91:c6:58:51:6a:4d:25:
1b:42:00:1e:3c:b5:70:b2:99:9d:06:36:e0:e0:ed:
cc:96:d3:bf:99:09:c4:cb:fc:38:a6:d9:ca:2e:7e:
ed:57:8d:44:c3:88:46:cd:b7:0f:4f:8f:40:0a:e9:
07:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:3B:E8:A3:48:EA:75:C6:AA:6B:E2:B7:86:63:2D:D1:42:CE:0D:8A
X509v3 Authority Key Identifier:
keyid:4C:E0:C4:89:74:E0:AE:70:5A:F5:0E:D0:D6:52:47:D1:A7:E6:2F:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TODEiXTgrnBa9Q7Q1lJH0afmL9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/TODEiXTgrnBa9Q7Q1lJH0afmL9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/TODEiXTgrnBa9Q7Q1lJH0afmL9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:a2:53:98:b5:e4:9a:35:35:9f:3d:25:a1:69:9f:38:cf:51:
75:64:8c:df:c3:07:64:24:87:1e:ba:ce:dd:44:97:30:7d:cf:
94:52:12:09:34:43:3d:f4:f3:78:c9:9e:4b:ab:e3:1b:b2:62:
0b:a1:c4:d4:76:b7:63:a7:47:de:6b:9e:95:c2:35:ce:9d:e5:
2c:10:70:96:84:23:57:46:28:50:ab:a9:f3:91:db:72:21:bc:
0f:e8:f7:74:50:99:87:90:29:e2:be:a5:bc:08:6f:f9:76:d3:
41:67:b3:ad:76:1a:0f:ac:c0:0b:14:94:5b:e2:aa:bd:8e:66:
ef:4e:d7:87:07:bc:5e:90:5f:11:77:61:34:dc:0a:5f:5f:4a:
3a:9b:7b:aa:bc:ce:66:73:69:49:25:c5:56:b4:31:dc:18:08:
d2:9b:d2:69:f9:22:74:7d:b2:a7:6d:ac:fe:27:58:b0:0e:fc:
44:2c:f8:a6:bc:a8:76:85:53:89:61:03:2d:22:e0:f2:7e:73:
8b:88:0b:6f:a5:1c:18:16:7c:7e:54:e8:2c:68:c9:e0:84:a4:
17:1d:50:e8:09:89:d5:b4:d5:67:40:ff:b5:8d:55:25:e1:8e:
ea:41:78:ba:7f:15:4a:2b:7e:3b:2b:36:24:d4:c4:96:99:1e:
ee:79:c8:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaETqaBQfLUgaqgss4TxS3hzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjZTBjNDg5NzRlMGFlNzA1YWY1MGVkMGQ2NTI0N2QxYTdl
NjJmZGIwHhcNMjYxMDA3MDAwMDQ1WhcNMjYxMDA4MDAwMDQ1WjAzMTEwLwYDVQQD
EyhlNjNiZThhMzQ4ZWE3NWM2YWE2YmUyYjc4NjYzMmRkMTQyY2UwZDhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYkyR9ue1+tGF0GIFEmRJt1Xeb4Y
Oue7JhHw9bmugh96PXIQoTAq5VSrgh4DOWy7upA59qeztIs+88kYECMzStqv8lEf
ZDn+f2u/DutWIXvDn0QYlO5IQOlgMU2wcGNiPqumgohrozBLa3s0zxWOq1TqP5B6
TrTkkOsTFTtY6DLSaFGGxQ+ILuXzYSUm2x+lkOqvnXGK7iiA0MWlM7jEQY+mBcNU
TV9GHkxZMY4QTWFh6FvfDytG1oPq82MmuQBgZXlxUE0CFx+RCpHGWFFqTSUbQgAe
PLVwspmdBjbg4O3MltO/mQnEy/w4ptnKLn7tV41Ew4hGzbcPT49ACukHfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOY76KNI6nXGqmvit4ZjLdFCzg2KMB8GA1UdIwQY
MBaAFEzgxIl04K5wWvUO0NZSR9Gn5i/bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVE9ERWlYVGdybkJhOVE3UTFsSkgwYWZtTDlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny85OWRjY2EtOTYzYS00MDAzLWJmYWYt
YTExNjlhMjg5YzU0LzEvVE9ERWlYVGdybkJhOVE3UTFsSkgwYWZtTDlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny85OWRjY2EtOTYzYS00MDAzLWJmYWYtYTExNjlhMjg5YzU0
LzEvVE9ERWlYVGdybkJhOVE3UTFsSkgwYWZtTDlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcaJTmLXk
mjU1nz0loWmfOM9RdWSM38MHZCSHHrrO3USXMH3PlFISCTRDPfTzeMmeS6vjG7Ji
C6HE1Ha3Y6dH3muelcI1zp3lLBBwloQjV0YoUKup85HbciG8D+j3dFCZh5Ap4r6l
vAhv+XbTQWezrXYaD6zACxSUW+KqvY5m707Xhwe8XpBfEXdhNNwKX19KOpt7qrzO
ZnNpSSXFVrQx3BgI0pvSafkidH2yp22s/idYsA78RCz4pryodoVTiWEDLSLg8n5z
i4gLb6UcGBZ8flToLGjJ4ISkFx1Q6AmJ1bTVZ0D/tY1VJeGO6kF4un8VSit+Oys2
JNTElpke7nnIqQ==
-----END CERTIFICATE-----
Generated at Wed Oct 7 02:39:21 2026 by rpki-client