Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.mft
File: ToWU69x9fPfaLgA8hNhqfBr4cbw.mft (raw, json)
Hash identifier: NmB2IasrwMP8Ope55Ey+4HYgH53opo4kD3Xxa40WWnA=
Subject key identifier: A3:B7:F8:98:F1:AB:B4:3B:F8:36:F8:05:7D:DF:81:EA:06:D6:20:62
Authority key identifier: 4E:85:94:EB:DC:7D:7C:F7:DA:2E:00:3C:84:D8:6A:7C:1A:F8:71:BC
Certificate issuer: /CN=4e8594ebdc7d7cf7da2e003c84d86a7c1af871bc
Certificate serial: 01A0C58E4EF460483ABEB9EECA9443B65DCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ToWU69x9fPfaLgA8hNhqfBr4cbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.mft
Manifest number: 0909
Signing time: Mon 21 Sep 2026 20:00:32 +0000
Manifest this update: Mon 21 Sep 2026 20:00:32 +0000
Manifest next update: Tue 22 Sep 2026 20:00:32 +0000
Files and hashes: 1: S8bTyJBZhokS15ViVs9bepd7lJY.roa (hash: 8XtBGUfQ0OE1e70++hji6820sGNOYH1fI8pCKjr4jm4=)
2: ToWU69x9fPfaLgA8hNhqfBr4cbw.crl (hash: BhgqapQxsonKHDaxFSKlqI0e9OeOuvpwAruO05hgMaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ToWU69x9fPfaLgA8hNhqfBr4cbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:8e:4e:f4:60:48:3a:be:b9:ee:ca:94:43:b6:5d:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e8594ebdc7d7cf7da2e003c84d86a7c1af871bc
Validity
Not Before: Sep 21 20:00:32 2026 GMT
Not After : Sep 22 20:00:32 2026 GMT
Subject: CN=a3b7f898f1abb43bf836f8057ddf81ea06d62062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:09:ae:3f:8e:0c:8a:66:32:9e:89:0c:e0:02:
19:d3:47:7d:36:ef:94:6c:54:f4:c0:2e:5b:7f:6c:
51:da:30:74:bb:46:25:30:c3:27:13:da:0a:8e:a9:
ab:bd:e7:42:75:d3:7f:f3:c0:1c:5c:ad:2c:c3:85:
4d:95:79:f5:c2:cf:08:31:f4:28:58:f0:fd:fe:c8:
da:43:e0:57:0d:f2:bf:c1:f9:1b:27:35:09:79:9c:
05:ef:01:06:de:94:2b:62:1b:ee:a7:12:f2:5b:4a:
ca:64:33:ec:a4:57:d4:b1:7e:25:40:a1:c5:8f:39:
b8:92:c3:99:54:32:2e:30:b6:3a:9a:c3:0a:24:ff:
70:07:5f:17:90:1e:57:bf:53:46:15:3f:49:80:83:
01:f1:01:30:ff:37:a6:7e:8b:62:ca:94:e3:28:21:
ba:b7:5f:91:5f:b0:45:e8:07:37:f4:ba:22:53:91:
75:ff:77:dd:0d:2d:af:24:a9:b0:0f:33:1f:1c:81:
20:8f:7a:dd:f8:eb:88:c7:04:57:23:57:86:20:ea:
15:f5:3c:db:7e:e1:2c:b2:06:9e:89:05:39:e1:1f:
81:5f:ae:6a:81:41:2a:9d:fe:44:60:6f:ee:be:ff:
74:fe:8a:aa:f7:74:1b:24:6b:5e:66:85:3b:42:a6:
0e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:B7:F8:98:F1:AB:B4:3B:F8:36:F8:05:7D:DF:81:EA:06:D6:20:62
X509v3 Authority Key Identifier:
keyid:4E:85:94:EB:DC:7D:7C:F7:DA:2E:00:3C:84:D8:6A:7C:1A:F8:71:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ToWU69x9fPfaLgA8hNhqfBr4cbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:8e:8c:3c:b9:0b:f0:c2:9a:e9:96:20:c5:c4:b2:08:41:5f:
8a:e8:81:35:b2:08:ac:67:02:5c:43:5e:07:98:99:26:c8:00:
d6:0b:6d:e0:b2:61:85:00:d6:5d:1e:7e:13:76:be:c8:16:f6:
3a:68:b3:68:3e:83:6e:a9:e1:5f:29:9c:25:9f:63:0b:e8:fb:
f5:c5:29:1f:41:f9:3f:40:4a:f8:c1:86:7a:20:b5:7e:5f:af:
4e:55:36:77:9a:4c:84:5d:be:c7:0d:4d:9b:93:45:a2:e5:9e:
14:6e:66:cc:18:d2:3a:33:08:7b:92:60:f8:4e:66:5a:94:8b:
8f:7b:88:c3:55:c0:cc:c1:a1:99:3f:82:03:cd:69:5d:2f:ea:
c9:3e:9d:ee:0a:2b:08:5c:7c:63:72:7d:41:60:13:c8:87:a8:
0f:66:68:04:26:5c:b1:58:5d:61:e5:8f:c4:8b:5f:6d:bb:89:
1e:c6:14:53:7d:a6:92:cf:6c:8e:b2:95:2b:21:93:48:15:22:
f8:73:19:0a:0f:4c:6d:84:df:3a:bc:5c:0f:91:3b:98:40:6e:
29:da:33:45:17:ce:a7:59:04:4a:49:1a:c5:aa:f7:05:c8:e0:
c8:09:18:84:f3:ac:f7:a1:3b:ae:20:30:44:de:dd:95:30:fc:
35:0a:75:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:31:05 2026 by rpki-client