Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/9bacf8-146c-4b63-9d36-8200b86603b1/1/TOkDeb2NBDdLOt7wYNUa4hVxCTU.mft
File: TOkDeb2NBDdLOt7wYNUa4hVxCTU.mft (raw, json)
Hash identifier: M/fCzwPhBNPkpiOMGaW0JcJ5EnnEtP72wqnlC8ifvsg=
Subject key identifier: DF:46:E6:C9:61:56:46:0C:D3:45:60:BD:E3:B6:7D:D6:81:61:35:C1
Authority key identifier: 4C:E9:03:79:BD:8D:04:37:4B:3A:DE:F0:60:D5:1A:E2:15:71:09:35
Certificate issuer: /CN=4ce90379bd8d04374b3adef060d51ae215710935
Certificate serial: 01A11304D84AEE51E126142FF1453C0FBBAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TOkDeb2NBDdLOt7wYNUa4hVxCTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9bacf8-146c-4b63-9d36-8200b86603b1/1/TOkDeb2NBDdLOt7wYNUa4hVxCTU.mft
Manifest number: 0476
Signing time: Tue 06 Oct 2026 21:00:46 +0000
Manifest this update: Tue 06 Oct 2026 21:00:46 +0000
Manifest next update: Wed 07 Oct 2026 21:00:46 +0000
Files and hashes: 1: EjuIE4enXZzinM4ZfgsSD3gwxuY.roa (hash: VmAOnFMFZNZ7v7h3b1tL7nh4Drf7aU0G1qxfw7anYLc=)
2: TOkDeb2NBDdLOt7wYNUa4hVxCTU.crl (hash: bfJrGPAnAwyaE529WQSvb3QeDn3eI2HKcy3ZQeK9Tr0=)
3: ksdLr_cpg0SNdbhzGPEUMaDjaa0.roa (hash: aWZAiEXDI8uHWbww+kMMTpEPGkhJJ3i3CwUVKl+KHtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9bacf8-146c-4b63-9d36-8200b86603b1/1/TOkDeb2NBDdLOt7wYNUa4hVxCTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/9bacf8-146c-4b63-9d36-8200b86603b1/1/TOkDeb2NBDdLOt7wYNUa4hVxCTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TOkDeb2NBDdLOt7wYNUa4hVxCTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 21:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:13:04:d8:4a:ee:51:e1:26:14:2f:f1:45:3c:0f:bb:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce90379bd8d04374b3adef060d51ae215710935
Validity
Not Before: Oct 6 21:00:46 2026 GMT
Not After : Oct 7 21:00:46 2026 GMT
Subject: CN=df46e6c96156460cd34560bde3b67dd6816135c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8b:4d:6b:49:a1:1e:b5:b5:fd:db:4b:d9:47:
a6:cb:85:ff:87:6b:83:ca:8f:74:34:fb:b2:45:cc:
79:64:0c:b5:ba:a2:5e:ea:19:54:71:eb:f8:86:2f:
c5:d4:8a:2c:07:a1:e4:6f:30:d9:96:3a:73:ab:30:
0e:81:82:42:e6:0d:e4:2e:3f:87:90:45:4b:77:e9:
7f:e2:58:94:ad:de:96:c2:93:2d:40:ce:6f:b3:be:
d0:4d:fd:b7:07:66:60:65:b6:f6:c0:1c:15:5c:23:
3c:98:2c:8e:40:72:ca:98:06:32:68:ab:11:db:3a:
57:fc:03:63:09:b5:ef:6e:45:b3:c2:f6:c0:e9:4a:
be:eb:c1:cc:5a:91:80:19:32:3a:fa:22:7b:70:04:
75:e3:6c:70:6c:97:ed:9d:44:30:86:ed:ba:6e:b5:
ae:cc:07:f9:96:d1:f9:bf:d3:8f:3b:35:23:db:af:
9e:4e:73:b9:39:9e:cb:ee:67:09:ed:84:cd:10:21:
5f:59:88:96:5e:ca:ce:2d:d0:cc:5c:ed:76:77:39:
5b:9d:b2:8a:f0:7d:f4:17:5b:8d:c1:2c:0d:87:5b:
a7:b6:3d:d2:2a:72:93:6f:cf:0f:c1:4e:a3:50:c1:
9a:80:5b:7b:95:05:7d:99:f9:2a:39:a4:57:e7:04:
4b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:46:E6:C9:61:56:46:0C:D3:45:60:BD:E3:B6:7D:D6:81:61:35:C1
X509v3 Authority Key Identifier:
keyid:4C:E9:03:79:BD:8D:04:37:4B:3A:DE:F0:60:D5:1A:E2:15:71:09:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOkDeb2NBDdLOt7wYNUa4hVxCTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9bacf8-146c-4b63-9d36-8200b86603b1/1/TOkDeb2NBDdLOt7wYNUa4hVxCTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9bacf8-146c-4b63-9d36-8200b86603b1/1/TOkDeb2NBDdLOt7wYNUa4hVxCTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:b0:f6:f5:dd:fb:69:c6:cb:a9:a7:d5:2e:63:f0:45:ee:76:
c9:e3:2b:55:fa:91:ff:20:bf:91:dd:df:11:48:3c:46:4b:a8:
20:fd:b0:44:9f:89:ef:86:f1:2c:76:b5:4e:3e:e9:cf:1a:46:
c3:48:7c:e8:50:60:86:bf:6d:b8:d2:b8:bd:5b:84:f6:8f:f1:
d1:f0:08:4b:b3:c3:1f:e1:92:e7:c5:9b:08:99:e8:46:08:be:
d9:4d:33:ba:19:6d:d3:2a:8a:c2:c2:f5:97:e7:7b:eb:67:cd:
59:fc:a7:21:a3:9d:57:de:25:58:c6:17:ef:01:95:01:58:83:
9c:a7:d9:33:20:46:79:91:4f:29:b4:ef:4b:e5:aa:cf:d7:2b:
b6:6e:6e:2a:c2:1c:c8:29:f1:85:3f:46:11:ed:f2:8c:78:f7:
c7:81:a3:42:0c:36:32:63:75:54:d7:27:e2:07:a0:50:9f:8a:
b7:6d:48:32:5f:16:7b:cc:58:b3:c3:60:c2:2d:f9:19:58:0f:
b8:20:84:10:71:e1:cc:a4:06:49:34:44:81:8c:25:0c:1c:76:
4c:10:c0:7c:39:1c:08:37:09:7e:a8:ee:3f:78:45:3c:09:d7:
76:19:ee:85:8b:8a:05:7e:41:03:1d:6b:63:06:35:de:f0:de:
5e:b8:17:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 07:53:46 2026 by rpki-client