Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.mft
File: C_TOA4nPk-LVfggvG-xh2oJy__E.mft (raw, json)
Hash identifier: cxss5DjqYEYPk/xY82zO01Lq7Ur9S4+Q4N2qozPS9ss=
Subject key identifier: 06:85:59:35:BB:70:C4:53:E5:CF:7E:51:AB:41:2D:42:59:49:F7:9B
Authority key identifier: 0B:F4:CE:03:89:CF:93:E2:D5:7E:08:2F:1B:EC:61:DA:82:72:FF:F1
Certificate issuer: /CN=0bf4ce0389cf93e2d57e082f1bec61da8272fff1
Certificate serial: 019FA907925E92BC6CBFB000F19D888E01FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_TOA4nPk-LVfggvG-xh2oJy__E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.mft
Manifest number: 12A0
Signing time: Tue 28 Jul 2026 14:01:13 +0000
Manifest this update: Tue 28 Jul 2026 14:01:13 +0000
Manifest next update: Wed 29 Jul 2026 14:01:13 +0000
Files and hashes: 1: C_TOA4nPk-LVfggvG-xh2oJy__E.crl (hash: OA8QuufMai3GxvWrtUz+BkMXPzGxm+mi5YTWfrHb33E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_TOA4nPk-LVfggvG-xh2oJy__E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:92:5e:92:bc:6c:bf:b0:00:f1:9d:88:8e:01:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bf4ce0389cf93e2d57e082f1bec61da8272fff1
Validity
Not Before: Jul 28 14:01:13 2026 GMT
Not After : Jul 29 14:01:13 2026 GMT
Subject: CN=06855935bb70c453e5cf7e51ab412d425949f79b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a7:ac:79:d4:60:30:b7:9b:42:40:c4:64:9b:
95:3c:71:69:5f:06:bd:99:e7:8a:c0:70:0f:72:ca:
d8:aa:c6:a4:bf:1b:8b:4f:f3:2d:1c:d3:71:f8:c3:
df:a0:e3:1d:e6:5f:03:09:45:10:eb:7b:3c:56:40:
3c:f8:65:4b:9c:e1:b7:f3:e5:f6:0b:71:ac:29:1c:
f6:5e:71:d7:95:8a:8d:19:ee:21:53:be:f1:00:c0:
2d:2b:ec:8e:66:65:55:bd:7b:18:ec:0f:b8:97:f1:
dc:04:47:73:21:c1:e5:00:38:c1:f4:f8:78:a0:13:
60:28:91:c0:d7:cd:f9:b9:7c:66:fe:45:e4:46:a5:
d1:0b:fc:a6:79:99:83:06:b4:6c:18:f5:7a:fc:c8:
68:b1:95:a9:ce:92:dc:6f:08:0f:43:ef:1f:ec:06:
cb:7f:33:69:b6:08:20:c9:97:f7:ec:ad:89:6d:dd:
14:ad:95:12:b6:de:0b:9a:02:96:de:c1:34:59:76:
56:62:56:bc:b5:bd:40:23:7e:cd:5a:1a:1b:a8:1a:
50:e1:60:e5:14:a7:cb:c6:d4:52:83:de:ff:3a:c1:
4d:4b:d1:82:c2:28:c0:37:9b:8c:df:ee:fe:bf:6d:
b2:2d:4b:a1:14:10:98:72:0f:f1:8a:8f:ce:ee:e5:
69:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:85:59:35:BB:70:C4:53:E5:CF:7E:51:AB:41:2D:42:59:49:F7:9B
X509v3 Authority Key Identifier:
keyid:0B:F4:CE:03:89:CF:93:E2:D5:7E:08:2F:1B:EC:61:DA:82:72:FF:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_TOA4nPk-LVfggvG-xh2oJy__E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:ca:09:61:d0:4a:1a:2e:e3:44:da:f8:2d:19:1e:f3:62:48:
e0:eb:7c:d6:59:06:a4:12:de:45:50:48:56:1e:38:4d:a6:14:
92:6d:0e:56:6a:b1:2f:5c:bf:dc:06:e5:9b:77:40:87:ec:82:
06:3b:cb:2a:f7:d3:f8:4d:25:ef:46:dc:dd:39:91:b8:f2:44:
4c:8d:7e:35:3a:53:14:8f:ff:ac:47:7d:0e:dd:4e:5a:2e:e3:
14:6a:67:fb:75:62:2b:70:f8:22:43:d4:5f:c9:56:99:95:d1:
fe:3c:f7:72:b9:89:76:c2:e7:10:04:3d:7b:e3:d7:15:ef:3b:
73:93:34:c3:dd:3c:65:0f:63:dc:e0:05:b2:82:61:6c:45:5d:
b4:4c:e3:84:14:3b:a8:59:02:01:e1:da:ba:93:81:08:67:0f:
ad:4a:0e:3b:ca:9f:cf:cf:4b:a8:ff:08:ab:79:c5:09:e9:c6:
82:3e:db:1d:53:19:5d:70:cb:80:92:d2:da:b1:63:d2:f4:fc:
d9:31:d6:d4:1b:9b:35:3f:e6:ec:44:4a:27:07:b0:e5:92:ed:
56:f7:4c:8d:49:f2:2e:39:0e:b7:7f:e0:af:16:13:b3:cd:fb:
f9:24:cb:a8:f1:d8:d9:55:c0:4b:70:ad:64:91:31:77:dd:ad:
6e:c3:b3:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:56:54 2026 by rpki-client