Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
File: tokpm8SVhKZFlAwd2H3wr8iqoP0.mft (raw, json)
Hash identifier: YXa+4iva5SLluZjPwWg+v4uXbBYb2KmXu1vFV+7egQc=
Subject key identifier: 7E:CD:2C:49:F0:10:47:FB:DF:61:B7:5D:3A:3F:CF:A2:09:38:44:DC
Authority key identifier: B6:89:29:9B:C4:95:84:A6:45:94:0C:1D:D8:7D:F0:AF:C8:AA:A0:FD
Certificate issuer: /CN=b689299bc49584a645940c1dd87df0afc8aaa0fd
Certificate serial: 019FACACA2617A53018C69104D835F651E61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
Manifest number: 1568
Signing time: Wed 29 Jul 2026 07:00:22 +0000
Manifest this update: Wed 29 Jul 2026 07:00:22 +0000
Manifest next update: Thu 30 Jul 2026 07:00:22 +0000
Files and hashes: 1: HJJWsiDjzBz_irl7pQIQoPI3r70.roa (hash: MiTsGuoftnJ+n/jpkv9HxUxKGLPjJtM51AFiqQ8gQdM=)
2: jgYJ-Ic6G5lRmnuwLRqrvftwyxQ.roa (hash: YK3pnpembYJVK3tFHfQ8eIavXzWvYt02q/rGuHr8gGU=)
3: ozI9FqQeFMr6a9EQEWwunUSWNyo.roa (hash: JhSkAeJT7kDK1ZM3fmXCcAHWjB5nY9Twt+Ukh1Zc4vU=)
4: tokpm8SVhKZFlAwd2H3wr8iqoP0.crl (hash: REMq/hqyajsQAviry1mP6DLJ4RWLgGfrQWnNpmUEZvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:ac:a2:61:7a:53:01:8c:69:10:4d:83:5f:65:1e:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b689299bc49584a645940c1dd87df0afc8aaa0fd
Validity
Not Before: Jul 29 07:00:22 2026 GMT
Not After : Jul 30 07:00:22 2026 GMT
Subject: CN=7ecd2c49f01047fbdf61b75d3a3fcfa2093844dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ed:aa:94:04:1b:ea:23:d7:73:67:9c:50:dc:
1c:49:c9:1c:b6:52:4b:8c:18:a7:4c:a8:b2:02:91:
ed:b0:83:1d:91:74:be:dc:b2:20:c3:fd:f9:49:8d:
8a:56:8b:db:b7:ec:13:f9:c0:8f:ac:2c:07:20:fc:
51:9c:7e:0b:7c:4b:23:42:22:d5:e3:4b:72:3e:f7:
89:0f:5b:db:7f:cd:73:bd:06:14:60:21:77:62:a9:
1d:7c:8d:a8:70:79:8c:04:2a:a4:d8:e1:24:bc:21:
ba:0b:6e:56:ed:f6:e5:cc:77:9f:7a:2b:f2:ec:dd:
c9:7b:ad:08:74:9f:eb:df:80:7a:7e:fc:9b:fe:de:
2b:b3:52:df:c4:49:41:b1:7b:7c:c9:ee:5e:60:e4:
a5:94:94:e4:40:ef:53:c6:46:ba:6d:64:fe:c5:e4:
aa:46:62:78:2b:ba:1b:80:b4:60:22:39:90:47:3e:
96:02:c8:11:66:b2:11:6b:db:a8:0c:f5:14:ba:50:
53:7d:64:92:ea:fa:97:83:4b:b9:5d:c4:2d:5e:ce:
af:b1:c7:b1:2b:3d:40:f1:73:02:83:1b:85:1f:4b:
89:de:44:4a:ab:b1:d8:81:21:44:d5:dd:70:d2:79:
8c:48:45:ce:5b:a4:94:f5:46:5b:8d:e3:25:71:44:
1b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:CD:2C:49:F0:10:47:FB:DF:61:B7:5D:3A:3F:CF:A2:09:38:44:DC
X509v3 Authority Key Identifier:
keyid:B6:89:29:9B:C4:95:84:A6:45:94:0C:1D:D8:7D:F0:AF:C8:AA:A0:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:54:d8:a9:01:56:bb:6f:67:03:c8:de:4e:5c:75:db:2e:19:
47:2b:f5:15:94:21:26:78:2f:64:73:16:98:f3:28:05:0a:36:
91:a0:9c:27:39:ff:22:f1:3f:6d:d8:16:f1:54:9d:65:c0:9c:
03:82:fa:be:5f:82:b0:e5:51:9c:a6:7c:f7:b8:6d:0b:8c:76:
87:16:70:ca:ee:8e:cd:8c:e2:32:d4:d9:9b:19:43:20:39:11:
48:34:f1:03:fa:a4:22:49:59:50:0c:f7:1e:14:68:26:9e:cb:
b5:e4:10:16:06:5b:e1:9a:da:81:c2:77:43:b5:ff:1b:d6:b0:
9b:d3:9f:bb:40:80:ec:2f:7d:c4:2a:c8:c5:79:9c:86:4c:7d:
a0:53:c9:3d:c2:37:f6:41:bb:ef:a2:9f:d3:a7:ab:b7:fb:d2:
2f:05:c5:b8:75:5c:53:65:1a:7e:3d:b4:5f:6c:8c:1c:a8:35:
94:03:5c:c2:7c:0d:5b:73:bd:55:7f:8d:ac:36:c8:ca:9d:f6:
d6:46:3b:6e:ee:eb:8c:ec:ea:67:e8:28:4b:70:56:51:c5:67:
07:1d:68:d5:84:b8:fb:d9:0f:94:b3:3c:0b:10:6c:c2:c9:cc:
61:34:33:cb:4f:fa:0c:2e:82:56:fe:93:b2:9e:85:07:4b:67:
78:6c:ed:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:12:00 2026 by rpki-client