Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.mft
File: toqZTkLmDaT0pUdbFfXidRbHzxQ.mft (raw, json)
Hash identifier: pHpyR51tVm4sfYRLnyOd8oPMM/4rL1YJbDtc8dkbxJQ=
Subject key identifier: 1A:20:11:46:59:29:FA:87:A8:09:1C:5A:32:91:6F:28:CA:2D:9D:F9
Authority key identifier: B6:8A:99:4E:42:E6:0D:A4:F4:A5:47:5B:15:F5:E2:75:16:C7:CF:14
Certificate issuer: /CN=b68a994e42e60da4f4a5475b15f5e27516c7cf14
Certificate serial: 01A12089C8498AD7490BD85CD0F8B8FC07B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toqZTkLmDaT0pUdbFfXidRbHzxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.mft
Manifest number: 1A95
Signing time: Fri 09 Oct 2026 12:01:02 +0000
Manifest this update: Fri 09 Oct 2026 12:01:02 +0000
Manifest next update: Sat 10 Oct 2026 12:01:02 +0000
Files and hashes: 1: Jpz2_pjmoHdo-RmCR1hSGVo1EHM.roa (hash: z2PsPLaUE/pjgoZrk9x3ve1iWv9V87jouLdEBjFOK3I=)
2: toqZTkLmDaT0pUdbFfXidRbHzxQ.crl (hash: UYNqA9nYFNWPdbu5FoI6N45dodOjx8fVVeWaoeLn5g4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/toqZTkLmDaT0pUdbFfXidRbHzxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 12:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:20:89:c8:49:8a:d7:49:0b:d8:5c:d0:f8:b8:fc:07:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b68a994e42e60da4f4a5475b15f5e27516c7cf14
Validity
Not Before: Oct 9 12:01:02 2026 GMT
Not After : Oct 10 12:01:02 2026 GMT
Subject: CN=1a2011465929fa87a8091c5a32916f28ca2d9df9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:52:af:fd:7e:17:5a:c5:83:37:57:d8:0b:a6:
f3:77:2f:73:fa:23:42:23:e4:ff:85:88:fe:cb:15:
66:68:a9:0d:ab:7e:30:9d:00:79:05:c1:3c:f0:29:
48:c7:c3:65:2d:c1:2d:b6:47:46:b0:85:19:9a:40:
9d:4c:5c:84:c4:b0:a3:cf:33:5f:9b:45:68:30:0d:
6c:ab:38:63:08:73:1b:8a:b8:93:91:bd:ef:ef:20:
d5:33:66:49:31:c4:aa:e5:12:33:cd:2b:35:27:c6:
ab:00:87:df:0a:a6:8f:50:45:17:66:b9:19:c1:37:
69:3d:7f:1a:ec:14:80:79:04:d4:d4:92:3d:e3:73:
16:6f:27:14:08:05:cb:74:26:d4:13:29:ff:74:01:
83:1d:cb:0d:bc:1f:3b:34:72:f8:40:db:86:3b:58:
cf:df:7d:20:07:8f:60:ec:c5:0a:16:fa:4d:e6:56:
51:30:43:cf:27:5a:b0:b4:12:fd:e7:e2:4d:99:49:
68:c0:dd:88:48:02:95:89:2e:12:13:92:42:74:0d:
90:70:48:1f:43:6a:ae:69:af:0c:d9:70:60:7d:43:
07:35:b7:2f:75:d1:6b:47:b0:d9:b3:63:b7:a8:62:
c3:bd:fb:63:77:7d:e5:10:8e:10:11:01:a6:68:b8:
04:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:20:11:46:59:29:FA:87:A8:09:1C:5A:32:91:6F:28:CA:2D:9D:F9
X509v3 Authority Key Identifier:
keyid:B6:8A:99:4E:42:E6:0D:A4:F4:A5:47:5B:15:F5:E2:75:16:C7:CF:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toqZTkLmDaT0pUdbFfXidRbHzxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:4e:34:6d:56:6b:d1:81:2d:24:29:b6:eb:be:b8:3a:08:57:
12:1f:dd:07:e5:f5:1a:bd:51:f2:5d:b0:c1:d6:95:0c:17:fe:
7a:8d:85:76:23:a5:71:d8:7a:d6:a6:6a:a0:40:9d:bf:28:ba:
17:83:83:fe:97:3c:29:aa:05:d1:f6:8d:ba:b9:8c:1e:a8:50:
20:36:1c:43:66:78:9f:0a:8c:39:9f:b4:e4:b8:22:d2:90:db:
98:0c:7d:dc:8c:a7:ee:a5:05:46:0a:b8:ec:b5:3b:4d:f8:03:
c4:3a:be:eb:98:1a:e4:66:c5:22:ea:67:11:be:f3:e4:eb:24:
92:26:fe:a2:c6:27:25:61:60:5f:05:89:d2:e7:5d:8f:0a:28:
c5:22:54:e1:0a:1d:33:56:eb:04:82:41:e9:48:5e:54:3a:c0:
fe:40:3f:bb:43:98:fb:90:77:2d:bd:99:66:1d:ca:0e:6a:c9:
42:cf:1b:ed:25:dd:79:5e:6e:3a:aa:93:34:9a:ba:e4:9e:8e:
4b:36:e1:99:cf:a5:3b:b6:15:07:2a:cb:25:a5:8b:73:e8:bc:
ed:42:a1:0e:09:86:6f:9e:b9:d8:74:4b:c7:b0:81:1e:ad:b2:
f8:ee:ed:93:cd:bc:7c:13:1f:aa:d3:d0:38:d8:db:1e:bc:96:
21:46:3f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 21:24:55 2026 by rpki-client