Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/TO94CCwHKSqq4kD27P06_bp4uMo.mft
File: TO94CCwHKSqq4kD27P06_bp4uMo.mft (raw, json)
Hash identifier: EvhoVJi3filo9DcLb/stIRq9Up39leGHUDQXz/8GSNw=
Subject key identifier: C5:FD:8D:AA:9B:46:C7:BB:94:6D:99:C3:DC:2B:5C:D5:FE:66:7F:48
Authority key identifier: 4C:EF:78:08:2C:07:29:2A:AA:E2:40:F6:EC:FD:3A:FD:BA:78:B8:CA
Certificate issuer: /CN=4cef78082c07292aaae240f6ecfd3afdba78b8ca
Certificate serial: 019D37C108DAFB9A5D1EA976509CF9D31426
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TO94CCwHKSqq4kD27P06_bp4uMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/TO94CCwHKSqq4kD27P06_bp4uMo.mft
Manifest number: 0639
Signing time: Sun 29 Mar 2026 04:01:30 +0000
Manifest this update: Sun 29 Mar 2026 04:01:30 +0000
Manifest next update: Mon 30 Mar 2026 04:01:30 +0000
Files and hashes: 1: DzOZLqQUulch0tfN19TPMP7l7NI.asa (hash: A7v4BAlqHExbGP1jRQY/Od094IwgACqCwokxSz1iOtQ=)
2: TO94CCwHKSqq4kD27P06_bp4uMo.crl (hash: mpdBQGjGLWf+VrukmarnYtQxUEl4w1cQ74I22U2qPFM=)
3: vRz02q2XpG2yKdoejA6Edmj_d8k.roa (hash: jskIJxCVtupvjYcRL2UIAykBXf+yZJ8QG3OwF/ylsUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/TO94CCwHKSqq4kD27P06_bp4uMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/TO94CCwHKSqq4kD27P06_bp4uMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TO94CCwHKSqq4kD27P06_bp4uMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c1:08:da:fb:9a:5d:1e:a9:76:50:9c:f9:d3:14:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cef78082c07292aaae240f6ecfd3afdba78b8ca
Validity
Not Before: Mar 29 04:01:30 2026 GMT
Not After : Mar 30 04:01:30 2026 GMT
Subject: CN=c5fd8daa9b46c7bb946d99c3dc2b5cd5fe667f48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:75:84:8c:d0:03:92:49:fe:b5:26:fd:41:84:
ac:f2:f0:32:07:55:ea:93:c3:9d:a6:0d:db:4d:a3:
b0:b9:bf:d6:4b:69:29:b2:16:d3:bc:46:18:40:f4:
58:3f:75:6e:21:9e:54:a1:a1:52:71:4d:b5:ed:e7:
15:5f:29:41:90:39:ce:66:83:9b:3b:4a:10:bb:48:
2a:79:e5:74:3a:a8:90:59:06:c1:d9:83:c2:f9:92:
d4:4d:74:61:82:d0:4f:c7:a0:19:c8:49:c2:d5:2f:
54:58:f1:bb:c4:f4:3d:6e:08:65:b7:c7:60:fc:55:
82:2a:36:43:0d:63:d1:55:a8:61:10:a2:08:98:79:
0d:82:15:fe:aa:ca:d3:f8:23:d5:27:53:89:4e:f0:
ce:c3:8d:f0:df:a9:c0:38:83:43:fa:43:73:21:2e:
81:fc:57:a0:d0:cc:61:76:d4:4c:22:39:c4:71:21:
86:74:dc:3d:d9:91:1a:94:69:ab:c8:1d:fd:e3:7e:
01:11:0f:81:ce:83:4b:f6:9a:f7:13:e8:75:b5:03:
b4:c7:8a:c1:b2:21:b8:13:f2:c7:f8:6e:50:83:0e:
82:ee:53:21:24:1c:a1:4b:ca:93:70:a9:d3:55:62:
66:41:42:3a:9f:a5:2e:f5:41:58:7c:f0:69:44:9d:
b4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:FD:8D:AA:9B:46:C7:BB:94:6D:99:C3:DC:2B:5C:D5:FE:66:7F:48
X509v3 Authority Key Identifier:
keyid:4C:EF:78:08:2C:07:29:2A:AA:E2:40:F6:EC:FD:3A:FD:BA:78:B8:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TO94CCwHKSqq4kD27P06_bp4uMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/TO94CCwHKSqq4kD27P06_bp4uMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/TO94CCwHKSqq4kD27P06_bp4uMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:f5:dd:00:e8:1f:e2:23:9c:20:d2:8d:78:9d:36:8b:79:82:
4b:38:9d:a6:d1:2b:b2:13:f7:06:29:e7:77:ee:f0:1a:8a:49:
04:71:1f:6a:4e:bb:34:94:d2:9c:49:38:ec:18:1f:ff:7a:3b:
59:ac:5e:de:5a:80:78:e7:61:b2:e7:95:99:45:34:64:4a:12:
77:5f:60:b1:5f:36:47:dc:80:a2:d4:11:ea:2a:c8:ae:a8:a4:
7f:9c:78:65:23:71:d0:c4:16:55:88:39:14:de:3f:1a:ef:45:
f5:37:2e:ff:d2:10:ce:bb:24:8c:31:13:8d:0a:f8:00:47:4b:
50:08:84:4b:b2:42:89:f6:ab:10:8a:5f:eb:07:3e:9f:6a:56:
1f:36:20:d8:d1:55:96:d1:34:15:3d:55:f3:4d:d2:d5:43:d9:
b1:b6:92:f0:25:b5:3d:e1:16:61:dc:a9:bb:d5:28:a7:63:c2:
70:9a:21:1d:62:95:d8:c1:85:21:ca:66:e1:14:45:ab:7f:c5:
93:bd:fe:a1:fa:d8:15:11:b9:87:49:49:3c:3e:4c:78:38:1e:
dd:92:ed:01:3e:fe:94:b2:cd:d4:cb:28:49:a7:d5:d6:ff:d7:
7e:a6:f1:02:24:cf:d4:00:b0:13:d7:6f:d9:b9:0c:d5:89:2f:
99:59:be:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:59 2026 by rpki-client