Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
File: tokpm8SVhKZFlAwd2H3wr8iqoP0.mft (raw, json)
Hash identifier: tkpX29v0jihNT0SXtZz4R7gLugzJN1t/cmoiobdatWc=
Subject key identifier: D7:30:84:48:16:24:B4:D6:72:46:AF:00:FB:D8:A3:8E:84:5F:3F:70
Authority key identifier: B6:89:29:9B:C4:95:84:A6:45:94:0C:1D:D8:7D:F0:AF:C8:AA:A0:FD
Certificate issuer: /CN=b689299bc49584a645940c1dd87df0afc8aaa0fd
Certificate serial: 01A0DBDF9B956D6F81335F3CD09E50C17A88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
Manifest number: 1605
Signing time: Sat 26 Sep 2026 04:00:59 +0000
Manifest this update: Sat 26 Sep 2026 04:00:59 +0000
Manifest next update: Sun 27 Sep 2026 04:00:59 +0000
Files and hashes: 1: HJJWsiDjzBz_irl7pQIQoPI3r70.roa (hash: MiTsGuoftnJ+n/jpkv9HxUxKGLPjJtM51AFiqQ8gQdM=)
2: jgYJ-Ic6G5lRmnuwLRqrvftwyxQ.roa (hash: YK3pnpembYJVK3tFHfQ8eIavXzWvYt02q/rGuHr8gGU=)
3: ozI9FqQeFMr6a9EQEWwunUSWNyo.roa (hash: JhSkAeJT7kDK1ZM3fmXCcAHWjB5nY9Twt+Ukh1Zc4vU=)
4: tokpm8SVhKZFlAwd2H3wr8iqoP0.crl (hash: 8fvwdVu9/mCwb5ZgTwZjtulDBgUTdLPq24QTIuZePdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 04:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:df:9b:95:6d:6f:81:33:5f:3c:d0:9e:50:c1:7a:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b689299bc49584a645940c1dd87df0afc8aaa0fd
Validity
Not Before: Sep 26 04:00:59 2026 GMT
Not After : Sep 27 04:00:59 2026 GMT
Subject: CN=d73084481624b4d67246af00fbd8a38e845f3f70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:09:ad:b0:4c:6d:e3:d1:ef:bd:61:3d:77:7a:
09:df:15:1f:81:a8:fa:ba:09:48:48:85:3e:e1:b3:
2c:53:f6:ae:d0:a1:5d:64:c8:04:b8:93:9e:55:44:
69:dd:11:bf:b7:18:29:39:40:69:a5:65:f6:a1:0a:
ad:94:65:53:44:45:9e:53:40:cb:b2:80:73:bb:4b:
fb:b8:12:c8:23:c5:28:0a:a1:4e:a1:ac:f3:ea:4c:
46:96:19:2f:5b:b2:f2:de:51:8a:7e:22:25:09:db:
18:51:36:90:93:e4:83:ae:87:53:66:06:9e:22:cb:
ea:37:46:8c:4c:32:f6:99:87:b7:17:c7:ba:7c:fd:
58:1c:43:8b:00:5a:4a:b2:5d:5a:c5:c0:9c:50:6c:
9b:80:76:c0:05:55:b5:33:64:14:28:21:d6:5f:1e:
b0:cc:e6:89:52:d4:99:3e:fe:8f:4d:44:13:4e:6c:
88:14:f2:c0:3b:f8:c4:25:ed:49:47:bd:a7:80:8e:
01:4a:69:95:62:d3:fc:69:01:ac:bd:9a:1e:e8:2e:
35:54:3c:f7:b9:b8:d7:5c:4c:e1:02:04:8d:a9:1b:
87:d8:95:e0:e5:b8:ed:d1:00:e8:68:6d:bd:3f:af:
3a:38:d1:a7:f3:f3:d6:78:32:d8:98:70:e0:7d:1d:
17:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:30:84:48:16:24:B4:D6:72:46:AF:00:FB:D8:A3:8E:84:5F:3F:70
X509v3 Authority Key Identifier:
keyid:B6:89:29:9B:C4:95:84:A6:45:94:0C:1D:D8:7D:F0:AF:C8:AA:A0:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:92:8c:df:f9:47:62:f7:7f:f7:01:b5:84:88:85:fe:be:03:
f9:4b:04:31:dc:ee:f7:ed:ed:f4:36:7b:0c:3c:1a:d9:c6:fc:
e9:57:8d:5f:b7:ba:ca:53:0e:17:04:40:63:8e:8a:c5:21:b6:
d5:0d:5e:89:04:13:eb:8d:12:78:df:32:37:e9:21:f1:8a:01:
a0:24:e6:56:02:d3:be:5e:e9:73:7a:dc:8f:72:90:b9:ab:02:
e6:e1:33:6a:a4:54:e3:21:71:a8:8b:2a:a9:97:68:d8:1b:9f:
ec:a5:92:e0:a6:b7:1d:69:0e:3f:33:f4:03:f3:69:84:bb:3a:
45:04:1d:e8:da:e5:11:cf:e0:9e:48:8a:16:6d:64:10:c1:e5:
4f:ca:28:e8:0e:d5:c6:ff:de:87:97:f2:93:72:94:3c:ea:e8:
16:88:3c:9c:89:55:3d:52:4a:87:5c:23:bb:fd:38:29:6c:5f:
2b:33:e5:ef:c6:bf:0b:0c:73:21:bc:d0:f0:84:8b:8c:56:7d:
9a:87:c0:d0:8f:4c:10:5c:58:52:03:32:df:58:7d:25:3e:42:
74:67:ed:c7:23:44:a7:d6:7a:98:b5:cc:aa:8d:af:90:75:1d:
c4:17:4d:ae:29:22:9a:a4:db:95:be:8a:50:54:d1:7e:e4:42:
ab:6f:7f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:13:19 2026 by rpki-client