Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/_ToehGW_xN9wCJQ3LQuYCOi2Keo.mft
File: _ToehGW_xN9wCJQ3LQuYCOi2Keo.mft (raw, json)
Hash identifier: IlBjj8swR8n4r4wLZHxJX0NemQR0uMe2JdzMSRepkr4=
Subject key identifier: DD:81:B0:65:CB:C3:F4:40:F3:E9:6B:1B:A4:8D:BA:D4:A4:7B:04:E0
Authority key identifier: FD:3A:1E:84:65:BF:C4:DF:70:08:94:37:2D:0B:98:08:E8:B6:29:EA
Certificate issuer: /CN=fd3a1e8465bfc4df700894372d0b9808e8b629ea
Certificate serial: 01A08AFAA66CAA0FDD408FDD97B49C94B751
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ToehGW_xN9wCJQ3LQuYCOi2Keo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/_ToehGW_xN9wCJQ3LQuYCOi2Keo.mft
Manifest number: 1A4C
Signing time: Thu 10 Sep 2026 11:01:17 +0000
Manifest this update: Thu 10 Sep 2026 11:01:17 +0000
Manifest next update: Fri 11 Sep 2026 11:01:17 +0000
Files and hashes: 1: 1-Txs3OfJBF0-L5N04u9viiEkExs.roa (hash: yCRGF/dCmsVFPH4M1prjAs/Ch8adr1cnpUiJaDaeRHw=)
2: PXdVrTfvOREuwYCi1hBh_drpxXc.roa (hash: B/ByN/OVMs5NKQAves3njbZUv4VZGqQ3E5hohAeKtx4=)
3: UC4QXNFGsoHkQG3dZ4Gib3wh1nc.roa (hash: m8cmj611CUqDl1+NNeNnVGJqJBdqb5a0cWtJhXaEPn4=)
4: _ToehGW_xN9wCJQ3LQuYCOi2Keo.crl (hash: +Mn5Kw3NJrR8Qyc/Xi9cTBTzn+EdeoP1XZjZ0FsobCE=)
5: xqdYiyOjRSciwZ2UnJ_79WalaOo.roa (hash: BhmwEyRFaLJTPcKk47g4mCuag+1KvgvlYQorDHsQN9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/_ToehGW_xN9wCJQ3LQuYCOi2Keo.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/_ToehGW_xN9wCJQ3LQuYCOi2Keo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ToehGW_xN9wCJQ3LQuYCOi2Keo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:a6:6c:aa:0f:dd:40:8f:dd:97:b4:9c:94:b7:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd3a1e8465bfc4df700894372d0b9808e8b629ea
Validity
Not Before: Sep 10 11:01:17 2026 GMT
Not After : Sep 11 11:01:17 2026 GMT
Subject: CN=dd81b065cbc3f440f3e96b1ba48dbad4a47b04e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0b:27:af:cd:8a:b1:91:34:42:46:54:f4:36:
8a:ea:5d:bb:ea:0a:77:72:e4:61:bf:94:31:1f:5c:
3c:b3:d1:9d:28:2f:f2:bd:8f:4a:3a:44:36:ed:78:
da:ba:3f:fe:53:26:af:cb:cc:d4:b2:19:c5:00:45:
a6:e9:07:eb:48:7e:e7:a1:d0:78:da:0c:66:a0:cd:
8d:10:5a:f8:dc:51:29:cb:5f:27:94:7e:10:d2:96:
c3:bd:d2:64:00:b9:95:79:3a:6b:a8:c7:fa:4e:7d:
66:14:4c:bb:1e:f0:9d:0d:a8:f5:62:12:ab:a6:90:
72:7d:4b:be:51:e1:5e:e8:2b:03:19:b0:d3:9d:bb:
37:a9:19:92:af:35:0b:6a:5d:97:2f:d5:3c:df:03:
1c:4b:96:b6:4f:e3:c8:94:62:61:21:cd:6c:fd:90:
92:44:0e:6c:33:f7:38:b4:89:3c:94:03:d8:4e:61:
15:93:28:8e:0e:e7:0d:6f:42:02:31:b4:21:9d:a7:
e0:66:b1:cd:e1:73:1a:6e:79:90:72:8f:12:e8:b9:
94:6b:00:1c:83:31:d6:70:f4:a6:29:fc:2b:49:e7:
ff:96:18:70:63:fb:ef:dd:2c:ab:0e:62:eb:2d:de:
fc:2e:b4:0c:19:03:13:e3:53:59:e5:43:eb:d4:3e:
e0:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:81:B0:65:CB:C3:F4:40:F3:E9:6B:1B:A4:8D:BA:D4:A4:7B:04:E0
X509v3 Authority Key Identifier:
keyid:FD:3A:1E:84:65:BF:C4:DF:70:08:94:37:2D:0B:98:08:E8:B6:29:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ToehGW_xN9wCJQ3LQuYCOi2Keo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/_ToehGW_xN9wCJQ3LQuYCOi2Keo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/_ToehGW_xN9wCJQ3LQuYCOi2Keo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:f1:34:05:07:10:38:fe:ff:93:c1:0b:39:b4:5f:79:80:ae:
5b:1f:52:6b:4e:23:da:bc:b9:af:36:38:f6:aa:92:e1:ca:9b:
01:3b:ca:ca:64:3f:b6:f9:de:b8:ff:e1:c6:a7:ec:1a:5b:c8:
4f:63:d4:63:42:c8:f4:fd:73:e2:79:5e:2d:74:29:5f:0a:19:
ae:53:4b:0e:8f:56:58:48:a1:57:99:38:30:4d:5e:e7:28:85:
b0:6c:57:1b:34:fa:9a:50:20:6a:7b:66:e2:0c:2d:81:ec:5d:
e3:07:c5:26:1f:7f:4e:f3:2b:b3:88:2c:8f:18:27:78:af:0a:
69:8e:c3:96:1d:33:f4:9b:84:c0:11:1c:9c:3c:f7:f5:de:75:
92:47:7f:a7:00:bb:3f:c5:d6:e4:df:bb:47:08:e9:e4:ef:47:
83:c9:bf:0f:bf:10:82:10:69:75:a3:30:a4:f7:ed:97:c8:33:
2c:62:f2:07:c7:d9:dc:fe:0e:fa:3c:73:19:ae:e9:39:30:fe:
4a:db:30:80:5f:7d:a0:65:85:d8:00:e8:60:57:ea:d4:f8:9b:
81:bf:ff:43:7e:c4:cf:d4:38:a2:7a:1c:c3:ec:83:44:31:67:
1b:98:06:e4:a5:42:a8:28:e8:04:3d:43:4c:f0:c8:4f:23:04:
08:1f:46:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:58:07 2026 by rpki-client