Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.mft
File: C_TOA4nPk-LVfggvG-xh2oJy__E.mft (raw, json)
Hash identifier: qGHcoz70x8sUVRoMQamyvn7XEdw3UVGSxt7YXG7KCKE=
Subject key identifier: C5:21:0E:E0:8C:97:9B:5D:1C:24:78:39:49:E2:1E:AF:34:5A:C4:25
Authority key identifier: 0B:F4:CE:03:89:CF:93:E2:D5:7E:08:2F:1B:EC:61:DA:82:72:FF:F1
Certificate issuer: /CN=0bf4ce0389cf93e2d57e082f1bec61da8272fff1
Certificate serial: 019CAA586F61BC9F35958BB649A66DCB6F06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_TOA4nPk-LVfggvG-xh2oJy__E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.mft
Manifest number: 1113
Signing time: Sun 01 Mar 2026 17:00:48 +0000
Manifest this update: Sun 01 Mar 2026 17:00:48 +0000
Manifest next update: Mon 02 Mar 2026 17:00:48 +0000
Files and hashes: 1: C_TOA4nPk-LVfggvG-xh2oJy__E.crl (hash: 4fiFZjZDgEWwgqTRVrNI9zTtCgWQV50VXxn7UHMTqDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_TOA4nPk-LVfggvG-xh2oJy__E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:6f:61:bc:9f:35:95:8b:b6:49:a6:6d:cb:6f:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bf4ce0389cf93e2d57e082f1bec61da8272fff1
Validity
Not Before: Mar 1 17:00:48 2026 GMT
Not After : Mar 2 17:00:48 2026 GMT
Subject: CN=c5210ee08c979b5d1c24783949e21eaf345ac425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:44:36:0e:67:08:bd:7e:6f:30:e1:ea:b5:3a:
f8:ab:11:db:6a:76:bd:9e:ab:c9:1a:d6:c8:83:76:
4b:38:52:6d:d4:e7:64:1e:40:ef:38:23:40:42:26:
77:d8:96:08:fd:45:65:21:17:f4:8c:2c:a4:e6:ab:
66:a9:64:55:f2:c1:5e:a1:51:03:a8:f4:ae:9c:87:
84:3a:f6:de:6f:9e:88:1c:e4:5a:4b:b3:10:11:5b:
b2:0f:78:29:33:46:e5:2e:94:16:b0:82:be:e0:41:
55:fe:21:50:53:93:a0:6e:80:5a:af:ae:08:39:02:
ec:f5:01:a8:89:0f:8b:ec:75:1b:02:1b:93:ae:7a:
26:95:df:a8:61:88:45:74:f3:81:57:6b:5f:43:7f:
02:53:8c:cb:2d:2a:5b:5f:7d:85:c9:3d:a9:bf:39:
ee:ba:9d:bf:74:55:ac:13:75:a5:88:dc:7c:6c:1d:
41:5f:cd:2e:2d:6b:09:8d:50:85:6c:bc:1b:f4:5e:
dc:98:4a:a1:f0:73:c2:8b:27:dd:e5:eb:46:2a:d3:
21:4a:05:26:ae:6a:1c:1b:2f:58:0f:bc:51:1a:e0:
87:f3:60:dd:28:7a:ab:95:5d:06:fe:03:f6:ce:28:
db:96:40:a7:75:ab:be:7d:1f:11:41:bd:2a:11:e7:
39:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:21:0E:E0:8C:97:9B:5D:1C:24:78:39:49:E2:1E:AF:34:5A:C4:25
X509v3 Authority Key Identifier:
keyid:0B:F4:CE:03:89:CF:93:E2:D5:7E:08:2F:1B:EC:61:DA:82:72:FF:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_TOA4nPk-LVfggvG-xh2oJy__E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:84:1c:0c:61:74:0a:eb:80:d8:b9:a5:35:8e:13:94:90:04:
19:d4:b7:4d:da:d0:bb:26:e7:85:01:c5:fd:e7:42:e1:0e:41:
38:21:17:2c:41:1a:4a:c0:fc:72:df:42:2f:15:ea:04:2b:4e:
c9:e7:3d:ac:b3:68:dc:ac:85:de:74:3b:a2:64:f9:e7:76:e0:
08:a6:e3:33:f8:5e:20:1a:1b:1d:65:87:16:8d:cb:85:98:a0:
da:0d:de:66:f2:ef:67:f6:95:5b:84:83:2e:88:ab:7e:a3:d1:
a3:bc:76:1f:60:b7:c3:3f:5e:3f:49:84:94:e2:99:15:e5:2f:
67:2c:83:bc:cc:0d:e3:71:8e:b7:2f:df:b1:e3:22:68:0c:1b:
3b:e5:62:d8:8e:0c:c9:7b:56:dd:39:00:bd:d2:9a:31:db:17:
16:11:02:16:5a:5a:f1:f9:0e:4c:c4:87:23:16:2b:2d:cd:d6:
aa:66:87:de:29:c6:c6:86:ee:6f:c8:c3:41:42:e8:73:99:8c:
b6:70:4c:2c:fd:e7:c1:64:4b:11:0c:81:d5:b3:07:05:1b:2e:
a3:2e:03:6d:95:11:15:b2:4f:28:5d:26:c5:6a:41:2d:2e:ca:
d7:5f:c1:21:78:83:19:f8:40:1b:03:a3:c2:e4:74:ac:73:e7:
aa:a2:a8:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:04:56 2026 by rpki-client