Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
File: tokpm8SVhKZFlAwd2H3wr8iqoP0.mft (raw, json)
Hash identifier: ajRwbk0n5QUwQorkYwj1FWzo+JKA5b9Q7+02NETzjNo=
Subject key identifier: 8C:81:E6:70:62:E9:47:4E:C5:5E:F2:FB:E5:C7:94:C8:9E:D5:9A:62
Authority key identifier: B6:89:29:9B:C4:95:84:A6:45:94:0C:1D:D8:7D:F0:AF:C8:AA:A0:FD
Certificate issuer: /CN=b689299bc49584a645940c1dd87df0afc8aaa0fd
Certificate serial: 019CAC0FC3A0314645B093F9EE21CDCBCE0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
Manifest number: 13DA
Signing time: Mon 02 Mar 2026 01:00:40 +0000
Manifest this update: Mon 02 Mar 2026 01:00:40 +0000
Manifest next update: Tue 03 Mar 2026 01:00:40 +0000
Files and hashes: 1: HJJWsiDjzBz_irl7pQIQoPI3r70.roa (hash: MiTsGuoftnJ+n/jpkv9HxUxKGLPjJtM51AFiqQ8gQdM=)
2: jgYJ-Ic6G5lRmnuwLRqrvftwyxQ.roa (hash: YK3pnpembYJVK3tFHfQ8eIavXzWvYt02q/rGuHr8gGU=)
3: ozI9FqQeFMr6a9EQEWwunUSWNyo.roa (hash: JhSkAeJT7kDK1ZM3fmXCcAHWjB5nY9Twt+Ukh1Zc4vU=)
4: tokpm8SVhKZFlAwd2H3wr8iqoP0.crl (hash: 7R08D30/h8QLgAKvqipyP8JvvAfM2sBvbPuM9O/e9UM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:c3:a0:31:46:45:b0:93:f9:ee:21:cd:cb:ce:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b689299bc49584a645940c1dd87df0afc8aaa0fd
Validity
Not Before: Mar 2 01:00:40 2026 GMT
Not After : Mar 3 01:00:40 2026 GMT
Subject: CN=8c81e67062e9474ec55ef2fbe5c794c89ed59a62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:36:3b:a5:18:2f:0e:82:67:56:58:d3:c7:07:
c3:81:57:10:75:a1:88:38:88:b6:29:08:fd:23:5d:
54:58:b0:29:3b:fb:7d:b8:61:3f:0a:01:fa:b1:81:
91:de:7d:ec:a6:da:0c:fd:2a:84:da:4b:e1:9a:38:
9f:ce:e9:7c:4f:e7:a2:10:bb:27:51:10:a7:bc:34:
e3:19:c8:9d:a8:ba:7c:d0:0d:6f:48:a5:d6:da:fd:
28:db:42:f8:7b:1a:75:28:66:80:3e:fe:2d:25:f5:
ca:dd:5d:5f:a9:b7:7a:88:72:a0:98:8f:35:4e:f1:
4b:73:30:43:d2:4d:00:b5:ee:b5:a4:74:ac:3f:cf:
4a:2a:01:2b:e2:d3:ff:12:a0:77:aa:df:c6:c2:1b:
b8:25:c2:a0:ef:97:d5:42:f0:d3:ce:46:a9:d6:0c:
59:ea:1f:9e:10:b3:96:9e:9d:cd:4a:91:10:b2:09:
24:f9:ab:58:07:0d:0c:47:8f:c0:f7:97:b4:34:93:
23:71:0a:6c:ea:1f:2c:2e:27:92:b2:a8:2b:53:7f:
d8:8a:a4:2e:9b:67:6e:a8:96:0b:9d:b6:3a:c3:ee:
f7:67:2d:df:6e:36:1d:80:b9:b1:ed:6f:06:80:7c:
4a:b5:f6:23:2d:44:be:50:dd:1e:18:d7:42:a1:d5:
4d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:81:E6:70:62:E9:47:4E:C5:5E:F2:FB:E5:C7:94:C8:9E:D5:9A:62
X509v3 Authority Key Identifier:
keyid:B6:89:29:9B:C4:95:84:A6:45:94:0C:1D:D8:7D:F0:AF:C8:AA:A0:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:df:9f:13:82:12:47:83:aa:cc:ae:90:e9:9f:35:80:7c:a3:
dc:6e:cd:af:66:d7:43:89:9a:2b:c4:eb:36:a3:da:11:c8:5e:
9f:e3:fd:c5:cb:17:7f:83:1e:59:95:66:5d:28:33:05:c9:2f:
c7:aa:18:d2:8a:21:67:1c:0d:36:56:fb:7c:79:19:a8:ba:0e:
c1:4e:43:0b:b1:24:2b:ea:ac:d6:25:93:0a:7a:99:ee:e7:94:
1d:c1:8c:05:2a:07:ef:07:ef:68:e4:cb:15:fc:66:17:2d:24:
8f:26:b1:db:b3:5f:ec:2c:02:31:91:28:7c:5f:b0:4e:d3:bc:
fa:3c:2b:f2:3c:ac:dc:c3:91:0d:a7:bf:c7:d6:1f:79:03:9d:
32:a6:dc:47:56:d1:54:90:c4:f9:8b:74:95:e8:12:0a:09:6a:
62:d5:9d:1e:ce:8f:4b:5f:ff:a1:db:41:a5:cf:d8:8c:44:da:
38:1f:69:12:e0:d2:72:a0:dc:5d:b3:43:9b:a4:2a:d3:70:1a:
69:54:42:bf:03:81:fe:01:97:b5:0f:9b:e1:bf:c4:24:21:24:
50:12:28:4c:ca:1d:3d:9a:96:2d:a7:03:fb:97:86:a8:d1:dd:
f1:98:22:b8:f1:88:76:df:df:fb:be:9f:7a:be:d2:1b:12:97:
c1:b3:00:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:21:17 2026 by rpki-client