Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.mft
File: C_TOA4nPk-LVfggvG-xh2oJy__E.mft (raw, json)
Hash identifier: aixeHsI24befSKENY8UnjjEt38/6yeHNiHB5v7amL44=
Subject key identifier: F3:CE:7E:E3:BD:2A:F2:DE:F0:C7:FF:95:00:B0:37:EF:6E:E8:43:F6
Authority key identifier: 0B:F4:CE:03:89:CF:93:E2:D5:7E:08:2F:1B:EC:61:DA:82:72:FF:F1
Certificate issuer: /CN=0bf4ce0389cf93e2d57e082f1bec61da8272fff1
Certificate serial: 01A1DEDE74CE51421D0743A98D919F23C319
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_TOA4nPk-LVfggvG-xh2oJy__E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.mft
Manifest number: 13C5
Signing time: Sun 15 Nov 2026 11:01:23 +0000
Manifest this update: Sun 15 Nov 2026 11:01:23 +0000
Manifest next update: Mon 16 Nov 2026 11:01:23 +0000
Files and hashes: 1: C_TOA4nPk-LVfggvG-xh2oJy__E.crl (hash: z/y2BLcJhAY0oATi3S9kWkQVhv6odpQ84cijUWKcHa8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_TOA4nPk-LVfggvG-xh2oJy__E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:de:74:ce:51:42:1d:07:43:a9:8d:91:9f:23:c3:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bf4ce0389cf93e2d57e082f1bec61da8272fff1
Validity
Not Before: Nov 15 11:01:23 2026 GMT
Not After : Nov 16 11:01:23 2026 GMT
Subject: CN=f3ce7ee3bd2af2def0c7ff9500b037ef6ee843f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:da:50:1b:ba:2a:3d:64:77:f7:35:e1:05:f7:
01:51:da:10:f5:50:31:63:fe:78:be:af:37:04:ec:
d2:18:9f:63:9b:4e:60:13:d6:8b:e4:52:62:54:51:
ff:2b:a8:31:2e:c2:86:3f:c4:4e:92:ae:67:56:73:
10:df:0b:e7:ea:af:d8:25:8b:70:39:cc:bc:04:64:
71:a6:78:24:c0:f4:29:0e:03:a3:2a:26:5a:b1:72:
d3:0d:a3:0f:c9:a4:c3:83:b6:bd:dc:0a:99:82:21:
77:f0:2d:1b:7f:9f:1a:c1:e8:51:f6:49:e4:3b:37:
42:89:89:a4:12:4f:51:34:7c:56:16:e6:e1:bd:02:
67:18:49:d7:7d:b9:ba:83:7f:4f:e9:95:1e:3a:b8:
d7:44:b0:6b:d0:cd:f9:5d:a0:3d:e1:59:1a:a9:67:
e6:76:c8:60:2c:91:73:79:e7:ab:c4:7a:55:c3:e5:
9f:fb:13:4f:c3:dd:22:a8:3d:67:d6:fe:d1:24:fd:
62:4f:6c:1b:7d:ac:dc:e4:7f:65:1e:37:c2:31:00:
5a:ce:50:93:2b:8e:ab:67:40:6b:46:d1:22:bb:2b:
4d:2b:e7:ab:74:1f:ba:2a:b0:d1:0b:e4:0e:79:88:
b9:40:a6:cc:c4:94:89:2e:e6:b3:3e:cc:6a:11:92:
26:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:CE:7E:E3:BD:2A:F2:DE:F0:C7:FF:95:00:B0:37:EF:6E:E8:43:F6
X509v3 Authority Key Identifier:
keyid:0B:F4:CE:03:89:CF:93:E2:D5:7E:08:2F:1B:EC:61:DA:82:72:FF:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_TOA4nPk-LVfggvG-xh2oJy__E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:0e:4b:ad:cf:2e:b7:ed:b2:d8:39:f7:1f:b6:20:01:5a:42:
ce:3e:74:be:db:03:4f:93:17:e1:72:87:df:ce:36:ed:29:c4:
a6:dd:a4:75:9b:0f:b1:2c:d0:c1:1b:fb:e1:cd:ae:21:7d:97:
dd:37:3f:97:d6:e6:a5:26:90:87:46:29:92:15:8f:f5:39:e8:
25:64:79:a6:65:da:15:63:88:52:0a:1d:c4:29:8d:7e:e1:97:
25:2d:c0:7d:c6:4a:92:4a:04:52:76:ef:ff:de:2f:bb:05:2b:
c3:c7:c6:01:94:1c:ed:cb:ac:3b:4a:cb:f7:95:3b:12:0c:15:
71:ce:67:95:09:67:5a:c7:61:b2:09:4a:6f:1a:7d:2f:09:7a:
4c:ac:b8:04:0b:fa:0e:6b:a1:5a:8f:97:99:27:e1:85:b8:b9:
31:89:c2:58:34:0d:4e:92:64:e2:4a:f3:10:20:68:56:24:09:
69:46:4b:ac:c3:87:18:6a:e9:0b:64:29:12:90:f6:39:96:8b:
d0:51:78:60:72:52:69:79:1c:12:9d:f8:96:40:05:80:80:b3:
8e:f0:d6:0d:d4:08:bf:a3:bc:35:10:ab:3b:e1:77:ce:b4:46:
bc:b5:15:87:20:10:02:99:1f:d3:89:48:15:0f:b7:d9:4d:e9:
f1:ff:a0:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:38:34 2026 by rpki-client