Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9bacf8-146c-4b63-9d36-8200b86603b1/1/TOkDeb2NBDdLOt7wYNUa4hVxCTU.mft
File: TOkDeb2NBDdLOt7wYNUa4hVxCTU.mft (raw, json)
Hash identifier: i55caAsP2oExyfVTnET6bo8BO+AN4/ixqK39u1kRmYE=
Subject key identifier: 2C:2F:0F:62:50:1E:95:82:93:29:77:5F:9F:04:22:85:82:28:B5:92
Authority key identifier: 4C:E9:03:79:BD:8D:04:37:4B:3A:DE:F0:60:D5:1A:E2:15:71:09:35
Certificate issuer: /CN=4ce90379bd8d04374b3adef060d51ae215710935
Certificate serial: 01A002B898C6EB34F93E3AC7910EA8719DDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TOkDeb2NBDdLOt7wYNUa4hVxCTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9bacf8-146c-4b63-9d36-8200b86603b1/1/TOkDeb2NBDdLOt7wYNUa4hVxCTU.mft
Manifest number: 03E9
Signing time: Sat 15 Aug 2026 00:00:47 +0000
Manifest this update: Sat 15 Aug 2026 00:00:47 +0000
Manifest next update: Sun 16 Aug 2026 00:00:47 +0000
Files and hashes: 1: EjuIE4enXZzinM4ZfgsSD3gwxuY.roa (hash: VmAOnFMFZNZ7v7h3b1tL7nh4Drf7aU0G1qxfw7anYLc=)
2: TOkDeb2NBDdLOt7wYNUa4hVxCTU.crl (hash: ne3IKVofBi11XnuWK4oSnR9naB/r4pn1ciZO/32oQRc=)
3: ksdLr_cpg0SNdbhzGPEUMaDjaa0.roa (hash: aWZAiEXDI8uHWbww+kMMTpEPGkhJJ3i3CwUVKl+KHtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9bacf8-146c-4b63-9d36-8200b86603b1/1/TOkDeb2NBDdLOt7wYNUa4hVxCTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/9bacf8-146c-4b63-9d36-8200b86603b1/1/TOkDeb2NBDdLOt7wYNUa4hVxCTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TOkDeb2NBDdLOt7wYNUa4hVxCTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:b8:98:c6:eb:34:f9:3e:3a:c7:91:0e:a8:71:9d:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce90379bd8d04374b3adef060d51ae215710935
Validity
Not Before: Aug 15 00:00:47 2026 GMT
Not After : Aug 16 00:00:47 2026 GMT
Subject: CN=2c2f0f62501e95829329775f9f0422858228b592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:14:fb:9c:a4:04:82:78:bb:35:a2:5f:be:cd:
76:8b:ae:78:8f:36:f8:9e:4e:0a:63:65:f7:ee:9e:
86:17:0d:e2:36:d0:25:ad:25:e9:a3:09:cf:56:24:
0e:58:68:f3:1d:7a:e6:b9:6b:2f:32:a8:80:73:57:
6c:ba:90:cb:45:a0:30:08:14:87:9e:b7:bb:31:c8:
1d:e7:04:7c:0f:b8:15:0d:32:79:3d:92:40:5e:cf:
b5:06:ba:bb:8f:a6:fb:88:9c:de:24:bf:16:39:bc:
37:12:1c:bc:e4:4a:b3:c1:90:72:97:9c:56:3a:0c:
d4:c6:51:c1:4b:b3:1b:f5:7f:41:c8:d2:df:c3:78:
f7:53:b4:93:55:3c:3b:60:1b:cd:08:22:10:ab:94:
44:4f:0f:0b:02:28:80:1a:d0:1f:e0:1e:dd:30:49:
f0:ec:25:f0:52:f5:96:e2:dc:56:67:94:0f:f3:24:
9d:06:71:c4:cc:70:4c:1c:de:5a:6d:ab:67:b3:ea:
bb:4f:16:f8:43:ff:7a:35:09:24:29:7d:42:0d:03:
46:3b:70:cd:1b:bf:18:84:8f:0f:d7:64:12:97:ed:
8e:47:ba:7d:37:78:04:01:aa:c5:1d:3d:cf:97:87:
d2:af:e6:15:c4:cf:9c:94:02:a7:75:96:b4:4b:c4:
0e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:2F:0F:62:50:1E:95:82:93:29:77:5F:9F:04:22:85:82:28:B5:92
X509v3 Authority Key Identifier:
keyid:4C:E9:03:79:BD:8D:04:37:4B:3A:DE:F0:60:D5:1A:E2:15:71:09:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOkDeb2NBDdLOt7wYNUa4hVxCTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9bacf8-146c-4b63-9d36-8200b86603b1/1/TOkDeb2NBDdLOt7wYNUa4hVxCTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9bacf8-146c-4b63-9d36-8200b86603b1/1/TOkDeb2NBDdLOt7wYNUa4hVxCTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:84:55:86:2c:b0:52:60:b9:0a:34:e1:ef:1b:50:93:ef:d4:
f5:49:c1:a1:18:0f:a5:ce:4a:b9:f7:f8:f1:6b:ec:99:48:37:
c8:3a:2d:db:56:94:36:0a:98:e5:1c:96:e4:dc:62:be:ed:7b:
2c:33:82:56:19:be:53:61:b6:35:4a:82:98:23:06:6f:87:af:
18:19:84:fc:ba:18:a3:fd:ac:13:20:a2:bd:a2:80:ae:17:a2:
8e:39:dd:b6:23:e9:dc:db:28:4a:f5:01:05:b6:2c:40:06:d4:
bd:ad:4d:f1:93:e0:cf:f2:98:eb:62:c3:a7:23:f4:5a:56:33:
9d:fb:6d:df:1b:0f:08:f5:b7:a5:2a:97:b4:dc:ce:60:9d:66:
fe:63:e1:18:0a:14:f8:fe:5f:5d:24:1d:d7:ae:07:b1:75:0b:
9d:ef:e5:2f:f9:08:74:ce:3b:f2:fc:5e:87:4c:fe:69:ae:5c:
cb:71:39:99:77:82:f7:c7:7c:5c:a6:4c:f0:2c:52:46:c5:a1:
5b:ee:1a:02:f0:98:ba:d3:cd:34:68:1a:2a:d6:d8:99:dc:fa:
cb:03:87:30:c9:f0:d2:da:4d:60:6c:40:f1:02:4a:f1:35:dc:
ef:3d:16:fb:9e:88:05:45:ef:5b:e3:a9:32:cf:8f:2b:4c:4c:
da:ee:dc:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:28:57 2026 by rpki-client