Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/bcf7b2-44a5-4da1-9477-35cf86e4e56d/1/ToFckvwcZCWqy8xFFZbHPtZFcAc.mft
File: ToFckvwcZCWqy8xFFZbHPtZFcAc.mft (raw, json)
Hash identifier: zJNg36tAUFkafZ5EM3YVsfLjJ94uLxJ+dtRDC87uXDM=
Subject key identifier: A4:9F:D5:04:4C:9A:F5:B3:39:90:E6:48:26:63:85:81:DA:D5:DA:AD
Authority key identifier: 4E:81:5C:92:FC:1C:64:25:AA:CB:CC:45:15:96:C7:3E:D6:45:70:07
Certificate issuer: /CN=4e815c92fc1c6425aacbcc451596c73ed6457007
Certificate serial: 019EB732D7F19165A9ABF748EDD02EB22254
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ToFckvwcZCWqy8xFFZbHPtZFcAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/bcf7b2-44a5-4da1-9477-35cf86e4e56d/1/ToFckvwcZCWqy8xFFZbHPtZFcAc.mft
Manifest number: 0212
Signing time: Thu 11 Jun 2026 15:00:23 +0000
Manifest this update: Thu 11 Jun 2026 15:00:23 +0000
Manifest next update: Fri 12 Jun 2026 15:00:23 +0000
Files and hashes: 1: 1-8NbCoWGL2RGLtrzFx5dvyYdViM.roa (hash: +8X4viP4tBSyquY8znXf6UEmn4jZ8QbXgaaFStEun3c=)
2: ToFckvwcZCWqy8xFFZbHPtZFcAc.crl (hash: kcU986WZDr5Spmc5U835y3pyvcLMDRvguckLqoQNw9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/bcf7b2-44a5-4da1-9477-35cf86e4e56d/1/ToFckvwcZCWqy8xFFZbHPtZFcAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/bcf7b2-44a5-4da1-9477-35cf86e4e56d/1/ToFckvwcZCWqy8xFFZbHPtZFcAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ToFckvwcZCWqy8xFFZbHPtZFcAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:32:d7:f1:91:65:a9:ab:f7:48:ed:d0:2e:b2:22:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e815c92fc1c6425aacbcc451596c73ed6457007
Validity
Not Before: Jun 11 15:00:23 2026 GMT
Not After : Jun 12 15:00:23 2026 GMT
Subject: CN=a49fd5044c9af5b33990e64826638581dad5daad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:50:2f:b6:0d:e4:bf:d9:64:42:5c:0d:a5:5c:
55:07:fe:b6:28:19:aa:d6:88:c7:b6:4f:4c:b2:04:
c2:05:4e:89:ea:74:9c:68:43:30:f0:79:f3:ad:b7:
7c:6e:1b:c5:28:40:03:6d:57:f3:ae:cf:84:a3:53:
7c:05:b8:98:37:b2:c6:7f:c1:49:73:bf:91:2e:eb:
f0:26:df:90:9e:fc:0f:d2:2e:73:4e:9b:5d:24:24:
84:14:88:0b:46:6b:0b:71:4e:13:01:60:ab:27:75:
4b:1a:58:39:c9:0c:36:74:9f:8d:31:e9:ee:a9:e9:
fa:32:9a:00:51:c2:c5:62:21:f0:6e:3d:2f:3c:63:
f0:8e:d7:ce:a3:ba:c6:98:93:69:56:28:64:79:4e:
1e:b2:ba:68:79:d5:a0:d7:77:85:f2:ad:a8:bd:ee:
98:62:d6:83:71:17:5b:34:3f:00:da:bf:c5:36:c5:
ef:0c:1c:11:86:22:1c:f6:f6:4e:f4:c9:d3:0e:a0:
0c:0b:21:c9:32:67:54:cc:5f:cc:ec:bf:77:34:95:
2c:6f:45:70:d3:e2:92:a9:be:22:e8:0f:e6:da:7e:
bd:eb:53:91:98:8e:4e:89:4f:5d:56:0f:0e:2a:e2:
03:4c:5c:04:3b:bb:84:12:97:ee:6c:0e:e7:45:73:
50:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:9F:D5:04:4C:9A:F5:B3:39:90:E6:48:26:63:85:81:DA:D5:DA:AD
X509v3 Authority Key Identifier:
keyid:4E:81:5C:92:FC:1C:64:25:AA:CB:CC:45:15:96:C7:3E:D6:45:70:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ToFckvwcZCWqy8xFFZbHPtZFcAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bcf7b2-44a5-4da1-9477-35cf86e4e56d/1/ToFckvwcZCWqy8xFFZbHPtZFcAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bcf7b2-44a5-4da1-9477-35cf86e4e56d/1/ToFckvwcZCWqy8xFFZbHPtZFcAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:86:09:1b:1e:0a:83:6d:49:c6:d3:2d:b4:1e:d9:e9:77:ef:
da:bb:76:e5:c1:31:1a:62:05:c1:86:f7:39:ba:97:36:06:f7:
73:d1:00:26:e5:cd:d9:ad:b5:d4:73:0c:31:26:3c:41:d0:eb:
61:e0:a7:e9:c0:1d:d8:3b:fe:97:75:0a:4d:78:cb:69:81:07:
31:29:49:66:53:48:6a:fb:25:e6:a0:c5:21:24:63:51:46:fd:
58:6d:fb:8a:77:19:0b:65:42:0b:f8:c2:f0:93:57:ba:b3:05:
df:f6:a1:9f:8f:c1:a8:a3:52:3a:ab:c0:15:e6:52:15:97:02:
20:47:4c:42:a7:8b:56:6d:78:6a:2f:70:87:79:15:a9:dc:45:
90:ad:dd:19:c7:d5:15:1b:74:01:83:24:37:e3:e7:38:ee:c7:
80:95:f4:de:67:f6:4e:9b:a2:28:ae:86:3f:0a:82:c4:ac:30:
71:25:9d:3d:e1:0a:d0:17:52:39:48:8c:65:0c:c0:9a:bf:26:
9f:cd:34:b9:16:75:f5:c8:bf:0f:33:b0:f5:20:54:99:66:fa:
69:0a:6f:89:6a:8f:75:fd:24:47:48:75:ee:59:03:2a:a2:da:
7d:45:41:8f:69:61:33:8c:78:4d:de:44:3a:73:da:19:4f:ff:
d0:09:3a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 18:08:38 2026 by rpki-client