Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.mft
File: toqZTkLmDaT0pUdbFfXidRbHzxQ.mft (raw, json)
Hash identifier: DlmrGRKViGH6zT+iDMSSR2sfevGZNqzdGeqWd0CQx2Y=
Subject key identifier: 3C:B1:D1:63:FD:01:41:63:DA:91:7D:F7:07:77:6C:94:11:E7:3A:39
Authority key identifier: B6:8A:99:4E:42:E6:0D:A4:F4:A5:47:5B:15:F5:E2:75:16:C7:CF:14
Certificate issuer: /CN=b68a994e42e60da4f4a5475b15f5e27516c7cf14
Certificate serial: 019D382E13DE97A8AFDAB38A2B57C1605228
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toqZTkLmDaT0pUdbFfXidRbHzxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 06:00:36 +0000
Manifest this update: Sun 29 Mar 2026 06:00:36 +0000
Manifest next update: Mon 30 Mar 2026 06:00:36 +0000
Files and hashes: 1: Jpz2_pjmoHdo-RmCR1hSGVo1EHM.roa (hash: z2PsPLaUE/pjgoZrk9x3ve1iWv9V87jouLdEBjFOK3I=)
2: toqZTkLmDaT0pUdbFfXidRbHzxQ.crl (hash: z8t2RhKBGEC5LohUJPfC1pVM8w4s1fTAqIZiZMCHhf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/toqZTkLmDaT0pUdbFfXidRbHzxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:13:de:97:a8:af:da:b3:8a:2b:57:c1:60:52:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b68a994e42e60da4f4a5475b15f5e27516c7cf14
Validity
Not Before: Mar 29 06:00:36 2026 GMT
Not After : Mar 30 06:00:36 2026 GMT
Subject: CN=3cb1d163fd014163da917df707776c9411e73a39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3e:f9:c7:5b:92:74:9d:48:41:4c:84:81:1b:
9d:c5:82:82:bb:b9:d4:de:40:c3:89:fa:33:0d:19:
85:b3:5b:b9:bb:77:f2:44:08:33:e9:2a:b3:55:52:
06:68:2a:70:7d:7d:0b:6b:5a:47:53:df:60:64:34:
fa:fb:8c:ea:10:80:ea:e8:78:c5:a0:b4:11:a8:27:
24:75:6e:34:6c:c0:36:7f:d4:7c:19:a8:6f:69:f3:
59:89:e0:45:2d:11:94:52:e9:ab:87:c5:af:1f:ac:
9d:82:33:1f:f8:2d:cf:f3:b0:ab:6c:08:b5:c2:d0:
e8:5e:73:a9:9f:08:74:77:b1:d0:a0:36:b1:24:48:
f2:15:11:f4:ba:1e:8f:5f:6d:c0:98:39:a3:a4:e3:
f1:d9:46:ad:21:7a:27:96:e9:b6:0c:26:cd:a2:45:
8c:22:2a:ae:4a:b6:da:77:a0:ad:ae:cc:d4:4e:45:
a9:8b:8e:72:b4:81:9d:b5:4f:b5:30:67:9f:7a:6f:
97:f4:67:33:de:90:ee:e2:6a:0c:7a:38:f0:ce:70:
b0:c2:db:00:f4:b0:ab:77:37:6c:cc:da:d5:16:38:
36:40:93:b4:e9:3f:ba:4f:94:60:d8:df:32:56:2c:
f9:e0:40:4b:4f:0a:15:8a:d2:c2:3f:5c:8e:e3:b0:
9d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B1:D1:63:FD:01:41:63:DA:91:7D:F7:07:77:6C:94:11:E7:3A:39
X509v3 Authority Key Identifier:
keyid:B6:8A:99:4E:42:E6:0D:A4:F4:A5:47:5B:15:F5:E2:75:16:C7:CF:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toqZTkLmDaT0pUdbFfXidRbHzxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:0b:43:d3:15:76:81:18:d9:bd:c7:23:87:e5:e2:8e:b7:25:
6c:b5:6b:26:64:1b:dd:fa:f5:7d:ae:9a:8e:66:37:9e:76:6f:
cb:27:2c:f8:be:ea:93:9d:13:ed:53:44:96:5c:07:b9:0b:ce:
d2:7e:b1:f7:5f:e7:d6:26:f5:93:db:a2:17:79:53:b3:ad:ed:
13:0c:90:76:40:bb:91:5a:93:00:2d:3f:0b:4f:a6:1f:dd:73:
89:8e:bc:82:76:74:47:a2:c8:47:d2:73:8b:84:78:00:dc:cb:
06:cb:46:8d:85:c0:89:6a:40:ef:5b:f6:ef:ed:f7:7c:50:87:
41:2a:49:b3:74:34:76:5a:33:d4:72:e0:be:c5:bc:bf:fd:af:
80:67:61:d4:0d:ba:ce:47:8b:2e:0d:ae:21:5d:af:89:24:d4:
5d:c2:3c:c5:e7:a3:9c:ca:90:5a:2c:cb:2e:96:bd:08:cc:0a:
3b:05:2d:0d:bb:ae:ec:75:d1:36:1c:85:7c:d1:18:e7:af:39:
0c:a8:a0:b1:e9:11:9d:8b:ff:03:16:c6:61:d8:5e:68:f6:2b:
2a:af:86:00:95:a2:b3:2f:15:73:c0:de:11:77:0f:77:1d:aa:
be:89:a6:05:b7:3f:6b:4f:3b:2e:6d:63:9e:44:4d:63:5d:ab:
84:f2:ae:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:41:30 2026 by rpki-client