Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/_ToehGW_xN9wCJQ3LQuYCOi2Keo.mft
File: _ToehGW_xN9wCJQ3LQuYCOi2Keo.mft (raw, json)
Hash identifier: OH0ae77e5wgU+osGWI+dzN4LsPuVcuft7ytv+vVmhYI=
Subject key identifier: 19:F5:11:98:C7:A8:F1:09:E1:5A:E0:B5:54:52:73:3C:67:38:BB:AA
Authority key identifier: FD:3A:1E:84:65:BF:C4:DF:70:08:94:37:2D:0B:98:08:E8:B6:29:EA
Certificate issuer: /CN=fd3a1e8465bfc4df700894372d0b9808e8b629ea
Certificate serial: 019CE25A19131D87FF3326ACE1DA6617F80D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ToehGW_xN9wCJQ3LQuYCOi2Keo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/_ToehGW_xN9wCJQ3LQuYCOi2Keo.mft
Manifest number: 1867
Signing time: Thu 12 Mar 2026 14:01:21 +0000
Manifest this update: Thu 12 Mar 2026 14:01:21 +0000
Manifest next update: Fri 13 Mar 2026 14:01:21 +0000
Files and hashes: 1: 1-Txs3OfJBF0-L5N04u9viiEkExs.roa (hash: yCRGF/dCmsVFPH4M1prjAs/Ch8adr1cnpUiJaDaeRHw=)
2: PXdVrTfvOREuwYCi1hBh_drpxXc.roa (hash: B/ByN/OVMs5NKQAves3njbZUv4VZGqQ3E5hohAeKtx4=)
3: UC4QXNFGsoHkQG3dZ4Gib3wh1nc.roa (hash: m8cmj611CUqDl1+NNeNnVGJqJBdqb5a0cWtJhXaEPn4=)
4: _ToehGW_xN9wCJQ3LQuYCOi2Keo.crl (hash: rowRVpzCse0iiu+weZiLZKvenezVnfdJfT4CUafbw8M=)
5: xqdYiyOjRSciwZ2UnJ_79WalaOo.roa (hash: BhmwEyRFaLJTPcKk47g4mCuag+1KvgvlYQorDHsQN9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/_ToehGW_xN9wCJQ3LQuYCOi2Keo.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/_ToehGW_xN9wCJQ3LQuYCOi2Keo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ToehGW_xN9wCJQ3LQuYCOi2Keo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 14:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:5a:19:13:1d:87:ff:33:26:ac:e1:da:66:17:f8:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd3a1e8465bfc4df700894372d0b9808e8b629ea
Validity
Not Before: Mar 12 14:01:21 2026 GMT
Not After : Mar 13 14:01:21 2026 GMT
Subject: CN=19f51198c7a8f109e15ae0b55452733c6738bbaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:14:3a:d8:2c:c9:c3:7e:d5:a8:fa:bf:1d:dd:
b8:f7:24:e6:1c:3f:78:02:74:f0:90:10:d4:1a:ac:
07:1a:1e:0d:8d:29:25:f9:57:d0:b3:12:d9:21:43:
4a:48:3b:68:33:e7:df:a6:a7:1c:a2:d5:6a:94:cc:
fe:1f:a3:5f:85:33:a4:98:dd:5d:db:a6:3b:a7:6c:
2c:cd:f5:45:cf:50:90:97:c7:4b:64:4d:dd:bf:21:
55:d9:43:76:47:55:f7:e8:75:cc:a8:59:67:65:be:
05:51:9a:ca:ad:83:76:79:0e:da:b0:37:00:61:a5:
b2:0c:8c:04:06:4f:c2:62:23:d2:2e:55:37:21:b3:
a7:bb:e9:26:52:e3:af:25:16:fa:0a:9b:f9:59:f1:
2c:f1:fc:ff:97:15:3f:78:6c:b2:45:2d:8c:5b:b1:
0e:d9:f1:5a:34:2f:74:d3:ca:9b:ca:ca:97:bd:39:
e6:42:9e:4e:e6:9f:88:f5:7c:57:45:d2:f5:a9:a1:
69:6e:cb:2d:64:d1:98:01:6d:26:50:24:81:e6:8f:
0d:91:99:44:0d:eb:ef:b8:4c:ed:bf:21:9d:90:b6:
60:e0:98:63:5d:7f:be:e6:0b:c3:7e:3e:f1:44:fa:
54:c2:6b:7f:9b:31:34:d5:53:10:f9:10:b8:1f:8e:
2b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F5:11:98:C7:A8:F1:09:E1:5A:E0:B5:54:52:73:3C:67:38:BB:AA
X509v3 Authority Key Identifier:
keyid:FD:3A:1E:84:65:BF:C4:DF:70:08:94:37:2D:0B:98:08:E8:B6:29:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ToehGW_xN9wCJQ3LQuYCOi2Keo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/_ToehGW_xN9wCJQ3LQuYCOi2Keo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/_ToehGW_xN9wCJQ3LQuYCOi2Keo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:cc:47:bc:e0:95:a7:60:f5:11:39:26:b1:2a:0e:ff:03:5d:
ee:f4:60:f1:f5:3d:76:cb:99:ec:5a:2a:76:c6:c0:0f:d9:20:
29:b8:11:a4:88:9c:e5:64:72:25:75:06:94:a4:5f:55:92:68:
71:c6:e3:f1:70:c9:96:24:7f:ff:0c:37:7e:b4:83:25:9f:b1:
6d:e3:3d:6d:bf:8b:d2:f2:f1:ec:56:03:1f:9a:61:69:eb:1e:
02:d2:45:a8:89:a1:8b:9e:00:bc:c4:ec:29:ef:e7:a3:40:2c:
f8:87:44:81:01:31:77:d4:81:29:c1:2d:e9:5a:64:54:f3:95:
65:b6:0e:f8:8b:7f:29:11:bb:e1:9f:e2:cc:10:d6:4f:e0:b9:
69:6e:16:87:e5:63:fc:74:ef:07:a4:c8:6d:23:6b:4c:b0:10:
fb:27:f5:23:6a:b7:e4:4e:c5:9b:a0:0f:ab:fe:36:b6:10:78:
13:4c:8d:a3:4d:41:1a:d0:3c:ff:6b:d3:d1:bc:c9:29:23:d2:
4e:81:dc:f0:0a:01:15:2b:45:d9:7b:7f:96:70:8c:f8:0d:fd:
4b:ad:70:e2:5c:47:1a:62:51:e2:d2:d3:e3:79:86:7f:56:1e:
30:ae:29:44:12:da:95:4e:34:44:21:ab:20:68:3b:05:e1:2c:
b9:0d:94:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 23:00:12 2026 by rpki-client