Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/TODEiXTgrnBa9Q7Q1lJH0afmL9s.mft
File: TODEiXTgrnBa9Q7Q1lJH0afmL9s.mft (raw, json)
Hash identifier: D6nboXLIbktVTCIABu+/WgaT/AhJaqGs0TAZK/DfPzA=
Subject key identifier: 0F:E9:EF:24:F7:2C:1C:27:9C:C0:F4:74:A3:6B:68:88:CD:69:A0:B8
Authority key identifier: 4C:E0:C4:89:74:E0:AE:70:5A:F5:0E:D0:D6:52:47:D1:A7:E6:2F:DB
Certificate issuer: /CN=4ce0c48974e0ae705af50ed0d65247d1a7e62fdb
Certificate serial: 01A1574183913AB35A2EB329076BBBA50924
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TODEiXTgrnBa9Q7Q1lJH0afmL9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/TODEiXTgrnBa9Q7Q1lJH0afmL9s.mft
Manifest number: 012B
Signing time: Tue 20 Oct 2026 03:01:13 +0000
Manifest this update: Tue 20 Oct 2026 03:01:13 +0000
Manifest next update: Wed 21 Oct 2026 03:01:13 +0000
Files and hashes: 1: TODEiXTgrnBa9Q7Q1lJH0afmL9s.crl (hash: eUGGJfcFdr9gyvVcSV6OLrpDz2FBf0Cz39jZKAlm67c=)
2: ebblHkxH_4mxEtlIvQdRAh9glJA.roa (hash: 3iH299M2+mtu/XgvXbZ9sMSTDosmnZ7V4KjCGJX9hzQ=)
3: i5z3KQc2e0-K2v0h5qLdZBQJJXU.roa (hash: KrOQvD/t0VuGa9aPl/HCdbKeqmz1JIB0jRemVYeffNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/TODEiXTgrnBa9Q7Q1lJH0afmL9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/TODEiXTgrnBa9Q7Q1lJH0afmL9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/TODEiXTgrnBa9Q7Q1lJH0afmL9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 03:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:57:41:83:91:3a:b3:5a:2e:b3:29:07:6b:bb:a5:09:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce0c48974e0ae705af50ed0d65247d1a7e62fdb
Validity
Not Before: Oct 20 03:01:13 2026 GMT
Not After : Oct 21 03:01:13 2026 GMT
Subject: CN=0fe9ef24f72c1c279cc0f474a36b6888cd69a0b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ea:0a:d8:1f:25:b4:92:c2:1b:c4:90:bc:d2:
8c:62:44:b3:18:b2:53:e7:83:f5:0f:84:12:19:7f:
99:a2:67:e1:22:e9:8b:69:c6:f2:41:ec:d2:6a:4e:
e3:92:9c:8c:77:cd:ef:b3:d5:a8:8c:7f:59:25:ab:
7d:ea:b7:f6:cb:a9:20:87:c7:97:06:b2:83:f6:74:
1f:24:c9:9e:93:f2:32:56:9b:2b:0c:55:28:25:72:
f0:85:4f:dc:0a:99:25:27:1e:47:8e:49:44:68:13:
bb:f0:88:72:92:e3:53:06:f9:5b:5a:e9:62:38:bf:
9e:a7:15:5a:a7:f5:88:08:f2:c2:ae:8c:92:28:c2:
68:4e:db:0b:88:5b:a6:42:8f:3e:51:c1:58:3f:f3:
cf:37:6d:b2:da:c0:23:91:f5:44:cb:6d:3a:e1:72:
bd:46:33:85:32:ce:75:d9:94:db:5d:c7:88:d5:0b:
07:ab:fa:86:f5:3e:87:79:b2:4b:38:ff:5d:e8:47:
03:40:ce:76:97:78:3f:b0:f4:19:29:44:27:4b:c0:
b6:f7:6a:55:f3:b5:ff:2f:e1:ef:10:04:e5:f8:69:
29:9e:27:de:f9:ab:45:b6:9d:86:5c:bd:74:e8:cd:
52:3d:f0:97:ea:0a:fe:6e:04:d1:77:95:dd:34:e9:
8c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:E9:EF:24:F7:2C:1C:27:9C:C0:F4:74:A3:6B:68:88:CD:69:A0:B8
X509v3 Authority Key Identifier:
keyid:4C:E0:C4:89:74:E0:AE:70:5A:F5:0E:D0:D6:52:47:D1:A7:E6:2F:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TODEiXTgrnBa9Q7Q1lJH0afmL9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/TODEiXTgrnBa9Q7Q1lJH0afmL9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/TODEiXTgrnBa9Q7Q1lJH0afmL9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:f4:63:f6:82:b9:6c:37:f7:a9:48:e9:fd:79:23:b3:98:c3:
ba:29:d2:a7:48:87:14:91:ba:79:d1:12:06:b0:88:ad:8a:52:
40:e2:20:f5:ee:89:3e:57:85:f1:c9:75:eb:7b:89:54:5e:00:
e1:59:f9:e4:c4:2c:c3:e4:c9:f7:39:09:30:f9:9a:49:d2:f4:
03:e9:56:9a:57:b2:9d:99:d7:e9:7b:48:13:20:19:2d:5e:a8:
45:22:2e:ce:f4:7a:8a:2f:b2:be:60:d2:37:0f:59:7c:ed:90:
32:64:de:fe:44:32:1f:a2:98:2f:3b:24:d4:45:37:40:a1:5a:
21:ba:17:52:fd:4f:19:7f:c6:ec:6e:08:36:c6:f0:77:7e:4f:
50:ca:6d:e6:d8:3e:7b:56:36:d8:d2:f0:4e:29:08:eb:41:02:
22:b9:50:0d:a3:1b:fd:00:d6:dc:c0:78:77:13:48:88:1b:59:
59:23:c8:2e:26:5f:c5:d3:55:7b:0a:88:54:d4:62:e0:f3:44:
19:26:20:2e:37:c3:6a:9d:72:71:48:f2:4c:c7:ef:c0:56:86:
a7:18:82:3c:da:f2:1f:18:54:90:3e:cf:2b:5d:ae:d3:8e:dd:
8d:84:62:88:fd:49:84:84:f7:5d:4a:38:39:35:51:00:bb:aa:
ff:f5:e4:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFXQYOROrNaLrMpB2u7pQkkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjZTBjNDg5NzRlMGFlNzA1YWY1MGVkMGQ2NTI0N2QxYTdl
NjJmZGIwHhcNMjYxMDIwMDMwMTEzWhcNMjYxMDIxMDMwMTEzWjAzMTEwLwYDVQQD
EygwZmU5ZWYyNGY3MmMxYzI3OWNjMGY0NzRhMzZiNjg4OGNkNjlhMGI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+oK2B8ltJLCG8SQvNKMYkSzGLJT
54P1D4QSGX+ZomfhIumLacbyQezSak7jkpyMd83vs9WojH9ZJat96rf2y6kgh8eX
BrKD9nQfJMmek/IyVpsrDFUoJXLwhU/cCpklJx5HjklEaBO78IhykuNTBvlbWuli
OL+epxVap/WICPLCroySKMJoTtsLiFumQo8+UcFYP/PPN22y2sAjkfVEy2064XK9
RjOFMs512ZTbXceI1QsHq/qG9T6HebJLOP9d6EcDQM52l3g/sPQZKUQnS8C292pV
87X/L+HvEATl+Gkpnife+atFtp2GXL106M1SPfCX6gr+bgTRd5XdNOmMxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA/p7yT3LBwnnMD0dKNraIjNaaC4MB8GA1UdIwQY
MBaAFEzgxIl04K5wWvUO0NZSR9Gn5i/bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVE9ERWlYVGdybkJhOVE3UTFsSkgwYWZtTDlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny85OWRjY2EtOTYzYS00MDAzLWJmYWYt
YTExNjlhMjg5YzU0LzEvVE9ERWlYVGdybkJhOVE3UTFsSkgwYWZtTDlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny85OWRjY2EtOTYzYS00MDAzLWJmYWYtYTExNjlhMjg5YzU0
LzEvVE9ERWlYVGdybkJhOVE3UTFsSkgwYWZtTDlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAifRj9oK5
bDf3qUjp/Xkjs5jDuinSp0iHFJG6edESBrCIrYpSQOIg9e6JPleF8cl163uJVF4A
4Vn55MQsw+TJ9zkJMPmaSdL0A+lWmleynZnX6XtIEyAZLV6oRSIuzvR6ii+yvmDS
Nw9ZfO2QMmTe/kQyH6KYLzsk1EU3QKFaIboXUv1PGX/G7G4INsbwd35PUMpt5tg+
e1Y22NLwTikI60ECIrlQDaMb/QDW3MB4dxNIiBtZWSPILiZfxdNVewqIVNRi4PNE
GSYgLjfDap1ycUjyTMfvwFaGpxiCPNryHxhUkD7PK12u047djYRiiP1JhIT3XUo4
OTVRALuq//Xkow==
-----END CERTIFICATE-----
Generated at Tue Oct 20 12:27:12 2026 by rpki-client