Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.mft
File: C_TOA4nPk-LVfggvG-xh2oJy__E.mft (raw, json)
Hash identifier: 0u1gXrX9uu24Uri6PoBjhVDcMaMxDq3J6G3+0Ab8Rgk=
Subject key identifier: C7:82:EE:A7:FB:38:FD:98:D6:59:3D:50:4B:8E:66:FB:BC:AB:66:B6
Authority key identifier: 0B:F4:CE:03:89:CF:93:E2:D5:7E:08:2F:1B:EC:61:DA:82:72:FF:F1
Certificate issuer: /CN=0bf4ce0389cf93e2d57e082f1bec61da8272fff1
Certificate serial: 019D97E268D8902518B1712474C38AE45968
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_TOA4nPk-LVfggvG-xh2oJy__E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.mft
Manifest number: 118E
Signing time: Thu 16 Apr 2026 20:01:30 +0000
Manifest this update: Thu 16 Apr 2026 20:01:30 +0000
Manifest next update: Fri 17 Apr 2026 20:01:30 +0000
Files and hashes: 1: C_TOA4nPk-LVfggvG-xh2oJy__E.crl (hash: hF+7I01rOmfRvzNeeWWxh/LUlJXyv75kXXKB2a1oJDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_TOA4nPk-LVfggvG-xh2oJy__E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e2:68:d8:90:25:18:b1:71:24:74:c3:8a:e4:59:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bf4ce0389cf93e2d57e082f1bec61da8272fff1
Validity
Not Before: Apr 16 20:01:30 2026 GMT
Not After : Apr 17 20:01:30 2026 GMT
Subject: CN=c782eea7fb38fd98d6593d504b8e66fbbcab66b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:14:c7:e4:90:5d:d5:2c:83:7e:37:9a:9e:ec:
31:00:0d:74:62:7f:cf:5e:9d:d6:0e:6a:76:04:ad:
9b:cf:7d:f7:56:b2:1a:83:be:1b:b7:21:ad:9e:a1:
fb:a2:9a:fc:ae:4c:91:e5:f6:3b:a0:83:f3:b4:fc:
5b:70:eb:59:77:86:92:f8:b4:19:10:34:0c:64:92:
d2:53:a7:0a:be:ea:d4:6a:4b:0e:07:9b:dc:c2:30:
9c:13:af:bf:56:c2:26:8f:f7:43:3d:2d:f3:79:9a:
c9:71:69:d3:ef:cd:73:64:59:03:fb:11:40:b8:4c:
5a:8e:df:1a:34:b4:d5:7e:9b:26:d0:4f:d5:90:62:
52:00:82:44:1e:62:cd:48:83:4d:65:c0:d8:c0:fc:
13:cb:ee:23:38:4b:30:c0:92:e7:1d:bd:6b:e0:f8:
10:2b:0f:86:e9:f0:4d:04:24:ed:85:56:75:8f:71:
93:3a:82:f1:ec:35:5f:83:9e:02:fe:c8:47:08:9a:
8e:21:d8:eb:39:4b:62:43:1f:32:a5:c8:c0:5a:81:
e3:9f:09:35:5c:ae:d2:f7:34:d0:34:b7:38:dc:cd:
09:ed:04:cf:5d:1e:57:a3:a0:0f:58:0c:a5:61:c3:
ca:e9:1b:36:22:86:82:24:f3:0a:0e:33:81:50:6a:
75:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:82:EE:A7:FB:38:FD:98:D6:59:3D:50:4B:8E:66:FB:BC:AB:66:B6
X509v3 Authority Key Identifier:
keyid:0B:F4:CE:03:89:CF:93:E2:D5:7E:08:2F:1B:EC:61:DA:82:72:FF:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_TOA4nPk-LVfggvG-xh2oJy__E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:fc:29:89:c5:94:b7:f0:57:cb:08:ad:ee:12:65:31:1d:87:
be:de:b6:8c:41:03:30:ad:58:a1:7a:d1:00:6a:dd:97:61:11:
84:6e:cb:0b:e9:e7:3e:b5:c1:c6:1e:70:b9:48:c0:45:e9:52:
19:72:b6:ba:84:ff:6f:d6:4b:52:1d:a6:9b:ce:3c:52:9e:ed:
0f:ab:78:f7:c1:dd:68:78:d2:da:8b:9d:5f:04:b0:91:47:53:
6f:50:d6:91:63:05:49:b5:e2:78:ac:b9:82:41:13:e6:2b:6d:
d6:76:5f:db:0c:4a:ba:0e:67:59:a0:80:70:57:66:36:2c:f6:
31:50:d5:20:04:b3:8b:f4:95:cf:90:5c:d7:ae:cb:66:9a:64:
46:a0:d2:0e:2a:ad:2f:9d:87:78:3e:94:47:0b:ca:ea:b2:79:
1d:20:e7:a2:41:2d:db:7b:93:6f:d9:94:58:25:3c:08:ab:99:
ce:b9:ad:ef:b8:68:6f:45:b6:c3:3b:26:d3:cc:ca:b6:10:48:
e0:ce:0a:6c:4f:42:aa:f6:42:53:48:a2:1f:2b:bd:9b:21:34:
c7:49:34:8d:7e:33:68:22:91:a6:50:0f:5f:b8:84:c0:de:d3:
8f:63:04:fa:33:0f:c0:99:90:b8:65:0d:66:00:0b:c3:bd:eb:
9a:f7:81:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:59:10 2026 by rpki-client