Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/9bacf8-146c-4b63-9d36-8200b86603b1/1/TOkDeb2NBDdLOt7wYNUa4hVxCTU.mft
File: TOkDeb2NBDdLOt7wYNUa4hVxCTU.mft (raw, json)
Hash identifier: bgYhD+rj4W8/qpMiXxQ7rQNr9y4AW0Evl9Whq5Ivdyo=
Subject key identifier: F9:1B:10:2A:F4:88:1A:47:C3:14:B1:95:2A:C0:DD:27:9B:DE:A7:39
Authority key identifier: 4C:E9:03:79:BD:8D:04:37:4B:3A:DE:F0:60:D5:1A:E2:15:71:09:35
Certificate issuer: /CN=4ce90379bd8d04374b3adef060d51ae215710935
Certificate serial: 01A0EC6552ED5372C84D497E01B6608BC415
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TOkDeb2NBDdLOt7wYNUa4hVxCTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9bacf8-146c-4b63-9d36-8200b86603b1/1/TOkDeb2NBDdLOt7wYNUa4hVxCTU.mft
Manifest number: 0462
Signing time: Tue 29 Sep 2026 09:00:58 +0000
Manifest this update: Tue 29 Sep 2026 09:00:58 +0000
Manifest next update: Wed 30 Sep 2026 09:00:58 +0000
Files and hashes: 1: EjuIE4enXZzinM4ZfgsSD3gwxuY.roa (hash: VmAOnFMFZNZ7v7h3b1tL7nh4Drf7aU0G1qxfw7anYLc=)
2: TOkDeb2NBDdLOt7wYNUa4hVxCTU.crl (hash: rI0F3/4J3NcxAa0OMNFnE2tzVO6NrxAjt8yOpyNXfG4=)
3: ksdLr_cpg0SNdbhzGPEUMaDjaa0.roa (hash: aWZAiEXDI8uHWbww+kMMTpEPGkhJJ3i3CwUVKl+KHtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9bacf8-146c-4b63-9d36-8200b86603b1/1/TOkDeb2NBDdLOt7wYNUa4hVxCTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/9bacf8-146c-4b63-9d36-8200b86603b1/1/TOkDeb2NBDdLOt7wYNUa4hVxCTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TOkDeb2NBDdLOt7wYNUa4hVxCTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:65:52:ed:53:72:c8:4d:49:7e:01:b6:60:8b:c4:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce90379bd8d04374b3adef060d51ae215710935
Validity
Not Before: Sep 29 09:00:58 2026 GMT
Not After : Sep 30 09:00:58 2026 GMT
Subject: CN=f91b102af4881a47c314b1952ac0dd279bdea739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ce:a0:19:2b:4a:3b:49:67:0d:ca:49:af:44:
03:b9:43:3d:01:7b:e6:b6:76:1f:fe:5b:9f:b2:45:
9c:0b:06:6c:16:f1:56:77:58:c0:3f:2a:98:b3:46:
d7:1a:14:b2:c0:06:e0:f6:c3:89:ef:24:04:8e:00:
66:97:be:05:d0:47:6c:ad:f9:83:eb:98:13:e3:15:
4a:b5:29:69:55:0c:e1:8e:e5:6b:95:4b:18:74:47:
66:89:ff:98:59:32:4e:e4:5b:3d:11:01:0f:ae:6e:
d4:68:73:3e:e2:29:e1:02:64:12:a0:87:bf:62:81:
d2:c6:c5:d4:8a:10:22:ae:71:cb:09:32:20:2d:09:
5b:23:e2:f8:e3:ca:e4:d2:d9:df:f3:6a:10:1b:df:
9e:3b:5f:38:bf:0c:34:0b:fa:74:4e:f7:2c:f2:d2:
69:4b:9a:4c:cb:54:0d:8c:6d:52:f2:4b:29:1c:72:
03:bb:cd:71:54:c0:db:38:bd:1f:0d:c4:9a:ac:0e:
da:b8:da:20:8f:3e:2e:56:a6:ed:8b:43:10:bd:98:
a5:69:b8:48:90:24:05:71:e7:85:e1:dd:03:67:d5:
0b:17:ba:f1:e7:37:98:43:bc:97:51:75:16:9a:db:
72:7f:c2:06:12:8e:96:6f:0b:1e:79:78:73:f3:99:
e6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:1B:10:2A:F4:88:1A:47:C3:14:B1:95:2A:C0:DD:27:9B:DE:A7:39
X509v3 Authority Key Identifier:
keyid:4C:E9:03:79:BD:8D:04:37:4B:3A:DE:F0:60:D5:1A:E2:15:71:09:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOkDeb2NBDdLOt7wYNUa4hVxCTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9bacf8-146c-4b63-9d36-8200b86603b1/1/TOkDeb2NBDdLOt7wYNUa4hVxCTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9bacf8-146c-4b63-9d36-8200b86603b1/1/TOkDeb2NBDdLOt7wYNUa4hVxCTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:81:46:34:37:d9:37:b8:3e:0e:32:c6:a8:20:60:2e:e6:1d:
6a:9e:0c:bf:b4:f6:d5:41:8d:9e:05:53:ec:c9:51:c7:71:38:
c7:50:22:68:a1:eb:ee:6d:3c:80:90:12:a0:4c:29:0f:64:64:
a4:14:c8:0e:74:eb:f6:6e:7d:e6:99:af:4d:cb:be:d0:a0:ac:
34:7e:8e:b1:33:f1:59:ac:f4:5b:e2:3b:b1:d3:50:f7:e2:6b:
f4:22:1e:72:f5:e0:f4:79:9b:a4:1b:fe:16:e6:28:2e:8c:14:
61:d8:5b:d2:11:82:ed:87:16:99:44:98:0a:99:a5:28:10:63:
ab:a6:95:af:8c:13:d2:4f:40:99:98:12:15:b3:d4:dc:90:3d:
d1:04:29:f3:f4:42:75:d5:2d:8e:e9:bb:dd:1c:66:14:5b:82:
02:d9:af:f4:bf:de:ec:21:18:e2:9a:eb:a7:bb:d7:d3:d7:96:
4e:0a:cb:7e:64:e9:7c:b1:c4:d2:49:f1:8e:16:28:5c:40:55:
0a:4e:ca:e7:45:bb:37:af:d4:26:7f:58:c2:6f:eb:4b:1f:ab:
bd:5c:14:18:d2:a8:b7:8b:fc:8e:e9:44:f3:c0:39:0a:43:af:
09:63:ad:2c:53:89:40:33:a2:2f:65:7d:78:56:75:c6:9e:87:
18:73:74:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDsZVLtU3LITUl+AbZgi8QVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjZTkwMzc5YmQ4ZDA0Mzc0YjNhZGVmMDYwZDUxYWUyMTU3
MTA5MzUwHhcNMjYwOTI5MDkwMDU4WhcNMjYwOTMwMDkwMDU4WjAzMTEwLwYDVQQD
EyhmOTFiMTAyYWY0ODgxYTQ3YzMxNGIxOTUyYWMwZGQyNzliZGVhNzM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt86gGStKO0lnDcpJr0QDuUM9AXvm
tnYf/lufskWcCwZsFvFWd1jAPyqYs0bXGhSywAbg9sOJ7yQEjgBml74F0EdsrfmD
65gT4xVKtSlpVQzhjuVrlUsYdEdmif+YWTJO5Fs9EQEPrm7UaHM+4inhAmQSoIe/
YoHSxsXUihAirnHLCTIgLQlbI+L448rk0tnf82oQG9+eO184vww0C/p0Tvcs8tJp
S5pMy1QNjG1S8kspHHIDu81xVMDbOL0fDcSarA7auNogjz4uVqbti0MQvZilabhI
kCQFceeF4d0DZ9ULF7rx5zeYQ7yXUXUWmttyf8IGEo6WbwseeXhz85nmyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPkbECr0iBpHwxSxlSrA3Seb3qc5MB8GA1UdIwQY
MBaAFEzpA3m9jQQ3Szre8GDVGuIVcQk1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVE9rRGViMk5CRGRMT3Q3d1lOVWE0aFZ4Q1RVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85YmFjZjgtMTQ2Yy00YjYzLTlkMzYt
ODIwMGI4NjYwM2IxLzEvVE9rRGViMk5CRGRMT3Q3d1lOVWE0aFZ4Q1RVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni85YmFjZjgtMTQ2Yy00YjYzLTlkMzYtODIwMGI4NjYwM2Ix
LzEvVE9rRGViMk5CRGRMT3Q3d1lOVWE0aFZ4Q1RVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM4FGNDfZ
N7g+DjLGqCBgLuYdap4Mv7T21UGNngVT7MlRx3E4x1AiaKHr7m08gJASoEwpD2Rk
pBTIDnTr9m595pmvTcu+0KCsNH6OsTPxWaz0W+I7sdNQ9+Jr9CIecvXg9HmbpBv+
FuYoLowUYdhb0hGC7YcWmUSYCpmlKBBjq6aVr4wT0k9AmZgSFbPU3JA90QQp8/RC
ddUtjum73RxmFFuCAtmv9L/e7CEY4prrp7vX09eWTgrLfmTpfLHE0knxjhYoXEBV
Ck7K50W7N6/UJn9Ywm/rSx+rvVwUGNKot4v8julE88A5CkOvCWOtLFOJQDOiL2V9
eFZ1xp6HGHN0YQ==
-----END CERTIFICATE-----
Generated at Tue Sep 29 19:22:07 2026 by rpki-client