Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/1e63a3-b306-413a-adf4-d3f265ad514f/1/toF3Ytn8jxGwHPUjS25DHPvsG80.mft
File: toF3Ytn8jxGwHPUjS25DHPvsG80.mft (raw, json)
Hash identifier: DTTpE/OYnDn6BR+iMjXy7idAwm0TgzShSSe3xLhOYyY=
Subject key identifier: FE:08:B9:43:07:8C:45:B9:54:3A:75:53:8C:0A:9D:29:A3:BE:64:9C
Authority key identifier: B6:81:77:62:D9:FC:8F:11:B0:1C:F5:23:4B:6E:43:1C:FB:EC:1B:CD
Certificate issuer: /CN=b6817762d9fc8f11b01cf5234b6e431cfbec1bcd
Certificate serial: 019CAAC6F66DA6A69D8AC85BE46C3CCC1CDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toF3Ytn8jxGwHPUjS25DHPvsG80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/1e63a3-b306-413a-adf4-d3f265ad514f/1/toF3Ytn8jxGwHPUjS25DHPvsG80.mft
Manifest number: 0BA6
Signing time: Sun 01 Mar 2026 19:01:31 +0000
Manifest this update: Sun 01 Mar 2026 19:01:31 +0000
Manifest next update: Mon 02 Mar 2026 19:01:31 +0000
Files and hashes: 1: TCoBlMxDiguWCq2X4av9S4gQXEQ.roa (hash: 6msXgBjxx6Yi7xW5PUuzbdt4jO41s2SyXCfLVxtofm0=)
2: toF3Ytn8jxGwHPUjS25DHPvsG80.crl (hash: T9Ebvi6Xs/5cmgij9r4U5YwSR+eHWK+LUVR06fm1d6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/1e63a3-b306-413a-adf4-d3f265ad514f/1/toF3Ytn8jxGwHPUjS25DHPvsG80.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/1e63a3-b306-413a-adf4-d3f265ad514f/1/toF3Ytn8jxGwHPUjS25DHPvsG80.mft
rsync://rpki.ripe.net/repository/DEFAULT/toF3Ytn8jxGwHPUjS25DHPvsG80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:f6:6d:a6:a6:9d:8a:c8:5b:e4:6c:3c:cc:1c:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6817762d9fc8f11b01cf5234b6e431cfbec1bcd
Validity
Not Before: Mar 1 19:01:31 2026 GMT
Not After : Mar 2 19:01:31 2026 GMT
Subject: CN=fe08b943078c45b9543a75538c0a9d29a3be649c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:89:49:46:5a:fe:e4:f1:b4:83:ab:1b:63:2a:
d9:c1:a4:4f:a1:79:70:fd:61:e1:e5:f0:80:46:f0:
7d:31:b3:9f:e4:89:87:4b:15:8e:58:67:08:94:e3:
e2:1c:1c:61:61:f3:84:1c:9f:9c:4a:64:91:7c:b5:
1c:df:e6:59:0f:f7:1a:c0:b2:d0:b9:2f:21:0f:e3:
0a:8c:7c:3f:22:13:60:dc:b0:f8:62:3e:96:1b:8f:
91:80:58:ec:ee:fe:f2:d6:12:41:6a:ff:47:fa:ed:
b0:95:9d:b4:72:12:78:95:cd:19:41:a7:d1:08:75:
1f:ce:f4:d4:70:de:52:e2:70:22:30:4e:b6:82:f5:
32:7a:ca:b4:c1:b7:fb:bc:22:c7:10:6f:68:85:2c:
28:3a:d6:4f:9b:de:70:9d:29:a8:c8:ce:c5:a6:85:
11:4a:f0:c6:25:55:61:11:6b:28:dd:77:79:85:68:
47:ed:6a:ab:d0:29:9c:23:cf:1e:cb:5a:c7:78:ab:
39:9e:74:c1:9f:1d:b4:c7:46:8e:38:8e:0e:30:7a:
cf:b5:57:87:ea:2c:e8:67:c6:e1:73:31:0f:d8:d2:
6a:43:41:2e:d7:74:f4:14:c0:22:91:fe:38:42:a0:
6d:4f:74:48:dc:57:3a:a2:ed:f0:69:15:aa:90:3e:
35:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:08:B9:43:07:8C:45:B9:54:3A:75:53:8C:0A:9D:29:A3:BE:64:9C
X509v3 Authority Key Identifier:
keyid:B6:81:77:62:D9:FC:8F:11:B0:1C:F5:23:4B:6E:43:1C:FB:EC:1B:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toF3Ytn8jxGwHPUjS25DHPvsG80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1e63a3-b306-413a-adf4-d3f265ad514f/1/toF3Ytn8jxGwHPUjS25DHPvsG80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1e63a3-b306-413a-adf4-d3f265ad514f/1/toF3Ytn8jxGwHPUjS25DHPvsG80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:7d:c5:73:24:5e:37:67:3f:ff:23:db:25:ce:4b:13:88:e2:
09:92:6d:18:23:7b:46:5c:5d:21:f2:c8:60:71:4c:ff:b3:1f:
40:1d:81:1a:63:35:9b:1a:08:29:f1:d6:a6:39:72:95:60:94:
0b:e3:6f:8a:b3:35:d6:aa:a3:06:d9:ed:6b:91:c9:b9:e8:b0:
ef:06:d3:1d:2b:da:a5:2a:c8:52:a3:63:19:f9:af:4d:89:62:
07:0d:b5:8a:b2:62:6e:23:ec:cb:fe:79:27:6e:af:bb:7c:f0:
a9:aa:70:3c:50:61:78:ae:06:b7:3a:00:4e:28:0d:01:85:bf:
15:8d:28:01:d1:15:36:44:4e:1d:89:03:aa:a5:b0:c8:1d:18:
76:44:52:4d:89:30:c4:c5:dd:3c:a4:84:bb:72:77:a2:9c:bd:
be:15:af:79:ca:82:19:f3:87:de:60:0d:b0:7d:8c:96:51:7c:
8c:72:20:b3:90:d4:ef:b1:51:39:2a:39:23:f9:32:bf:72:96:
9e:bf:33:ac:86:aa:6a:01:77:0e:74:28:6d:f7:be:11:b6:03:
a3:18:b6:d9:99:af:2b:97:77:2c:0f:c0:8a:0f:25:f7:88:d1:
fb:5f:a3:b3:ff:18:a0:3c:18:4b:ba:c5:66:31:8a:84:f8:e0:
03:01:ea:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxvZtpqadishb5Gw8zBzdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2ODE3NzYyZDlmYzhmMTFiMDFjZjUyMzRiNmU0MzFjZmJl
YzFiY2QwHhcNMjYwMzAxMTkwMTMxWhcNMjYwMzAyMTkwMTMxWjAzMTEwLwYDVQQD
EyhmZTA4Yjk0MzA3OGM0NWI5NTQzYTc1NTM4YzBhOWQyOWEzYmU2NDljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1olJRlr+5PG0g6sbYyrZwaRPoXlw
/WHh5fCARvB9MbOf5ImHSxWOWGcIlOPiHBxhYfOEHJ+cSmSRfLUc3+ZZD/cawLLQ
uS8hD+MKjHw/IhNg3LD4Yj6WG4+RgFjs7v7y1hJBav9H+u2wlZ20chJ4lc0ZQafR
CHUfzvTUcN5S4nAiME62gvUyesq0wbf7vCLHEG9ohSwoOtZPm95wnSmoyM7FpoUR
SvDGJVVhEWso3Xd5hWhH7Wqr0CmcI88ey1rHeKs5nnTBnx20x0aOOI4OMHrPtVeH
6izoZ8bhczEP2NJqQ0Eu13T0FMAikf44QqBtT3RI3Fc6ou3waRWqkD41JQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP4IuUMHjEW5VDp1U4wKnSmjvmScMB8GA1UdIwQY
MBaAFLaBd2LZ/I8RsBz1I0tuQxz77BvNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdG9GM1l0bjhqeEd3SFBValMyNURIUHZzRzgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8xZTYzYTMtYjMwNi00MTNhLWFkZjQt
ZDNmMjY1YWQ1MTRmLzEvdG9GM1l0bjhqeEd3SFBValMyNURIUHZzRzgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy8xZTYzYTMtYjMwNi00MTNhLWFkZjQtZDNmMjY1YWQ1MTRm
LzEvdG9GM1l0bjhqeEd3SFBValMyNURIUHZzRzgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJn3FcyRe
N2c//yPbJc5LE4jiCZJtGCN7RlxdIfLIYHFM/7MfQB2BGmM1mxoIKfHWpjlylWCU
C+NvirM11qqjBtnta5HJueiw7wbTHSvapSrIUqNjGfmvTYliBw21irJibiPsy/55
J26vu3zwqapwPFBheK4GtzoATigNAYW/FY0oAdEVNkROHYkDqqWwyB0YdkRSTYkw
xMXdPKSEu3J3opy9vhWvecqCGfOH3mANsH2MllF8jHIgs5DU77FROSo5I/kyv3KW
nr8zrIaqagF3DnQobfe+EbYDoxi22ZmvK5d3LA/Aig8l94jR+1+js/8YoDwYS7rF
ZjGKhPjgAwHqng==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:56:10 2026 by rpki-client