Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
File: tokpm8SVhKZFlAwd2H3wr8iqoP0.mft (raw, json)
Hash identifier: YRUYsloUXr+BY0Wehk0GEnlpO+/4S5ReNU2d8Ne8gJs=
Subject key identifier: D9:80:2F:10:2A:68:3A:63:6F:C8:E4:D9:CA:A4:77:2D:BA:A3:15:77
Authority key identifier: B6:89:29:9B:C4:95:84:A6:45:94:0C:1D:D8:7D:F0:AF:C8:AA:A0:FD
Certificate issuer: /CN=b689299bc49584a645940c1dd87df0afc8aaa0fd
Certificate serial: 019EC11213300D897B2DD381A5D4E2E80025
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
Manifest number: 14EE
Signing time: Sat 13 Jun 2026 13:00:47 +0000
Manifest this update: Sat 13 Jun 2026 13:00:47 +0000
Manifest next update: Sun 14 Jun 2026 13:00:47 +0000
Files and hashes: 1: HJJWsiDjzBz_irl7pQIQoPI3r70.roa (hash: MiTsGuoftnJ+n/jpkv9HxUxKGLPjJtM51AFiqQ8gQdM=)
2: jgYJ-Ic6G5lRmnuwLRqrvftwyxQ.roa (hash: YK3pnpembYJVK3tFHfQ8eIavXzWvYt02q/rGuHr8gGU=)
3: ozI9FqQeFMr6a9EQEWwunUSWNyo.roa (hash: JhSkAeJT7kDK1ZM3fmXCcAHWjB5nY9Twt+Ukh1Zc4vU=)
4: tokpm8SVhKZFlAwd2H3wr8iqoP0.crl (hash: Lfkw/fFSxZ8ksR4ZsAHEYq/k6fPOAyn6RYQCg9rgpHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:12:13:30:0d:89:7b:2d:d3:81:a5:d4:e2:e8:00:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b689299bc49584a645940c1dd87df0afc8aaa0fd
Validity
Not Before: Jun 13 13:00:47 2026 GMT
Not After : Jun 14 13:00:47 2026 GMT
Subject: CN=d9802f102a683a636fc8e4d9caa4772dbaa31577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:11:3c:e0:ff:6f:16:1c:7d:58:68:91:ab:c8:
39:bd:2b:6b:33:1f:3e:e6:47:4b:07:6d:1e:94:ae:
b2:3f:20:a2:85:a4:8e:dc:14:a4:da:b0:f8:56:e0:
76:98:b9:80:4f:a4:8e:fb:84:42:dc:cb:94:2b:4d:
9a:6b:4f:46:cd:fd:ab:14:6c:c1:41:d0:b4:c3:c4:
5e:99:24:ff:cd:8a:17:02:b7:ed:6b:62:36:f6:d7:
15:99:b3:5b:a2:7f:c4:e8:72:f8:fe:b5:c2:8a:cd:
1e:d2:e5:ef:a2:f3:26:2f:27:c2:80:29:ad:66:f0:
e1:00:69:8e:2c:aa:7b:86:5a:6c:a0:52:47:99:ec:
85:bb:c0:c2:00:bf:01:03:56:8a:3a:75:a2:bd:b9:
a0:00:df:1e:d9:f3:df:19:fa:e8:34:ba:ce:ae:80:
bb:91:0f:90:2e:ef:3c:21:e9:3e:85:ab:e2:b7:b8:
d9:1f:fb:dd:f1:6f:b9:af:7d:5e:f6:7d:69:45:ae:
be:f0:57:08:8e:4d:a7:aa:9e:9f:cf:bc:b5:1f:f1:
b1:b9:2a:f3:0e:f2:9d:30:d6:1b:3d:40:7b:3d:45:
85:4a:59:ed:87:cf:c3:77:1c:56:b4:07:32:56:e7:
ab:c3:6c:b1:24:23:85:e3:89:9b:2a:c6:55:e8:d1:
45:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:80:2F:10:2A:68:3A:63:6F:C8:E4:D9:CA:A4:77:2D:BA:A3:15:77
X509v3 Authority Key Identifier:
keyid:B6:89:29:9B:C4:95:84:A6:45:94:0C:1D:D8:7D:F0:AF:C8:AA:A0:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:34:b4:ba:46:27:41:65:b9:41:66:e5:42:d2:ca:f2:57:99:
9a:01:95:b9:e6:7c:e9:09:e5:c7:2b:17:37:36:4f:76:3d:98:
73:3e:49:d3:f7:6c:5c:36:4d:ec:4e:2c:2c:55:57:a9:c8:0a:
0d:bf:96:5d:25:f9:a5:3e:46:ba:13:74:c5:7c:8b:9d:0e:80:
45:23:85:41:47:0a:a8:39:80:0c:39:27:4e:65:e6:bb:6a:8c:
c8:d5:34:32:3a:be:bc:d8:cf:3c:af:5a:9f:7b:d4:95:8d:2d:
06:31:a3:00:56:4b:91:56:df:38:67:23:8a:b0:77:bc:c6:8f:
c5:4b:8e:57:de:4c:57:91:ef:eb:74:59:24:42:b6:62:14:d6:
fd:61:b2:4c:5b:40:e1:2a:e7:0b:c4:d4:e4:43:b7:cd:f9:43:
69:8f:e3:7f:f7:18:9b:10:97:19:4a:65:5f:b6:55:a0:c1:f7:
47:3d:84:ad:55:6d:1c:90:f6:34:84:9d:0a:90:cf:73:d1:25:
a0:a5:a0:2a:d4:10:83:5a:23:5b:ab:c4:f6:75:3e:d2:0c:67:
5c:86:41:d6:cc:13:b6:ac:38:13:23:d4:e5:cd:23:96:6d:a6:
66:33:3e:1e:cf:f8:9d:55:0e:fd:ec:79:86:98:95:06:be:08:
ee:1f:07:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7BEhMwDYl7LdOBpdTi6AAlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2ODkyOTliYzQ5NTg0YTY0NTk0MGMxZGQ4N2RmMGFmYzhh
YWEwZmQwHhcNMjYwNjEzMTMwMDQ3WhcNMjYwNjE0MTMwMDQ3WjAzMTEwLwYDVQQD
EyhkOTgwMmYxMDJhNjgzYTYzNmZjOGU0ZDljYWE0NzcyZGJhYTMxNTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7BE84P9vFhx9WGiRq8g5vStrMx8+
5kdLB20elK6yPyCihaSO3BSk2rD4VuB2mLmAT6SO+4RC3MuUK02aa09Gzf2rFGzB
QdC0w8RemST/zYoXArfta2I29tcVmbNbon/E6HL4/rXCis0e0uXvovMmLyfCgCmt
ZvDhAGmOLKp7hlpsoFJHmeyFu8DCAL8BA1aKOnWivbmgAN8e2fPfGfroNLrOroC7
kQ+QLu88Iek+havit7jZH/vd8W+5r31e9n1pRa6+8FcIjk2nqp6fz7y1H/GxuSrz
DvKdMNYbPUB7PUWFSlnth8/DdxxWtAcyVuerw2yxJCOF44mbKsZV6NFFVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNmALxAqaDpjb8jk2cqkdy26oxV3MB8GA1UdIwQY
MBaAFLaJKZvElYSmRZQMHdh98K/IqqD9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdG9rcG04U1ZoS1pGbEF3ZDJIM3dyOGlxb1AwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy83Y2E2MWEtY2UzZC00YmFjLTkxMTAt
YzBmM2JhZDk5YTQwLzEvdG9rcG04U1ZoS1pGbEF3ZDJIM3dyOGlxb1AwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy83Y2E2MWEtY2UzZC00YmFjLTkxMTAtYzBmM2JhZDk5YTQw
LzEvdG9rcG04U1ZoS1pGbEF3ZDJIM3dyOGlxb1AwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKDS0ukYn
QWW5QWblQtLK8leZmgGVueZ86QnlxysXNzZPdj2Ycz5J0/dsXDZN7E4sLFVXqcgK
Db+WXSX5pT5GuhN0xXyLnQ6ARSOFQUcKqDmADDknTmXmu2qMyNU0Mjq+vNjPPK9a
n3vUlY0tBjGjAFZLkVbfOGcjirB3vMaPxUuOV95MV5Hv63RZJEK2YhTW/WGyTFtA
4SrnC8TU5EO3zflDaY/jf/cYmxCXGUplX7ZVoMH3Rz2ErVVtHJD2NISdCpDPc9El
oKWgKtQQg1ojW6vE9nU+0gxnXIZB1swTtqw4EyPU5c0jlm2mZjM+Hs/4nVUO/ex5
hpiVBr4I7h8HHg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 18:42:31 2026 by rpki-client