Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.mft
File: totCki04fFePpXaSSH8qGQaFibo.mft (raw, json)
Hash identifier: sTJAEKgvYbY4jNTt4XfcHLclxVyn8UWD+bJMfbh0Ngg=
Subject key identifier: 0B:B1:6D:33:B1:96:03:E4:CB:2D:1C:39:0A:B8:18:B6:A6:2D:3C:18
Authority key identifier: B6:8B:42:92:2D:38:7C:57:8F:A5:76:92:48:7F:2A:19:06:85:89:BA
Certificate issuer: /CN=b68b42922d387c578fa57692487f2a19068589ba
Certificate serial: 019D988653073D72E86CB477970AA1006F5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/totCki04fFePpXaSSH8qGQaFibo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.mft
Manifest number: 18C2
Signing time: Thu 16 Apr 2026 23:00:32 +0000
Manifest this update: Thu 16 Apr 2026 23:00:32 +0000
Manifest next update: Fri 17 Apr 2026 23:00:32 +0000
Files and hashes: 1: kTdybG-Kfglf-A6Co4UkfB2W_s4.roa (hash: CUsIkIUnZkWXcbfe+QGR3qcpsv5V6ygh7qnKWL+glCA=)
2: totCki04fFePpXaSSH8qGQaFibo.crl (hash: S9Aq6gXHf2wragKVGxRdUBYe+WXEZ+iSZdSVcVHiGmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.mft
rsync://rpki.ripe.net/repository/DEFAULT/totCki04fFePpXaSSH8qGQaFibo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:53:07:3d:72:e8:6c:b4:77:97:0a:a1:00:6f:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b68b42922d387c578fa57692487f2a19068589ba
Validity
Not Before: Apr 16 23:00:32 2026 GMT
Not After : Apr 17 23:00:32 2026 GMT
Subject: CN=0bb16d33b19603e4cb2d1c390ab818b6a62d3c18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c9:1d:14:73:23:b7:e0:d3:a7:87:87:a7:64:
c9:d7:e9:0e:93:f6:93:43:75:7e:f0:ef:03:7e:bc:
fb:ca:03:b2:ed:d5:8f:c0:37:d8:bf:bb:f5:c9:d6:
ce:f6:b9:dd:80:e7:ac:2b:1e:88:57:25:b4:50:fc:
86:9f:ea:57:55:1d:e0:2f:ee:2d:db:43:d4:06:02:
d9:47:a1:28:79:f9:ab:a4:fe:c6:ba:70:b1:d8:d5:
64:85:51:8d:47:ad:f2:3b:a5:81:59:93:63:bb:0b:
c3:05:83:42:b7:0c:63:f0:80:be:9b:20:8a:fd:cd:
20:a9:b7:1f:03:8d:4f:4d:33:29:8f:33:0a:91:ee:
85:dc:2a:b3:bc:ae:75:87:cf:6a:73:2e:1f:f3:15:
55:64:7e:90:60:71:c9:3c:61:a0:7d:d5:41:74:7f:
fd:44:1f:dd:85:1e:09:14:e4:73:09:ce:93:13:50:
b6:71:db:ff:3e:13:c1:9b:a9:13:6b:f1:25:b9:19:
3d:a4:a5:6c:76:bc:d3:ad:90:72:4a:14:03:6a:b3:
48:a1:3e:09:84:a9:b5:0a:13:f5:64:15:3d:5f:4d:
b7:25:db:0d:6c:d6:e8:df:b9:74:6e:ff:51:97:c2:
09:75:4a:00:5d:03:56:be:a7:78:ff:9b:7d:72:f5:
25:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:B1:6D:33:B1:96:03:E4:CB:2D:1C:39:0A:B8:18:B6:A6:2D:3C:18
X509v3 Authority Key Identifier:
keyid:B6:8B:42:92:2D:38:7C:57:8F:A5:76:92:48:7F:2A:19:06:85:89:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/totCki04fFePpXaSSH8qGQaFibo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:25:9d:3a:ee:00:e8:bb:25:56:dc:b6:73:75:95:c3:44:bc:
5e:6c:5a:63:66:9b:6e:b9:ab:65:82:37:a2:be:36:61:cb:0d:
79:d0:0e:f6:44:8d:e9:7a:56:a9:58:d5:a4:bf:5e:6b:44:40:
d4:68:6b:c1:db:21:a7:69:cd:99:96:49:e8:f4:08:13:75:e0:
93:f4:c2:b4:ae:ba:79:7d:04:04:36:89:65:43:dd:46:21:ed:
d9:a1:a8:9d:34:01:72:60:99:e6:e7:d3:fc:20:29:75:20:cb:
58:f3:53:9c:1c:fa:85:4a:60:f3:88:8d:5f:9a:43:7a:a7:07:
4e:16:15:62:11:4d:3a:71:75:90:dc:d6:72:fc:ae:20:75:7d:
03:89:39:f4:13:d3:bc:56:09:8d:47:80:6c:bf:8b:c1:fa:a3:
c2:17:76:07:a7:2d:d3:4f:5b:cc:8e:2e:88:bd:95:65:1a:1a:
f4:fa:56:51:13:39:d8:6c:24:18:93:b5:a4:f9:86:72:01:e5:
50:0d:0a:ce:5b:e7:3f:ed:ef:c5:92:a4:d0:17:5e:87:e1:08:
a9:d5:9b:fb:b8:df:c4:69:0b:4b:8f:ef:22:4c:41:4e:be:b2:
4c:69:5e:c7:41:87:b3:ab:e9:5f:c8:74:e0:f1:d5:f1:e5:7c:
5e:13:88:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:22:47 2026 by rpki-client