Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.mft
File: totCki04fFePpXaSSH8qGQaFibo.mft (raw, json)
Hash identifier: hOurz66GODWz1HUMD2OgMKWcHsEl5VGYPJiItjdrbAc=
Subject key identifier: 5B:76:5B:9B:10:3B:9A:1C:48:8B:8D:E6:F9:CB:F3:83:07:6A:86:1B
Authority key identifier: B6:8B:42:92:2D:38:7C:57:8F:A5:76:92:48:7F:2A:19:06:85:89:BA
Certificate issuer: /CN=b68b42922d387c578fa57692487f2a19068589ba
Certificate serial: 019CAAFD2C9AF295FD7E6B4F114FE53F45C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/totCki04fFePpXaSSH8qGQaFibo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 20:00:44 +0000
Manifest this update: Sun 01 Mar 2026 20:00:44 +0000
Manifest next update: Mon 02 Mar 2026 20:00:44 +0000
Files and hashes: 1: kTdybG-Kfglf-A6Co4UkfB2W_s4.roa (hash: CUsIkIUnZkWXcbfe+QGR3qcpsv5V6ygh7qnKWL+glCA=)
2: totCki04fFePpXaSSH8qGQaFibo.crl (hash: 2+GolVXTM5ofLvSP4UdgIG9cL7npaggdZcM9mHIb4Ro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.mft
rsync://rpki.ripe.net/repository/DEFAULT/totCki04fFePpXaSSH8qGQaFibo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:2c:9a:f2:95:fd:7e:6b:4f:11:4f:e5:3f:45:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b68b42922d387c578fa57692487f2a19068589ba
Validity
Not Before: Mar 1 20:00:44 2026 GMT
Not After : Mar 2 20:00:44 2026 GMT
Subject: CN=5b765b9b103b9a1c488b8de6f9cbf383076a861b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:87:be:8b:b3:b6:7c:07:26:2d:30:cf:04:c2:
29:b4:cc:21:ea:48:66:ef:96:d5:8f:4c:46:54:57:
6a:15:4c:76:82:b4:b4:21:0f:a1:30:d4:c2:20:8c:
73:9c:8b:18:b3:3b:da:f2:56:b8:7c:4f:5f:e7:3a:
a6:55:82:49:ca:05:f2:3f:8d:15:61:27:21:36:f8:
19:eb:d7:9c:f9:34:b9:3e:7f:2f:ca:ec:68:22:7f:
3b:31:0d:8d:58:fb:16:57:4e:38:54:9e:e4:73:10:
81:17:dd:8d:76:ba:5a:4d:7a:4d:5f:51:17:8d:74:
63:a1:91:91:4f:48:49:49:17:be:bb:22:0e:1a:58:
ba:39:f9:f6:06:1e:f5:28:8b:ab:0e:11:ae:de:44:
78:c2:3a:da:00:68:4c:6d:3d:4b:44:27:57:84:29:
93:d2:6c:70:8e:94:0b:2a:9c:4d:b0:b4:9d:48:39:
00:cf:7f:5c:b8:81:d8:f3:56:80:33:73:2a:57:00:
f0:df:55:8a:6d:38:02:ec:82:b6:59:63:a1:3d:59:
ce:c2:93:03:96:11:64:3c:ee:a1:51:72:4d:0d:3d:
e9:cd:f5:1b:4e:31:3e:12:60:e9:e5:7d:ad:bd:f4:
92:81:5d:74:d7:0b:d6:de:48:b2:fc:b9:72:28:2c:
e8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:76:5B:9B:10:3B:9A:1C:48:8B:8D:E6:F9:CB:F3:83:07:6A:86:1B
X509v3 Authority Key Identifier:
keyid:B6:8B:42:92:2D:38:7C:57:8F:A5:76:92:48:7F:2A:19:06:85:89:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/totCki04fFePpXaSSH8qGQaFibo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:69:78:15:2b:18:8c:0d:59:c1:29:40:7c:79:54:22:71:da:
05:13:e5:04:9d:9e:45:55:60:eb:39:7d:4e:67:66:7e:67:c2:
53:db:ab:7c:da:f2:c0:40:60:4e:e9:73:f2:e1:98:28:5e:2c:
73:32:59:c9:c0:24:97:70:23:33:81:28:b4:6b:47:be:44:74:
80:b5:66:6d:93:b4:1c:51:ae:10:bd:8b:f5:a0:07:66:19:7b:
6c:bd:23:7c:6d:b0:d8:fd:33:ff:62:c0:98:f9:c8:51:21:14:
2a:ca:77:f0:74:0a:65:27:fc:48:73:e9:fc:99:f7:b1:25:ef:
f8:43:b7:f4:40:1b:96:11:a3:64:96:5b:49:5e:88:65:6a:83:
e7:f3:f7:f2:fc:dc:9d:30:0a:2d:4e:c4:de:00:2e:67:50:8c:
a1:dd:11:06:9e:00:3d:81:20:bf:2e:5a:17:98:d7:b3:45:21:
46:97:2c:14:72:66:03:38:97:b3:59:9b:10:3a:9f:20:c4:4a:
9b:ff:db:94:59:08:2d:ab:35:c9:17:0c:34:c2:43:0a:a3:84:
59:b6:a3:ca:7d:df:38:59:7a:c1:80:9e:8e:87:51:ba:e9:79:
d8:e4:3d:64:bf:78:10:11:46:9a:6c:93:3b:6b:7e:3b:9b:c6:
39:bb:30:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyq/Sya8pX9fmtPEU/lP0XAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2OGI0MjkyMmQzODdjNTc4ZmE1NzY5MjQ4N2YyYTE5MDY4
NTg5YmEwHhcNMjYwMzAxMjAwMDQ0WhcNMjYwMzAyMjAwMDQ0WjAzMTEwLwYDVQQD
Eyg1Yjc2NWI5YjEwM2I5YTFjNDg4YjhkZTZmOWNiZjM4MzA3NmE4NjFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIe+i7O2fAcmLTDPBMIptMwh6khm
75bVj0xGVFdqFUx2grS0IQ+hMNTCIIxznIsYszva8la4fE9f5zqmVYJJygXyP40V
YSchNvgZ69ec+TS5Pn8vyuxoIn87MQ2NWPsWV044VJ7kcxCBF92NdrpaTXpNX1EX
jXRjoZGRT0hJSRe+uyIOGli6Ofn2Bh71KIurDhGu3kR4wjraAGhMbT1LRCdXhCmT
0mxwjpQLKpxNsLSdSDkAz39cuIHY81aAM3MqVwDw31WKbTgC7IK2WWOhPVnOwpMD
lhFkPO6hUXJNDT3pzfUbTjE+EmDp5X2tvfSSgV101wvW3kiy/LlyKCzoLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFt2W5sQO5ocSIuN5vnL84MHaoYbMB8GA1UdIwQY
MBaAFLaLQpItOHxXj6V2kkh/KhkGhYm6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdG90Q2tpMDRmRmVQcFhhU1NIOHFHUWFGaWJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8zMzYxOTgtM2U3Yi00NjE1LWJjZWEt
NGE1NDViMTE2ODgwLzEvdG90Q2tpMDRmRmVQcFhhU1NIOHFHUWFGaWJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS8zMzYxOTgtM2U3Yi00NjE1LWJjZWEtNGE1NDViMTE2ODgw
LzEvdG90Q2tpMDRmRmVQcFhhU1NIOHFHUWFGaWJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAGl4FSsY
jA1ZwSlAfHlUInHaBRPlBJ2eRVVg6zl9TmdmfmfCU9urfNrywEBgTulz8uGYKF4s
czJZycAkl3AjM4EotGtHvkR0gLVmbZO0HFGuEL2L9aAHZhl7bL0jfG2w2P0z/2LA
mPnIUSEUKsp38HQKZSf8SHPp/Jn3sSXv+EO39EAblhGjZJZbSV6IZWqD5/P38vzc
nTAKLU7E3gAuZ1CMod0RBp4APYEgvy5aF5jXs0UhRpcsFHJmAziXs1mbEDqfIMRK
m//blFkILas1yRcMNMJDCqOEWbajyn3fOFl6wYCejodRuul52OQ9ZL94EBFGmmyT
O2t+O5vGObswpw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:49:56 2026 by rpki-client