Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/TODEiXTgrnBa9Q7Q1lJH0afmL9s.mft
File: TODEiXTgrnBa9Q7Q1lJH0afmL9s.mft (raw, json)
Hash identifier: aEq02FYUtFvs3jeQNR4DQDXcoXZLx7Z28fLqFslaFRA=
Subject key identifier: 44:84:9F:3D:FA:69:3C:1A:A4:2D:BF:DF:EB:93:66:5C:C6:BC:E6:F8
Authority key identifier: 4C:E0:C4:89:74:E0:AE:70:5A:F5:0E:D0:D6:52:47:D1:A7:E6:2F:DB
Certificate issuer: /CN=4ce0c48974e0ae705af50ed0d65247d1a7e62fdb
Certificate serial: 019FA89A584EF28250A6717BAAA6AC6D2638
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TODEiXTgrnBa9Q7Q1lJH0afmL9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/TODEiXTgrnBa9Q7Q1lJH0afmL9s.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:01:55 +0000
Manifest this update: Tue 28 Jul 2026 12:01:55 +0000
Manifest next update: Wed 29 Jul 2026 12:01:55 +0000
Files and hashes: 1: TODEiXTgrnBa9Q7Q1lJH0afmL9s.crl (hash: CiHZgBRjnkZ8DoNJ2tkR5a65PHfIaltUjzgCPTTiqTQ=)
2: ebblHkxH_4mxEtlIvQdRAh9glJA.roa (hash: 3iH299M2+mtu/XgvXbZ9sMSTDosmnZ7V4KjCGJX9hzQ=)
3: i5z3KQc2e0-K2v0h5qLdZBQJJXU.roa (hash: KrOQvD/t0VuGa9aPl/HCdbKeqmz1JIB0jRemVYeffNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/TODEiXTgrnBa9Q7Q1lJH0afmL9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/TODEiXTgrnBa9Q7Q1lJH0afmL9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/TODEiXTgrnBa9Q7Q1lJH0afmL9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:9a:58:4e:f2:82:50:a6:71:7b:aa:a6:ac:6d:26:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce0c48974e0ae705af50ed0d65247d1a7e62fdb
Validity
Not Before: Jul 28 12:01:55 2026 GMT
Not After : Jul 29 12:01:55 2026 GMT
Subject: CN=44849f3dfa693c1aa42dbfdfeb93665cc6bce6f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bc:4b:cb:3b:21:27:af:86:f8:06:a5:e4:e4:
67:fc:61:f3:51:46:f4:10:db:2d:78:7a:cb:75:be:
21:93:b5:94:05:80:05:32:6e:ec:ff:15:b2:07:28:
05:5e:e1:8d:bd:f0:e4:6c:14:33:ba:69:b6:0d:06:
ce:2c:10:17:1f:bb:16:50:3d:a5:b6:14:86:84:92:
c3:42:81:c3:21:94:b2:78:7d:8e:e2:9e:20:1e:47:
59:ac:02:f6:5d:68:f0:9a:d2:43:5b:68:83:c7:e3:
cb:d0:f0:8d:8e:b0:b9:bd:0a:11:d2:69:f2:3a:51:
41:a4:8a:62:f1:ee:c2:b8:e9:66:96:63:3a:85:7d:
b7:5f:d4:17:2c:5e:45:97:61:ad:21:c1:0a:de:dc:
c5:f0:83:56:32:4d:ed:29:76:f1:db:80:cc:4f:90:
45:1a:47:6f:c2:d5:95:cd:36:54:d6:67:b1:55:2f:
57:4a:7a:30:29:58:64:57:3d:11:6a:da:e6:98:ed:
c1:01:af:00:e6:22:04:f0:a3:e8:f0:d1:3c:91:45:
d3:da:0a:4c:61:01:4a:6c:5c:b1:c6:ec:9c:e8:e3:
f7:9c:7e:7a:9a:cc:ba:14:8c:a3:34:3b:91:d8:6b:
35:af:28:39:17:d5:cd:0d:c5:5d:6b:46:24:56:d5:
42:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:84:9F:3D:FA:69:3C:1A:A4:2D:BF:DF:EB:93:66:5C:C6:BC:E6:F8
X509v3 Authority Key Identifier:
keyid:4C:E0:C4:89:74:E0:AE:70:5A:F5:0E:D0:D6:52:47:D1:A7:E6:2F:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TODEiXTgrnBa9Q7Q1lJH0afmL9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/TODEiXTgrnBa9Q7Q1lJH0afmL9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/TODEiXTgrnBa9Q7Q1lJH0afmL9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:db:07:ce:1b:6c:e8:ff:de:7d:28:54:09:c3:ee:d3:58:b6:
39:63:01:51:d3:dd:1a:10:9c:60:28:33:b4:c3:1e:55:89:c6:
90:64:0e:b8:b5:f0:c0:00:6a:92:d6:c4:00:ae:16:60:2a:8e:
57:e1:3e:66:43:0a:c1:bb:5a:db:70:e4:79:90:b1:a0:33:2c:
d7:bd:1c:3f:ce:f0:5c:50:d5:b4:b1:71:f5:74:4a:f1:fe:90:
09:59:7d:c0:8f:b7:62:6a:ab:f5:e4:d8:4c:d9:9f:33:7c:9f:
f6:2e:bb:93:38:0b:e9:42:62:c4:73:c1:58:04:55:75:c1:db:
ab:03:58:3a:cb:6e:32:b2:0e:c8:b7:9c:14:bd:76:23:78:ee:
04:33:b3:50:23:17:c6:aa:ce:6e:dc:f1:a8:69:09:ef:8f:aa:
5f:dc:ac:67:6e:55:2e:4a:3e:34:db:a3:05:0e:1d:75:d9:bb:
6c:e2:a0:02:32:7d:65:32:fd:b4:38:72:6c:49:95:a2:54:80:
a6:bf:cc:6b:15:b2:1b:40:e1:12:c9:27:9a:2d:fe:ca:6c:7d:
bd:92:59:c1:76:0d:d8:40:8c:d8:c1:f1:8e:ad:95:cf:a7:a6:
da:dd:ea:03:65:d5:88:63:a8:f1:58:1a:29:a5:b9:77:dd:b3:
ce:45:d1:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:17:11 2026 by rpki-client