Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
File: tokpm8SVhKZFlAwd2H3wr8iqoP0.mft (raw, json)
Hash identifier: kuyiOXvT2EQJH4OBZMkbJlapzsSQlsxQjwMCthXR9mU=
Subject key identifier: D4:E5:C1:10:79:CE:92:6A:6D:AD:BA:36:17:4C:E4:9E:2C:1C:7D:42
Authority key identifier: B6:89:29:9B:C4:95:84:A6:45:94:0C:1D:D8:7D:F0:AF:C8:AA:A0:FD
Certificate issuer: /CN=b689299bc49584a645940c1dd87df0afc8aaa0fd
Certificate serial: 019CAA2180FAA2AE0CF3672063210CB43619
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
Manifest number: 13D9
Signing time: Sun 01 Mar 2026 16:00:48 +0000
Manifest this update: Sun 01 Mar 2026 16:00:48 +0000
Manifest next update: Mon 02 Mar 2026 16:00:48 +0000
Files and hashes: 1: HJJWsiDjzBz_irl7pQIQoPI3r70.roa (hash: MiTsGuoftnJ+n/jpkv9HxUxKGLPjJtM51AFiqQ8gQdM=)
2: jgYJ-Ic6G5lRmnuwLRqrvftwyxQ.roa (hash: YK3pnpembYJVK3tFHfQ8eIavXzWvYt02q/rGuHr8gGU=)
3: ozI9FqQeFMr6a9EQEWwunUSWNyo.roa (hash: JhSkAeJT7kDK1ZM3fmXCcAHWjB5nY9Twt+Ukh1Zc4vU=)
4: tokpm8SVhKZFlAwd2H3wr8iqoP0.crl (hash: Ap88szzI+/ffQXrSiNgApNOeVi7UZc3RPvldTfiu/IQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:80:fa:a2:ae:0c:f3:67:20:63:21:0c:b4:36:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b689299bc49584a645940c1dd87df0afc8aaa0fd
Validity
Not Before: Mar 1 16:00:48 2026 GMT
Not After : Mar 2 16:00:48 2026 GMT
Subject: CN=d4e5c11079ce926a6dadba36174ce49e2c1c7d42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ed:17:6c:3d:e3:28:1c:97:13:0a:bf:38:2b:
45:af:08:c5:a9:2b:e1:49:32:1f:88:90:20:19:4d:
36:5b:b0:91:0c:25:53:b8:36:7b:3d:69:37:80:33:
61:c0:b3:8b:38:ad:d5:a8:50:4d:a7:b3:a8:7c:72:
63:ef:a1:ea:0b:4c:c1:4e:39:64:50:3c:74:db:a7:
70:e8:ac:02:99:20:84:ca:15:26:3b:e9:71:40:9e:
97:93:be:b4:2c:9e:98:d9:1b:61:73:04:a0:1d:ed:
09:fa:65:7d:5c:37:8c:c5:59:b7:fe:a4:ed:cf:c6:
03:ba:fa:73:c9:1e:ca:75:a5:fc:f5:3e:cc:4d:cb:
36:62:1d:3c:20:cb:d1:3f:4b:72:cd:83:51:0e:7d:
54:57:ee:4d:bc:21:c5:b3:3b:22:2c:bf:c0:50:3a:
cb:54:ed:5e:73:9c:50:33:67:3c:aa:d2:ac:9a:cb:
ab:e7:d2:f9:f5:50:77:47:f8:2f:45:18:e5:54:e8:
3d:06:e4:f2:08:1a:bf:d8:18:2a:93:f4:6e:0d:12:
be:bd:44:4d:6e:dc:61:69:e4:1a:79:22:6a:b0:99:
4b:1c:82:8f:30:d4:b9:1b:f5:68:14:27:a9:86:00:
13:2d:af:fb:c1:c6:9a:2e:61:4b:09:2f:fd:01:38:
76:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:E5:C1:10:79:CE:92:6A:6D:AD:BA:36:17:4C:E4:9E:2C:1C:7D:42
X509v3 Authority Key Identifier:
keyid:B6:89:29:9B:C4:95:84:A6:45:94:0C:1D:D8:7D:F0:AF:C8:AA:A0:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:42:19:cb:31:7e:e4:d7:4d:83:b6:8b:65:e2:fd:38:36:db:
5a:7c:eb:ec:b9:09:43:76:47:5e:03:9f:34:5f:d8:8b:87:b3:
66:92:57:1f:f3:8d:ab:e2:ef:a0:23:2b:66:ce:97:dd:0c:a9:
ea:b2:73:69:c0:b8:31:8a:22:64:b4:ed:82:7d:01:5c:78:5d:
20:26:82:ac:2c:d9:73:6d:84:e9:62:17:e2:db:99:1d:bb:f1:
dd:bc:53:35:b8:89:0f:60:62:37:fc:ca:31:b3:4f:1a:5f:0d:
ee:90:ac:a2:72:27:ee:aa:38:c7:d6:f9:43:b0:fe:5a:4e:83:
ab:28:cc:9e:dd:b4:ea:00:c1:6a:68:d4:3f:83:a2:10:18:55:
4b:10:19:88:49:03:04:4d:ee:c3:f3:6b:2f:a1:f9:48:55:d8:
52:2a:aa:38:e0:6b:c0:0f:02:dc:db:71:a9:f1:d6:18:2f:27:
3a:97:3d:2a:b8:d6:cb:7a:32:ad:84:02:fc:85:ba:44:4e:14:
81:6c:e9:be:71:3e:a0:c2:fc:63:7b:aa:26:ab:41:b1:f3:6e:
16:c1:4a:8a:53:ed:02:09:f3:17:6c:20:19:39:ee:50:7e:2a:
bb:bc:63:18:a7:4d:9b:63:96:13:1f:9a:37:f4:cd:10:2d:76:
71:1f:c1:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:51:40 2026 by rpki-client