Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9bacf8-146c-4b63-9d36-8200b86603b1/1/TOkDeb2NBDdLOt7wYNUa4hVxCTU.mft
File: TOkDeb2NBDdLOt7wYNUa4hVxCTU.mft (raw, json)
Hash identifier: z8N7zb/FbEVGbeMtzraENXhZV1qsG5Erb8iychiEKcQ=
Subject key identifier: 15:5E:96:E0:69:41:E3:C3:14:36:0C:C2:54:55:D5:30:58:A0:AC:C0
Authority key identifier: 4C:E9:03:79:BD:8D:04:37:4B:3A:DE:F0:60:D5:1A:E2:15:71:09:35
Certificate issuer: /CN=4ce90379bd8d04374b3adef060d51ae215710935
Certificate serial: 019FABD0D0758A0F3A61ABD259EF980A339C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TOkDeb2NBDdLOt7wYNUa4hVxCTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9bacf8-146c-4b63-9d36-8200b86603b1/1/TOkDeb2NBDdLOt7wYNUa4hVxCTU.mft
Manifest number: 03BC
Signing time: Wed 29 Jul 2026 03:00:16 +0000
Manifest this update: Wed 29 Jul 2026 03:00:16 +0000
Manifest next update: Thu 30 Jul 2026 03:00:16 +0000
Files and hashes: 1: EjuIE4enXZzinM4ZfgsSD3gwxuY.roa (hash: VmAOnFMFZNZ7v7h3b1tL7nh4Drf7aU0G1qxfw7anYLc=)
2: TOkDeb2NBDdLOt7wYNUa4hVxCTU.crl (hash: 6hlzsqCRNWOT4eXaST0CtzuAsGgIZBHIxSseIXqkjas=)
3: ksdLr_cpg0SNdbhzGPEUMaDjaa0.roa (hash: aWZAiEXDI8uHWbww+kMMTpEPGkhJJ3i3CwUVKl+KHtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9bacf8-146c-4b63-9d36-8200b86603b1/1/TOkDeb2NBDdLOt7wYNUa4hVxCTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/9bacf8-146c-4b63-9d36-8200b86603b1/1/TOkDeb2NBDdLOt7wYNUa4hVxCTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TOkDeb2NBDdLOt7wYNUa4hVxCTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 03:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d0:d0:75:8a:0f:3a:61:ab:d2:59:ef:98:0a:33:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce90379bd8d04374b3adef060d51ae215710935
Validity
Not Before: Jul 29 03:00:16 2026 GMT
Not After : Jul 30 03:00:16 2026 GMT
Subject: CN=155e96e06941e3c314360cc25455d53058a0acc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:bc:cc:76:54:28:1c:9e:b0:d3:6b:74:fd:17:
f5:79:c4:44:85:0e:3b:11:ea:77:95:fc:10:39:15:
f0:a9:b5:1e:a1:7c:b1:b0:5e:19:bf:e0:8d:1d:25:
a5:dd:ca:c0:94:b0:1a:82:d0:ec:16:d4:ca:f9:63:
fd:e9:54:1d:6d:1d:f9:55:32:96:be:2e:90:a9:af:
85:8b:b0:de:55:c1:f0:df:ec:43:73:34:b2:ca:7f:
35:38:5e:de:1e:f1:30:f0:95:5a:ac:13:28:06:3b:
8c:d8:81:e2:5c:53:18:6e:50:33:c2:d9:43:2c:6f:
11:60:6e:6d:fb:1d:72:7e:26:6c:1d:06:1f:71:0d:
03:5d:1a:78:af:f1:83:06:32:ea:cd:fa:c2:55:64:
71:3e:23:23:dd:8c:8b:cf:d2:2d:0c:5f:3e:2e:37:
f9:15:40:ef:f8:b4:b6:f0:e0:3f:83:41:53:c3:e9:
78:94:84:a3:6a:fe:1e:84:dd:21:52:45:d7:af:39:
b5:21:5f:45:15:68:b1:44:41:a1:46:5d:46:26:e4:
96:34:38:00:04:ec:8f:2e:55:b0:9e:38:cd:39:5e:
a6:f6:5c:bd:07:f3:6e:5c:ed:48:fd:bc:dc:6d:a9:
37:18:95:be:30:78:e1:b3:df:72:3a:75:dc:f7:91:
d2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:5E:96:E0:69:41:E3:C3:14:36:0C:C2:54:55:D5:30:58:A0:AC:C0
X509v3 Authority Key Identifier:
keyid:4C:E9:03:79:BD:8D:04:37:4B:3A:DE:F0:60:D5:1A:E2:15:71:09:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOkDeb2NBDdLOt7wYNUa4hVxCTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9bacf8-146c-4b63-9d36-8200b86603b1/1/TOkDeb2NBDdLOt7wYNUa4hVxCTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9bacf8-146c-4b63-9d36-8200b86603b1/1/TOkDeb2NBDdLOt7wYNUa4hVxCTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:f4:50:06:f6:9f:03:c3:e9:cb:14:a1:0b:ff:1b:6e:1d:dc:
0b:13:6a:14:61:f7:7b:e5:55:fb:a8:52:75:0f:6b:a6:ee:f0:
ca:27:03:62:5f:dc:e5:7c:92:e6:b2:6f:f2:05:71:3c:f6:7d:
22:00:07:77:8d:1b:e5:42:29:db:b7:a1:1c:60:b0:92:3e:db:
aa:5a:a6:68:12:f0:80:a5:73:2b:09:f9:e6:8b:8d:3e:4f:de:
d3:6b:12:23:e9:69:1f:31:e6:29:db:d1:ca:90:f5:0b:68:4e:
5a:bd:c9:1e:f5:41:9c:d5:5e:7d:9a:3e:fc:c1:a3:73:77:1e:
53:dd:8c:18:5e:aa:13:c8:14:08:6c:a9:0d:fa:1c:54:3e:95:
8b:41:72:aa:a8:0f:7b:3d:a0:35:2d:75:f0:ec:cf:77:a0:64:
23:02:1b:fe:c0:06:a3:45:77:d8:05:38:dc:72:53:25:af:24:
fe:69:3b:f3:fe:3b:68:89:24:80:ae:f7:cb:db:2b:8a:16:54:
04:70:30:3f:f2:d3:b1:b0:9e:a2:6c:2d:2e:3d:8d:63:d6:b0:
7e:47:6a:d4:d0:f0:da:92:f4:46:86:e1:09:6e:dc:fe:80:93:
46:4e:23:c3:00:39:49:4c:c6:ce:38:fa:e4:12:bb:5e:52:73:
a9:ee:e2:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:50:29 2026 by rpki-client