Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9bacf8-146c-4b63-9d36-8200b86603b1/1/TOkDeb2NBDdLOt7wYNUa4hVxCTU.mft
File: TOkDeb2NBDdLOt7wYNUa4hVxCTU.mft (raw, json)
Hash identifier: 2P8t8aA2I8SePM7p09eyxCofj6JTaQiG3icfcN6O1Xw=
Subject key identifier: 85:2F:48:A0:F1:09:05:E0:3C:93:3F:4C:B7:56:62:E6:E7:C8:DD:FB
Authority key identifier: 4C:E9:03:79:BD:8D:04:37:4B:3A:DE:F0:60:D5:1A:E2:15:71:09:35
Certificate issuer: /CN=4ce90379bd8d04374b3adef060d51ae215710935
Certificate serial: 019E2B8315C188594B0D82F3F3609BB4E9B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TOkDeb2NBDdLOt7wYNUa4hVxCTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9bacf8-146c-4b63-9d36-8200b86603b1/1/TOkDeb2NBDdLOt7wYNUa4hVxCTU.mft
Manifest number: 02F5
Signing time: Fri 15 May 2026 12:01:11 +0000
Manifest this update: Fri 15 May 2026 12:01:11 +0000
Manifest next update: Sat 16 May 2026 12:01:11 +0000
Files and hashes: 1: EjuIE4enXZzinM4ZfgsSD3gwxuY.roa (hash: VmAOnFMFZNZ7v7h3b1tL7nh4Drf7aU0G1qxfw7anYLc=)
2: TOkDeb2NBDdLOt7wYNUa4hVxCTU.crl (hash: QbHOko0eQ1bPDkUY1RCUFAoOJpmoq01KUopdfgc5sOw=)
3: ksdLr_cpg0SNdbhzGPEUMaDjaa0.roa (hash: aWZAiEXDI8uHWbww+kMMTpEPGkhJJ3i3CwUVKl+KHtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9bacf8-146c-4b63-9d36-8200b86603b1/1/TOkDeb2NBDdLOt7wYNUa4hVxCTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/9bacf8-146c-4b63-9d36-8200b86603b1/1/TOkDeb2NBDdLOt7wYNUa4hVxCTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TOkDeb2NBDdLOt7wYNUa4hVxCTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2b:83:15:c1:88:59:4b:0d:82:f3:f3:60:9b:b4:e9:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce90379bd8d04374b3adef060d51ae215710935
Validity
Not Before: May 15 12:01:11 2026 GMT
Not After : May 16 12:01:11 2026 GMT
Subject: CN=852f48a0f10905e03c933f4cb75662e6e7c8ddfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:3a:00:ee:d9:49:b4:85:93:60:03:e9:c2:b0:
6e:e0:72:ed:b6:c1:16:0a:e1:49:7e:ec:9b:f7:b0:
7c:49:78:49:0f:61:70:1d:27:0c:a7:05:ce:50:45:
1b:58:2b:62:9d:de:29:ad:f3:fb:e4:37:ae:34:c5:
b9:0c:e1:2b:0c:24:2a:bd:46:70:09:f3:bb:72:0d:
e3:e4:db:8d:32:21:24:77:a6:92:36:d7:9d:81:b2:
fc:fe:45:0d:70:32:31:72:95:00:ad:8d:70:f7:0f:
0f:12:a2:74:2a:83:4d:fe:12:ff:c8:7b:44:13:03:
e4:e8:44:9a:26:7f:21:60:e0:bb:91:fa:ff:85:5b:
76:66:e6:cb:ca:f7:0c:59:f7:dc:6e:86:c6:07:dc:
88:87:03:0c:99:8a:63:60:26:43:cd:78:95:e4:ec:
b1:2d:44:1f:60:48:ba:31:09:76:ec:a2:8a:e5:2a:
02:fb:c1:fe:bf:e4:83:dc:7b:32:70:bc:e9:55:ce:
8a:06:e0:38:0b:96:75:c0:43:1a:80:9a:08:17:04:
17:47:30:4b:70:33:de:48:7b:64:b2:dc:b0:79:5c:
f1:2f:1d:f7:d2:55:fb:7b:d4:20:83:80:64:64:90:
f5:8c:ab:8b:37:14:14:e4:b1:76:87:09:85:3e:9e:
e9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:2F:48:A0:F1:09:05:E0:3C:93:3F:4C:B7:56:62:E6:E7:C8:DD:FB
X509v3 Authority Key Identifier:
keyid:4C:E9:03:79:BD:8D:04:37:4B:3A:DE:F0:60:D5:1A:E2:15:71:09:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOkDeb2NBDdLOt7wYNUa4hVxCTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9bacf8-146c-4b63-9d36-8200b86603b1/1/TOkDeb2NBDdLOt7wYNUa4hVxCTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9bacf8-146c-4b63-9d36-8200b86603b1/1/TOkDeb2NBDdLOt7wYNUa4hVxCTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:52:8c:f0:d1:27:48:fd:69:0b:9e:c8:b9:4d:db:7f:96:79:
0a:4b:ed:d9:e4:f1:1d:12:0d:c9:8b:df:68:b3:30:f7:86:58:
99:41:2d:8a:5d:79:a6:21:9e:a4:68:25:b0:14:6c:d5:56:1a:
d1:33:b1:89:43:3b:3b:dc:2b:a6:88:99:c8:d5:4d:7c:4f:5f:
8f:13:95:70:ec:fb:1e:29:e9:49:f9:47:95:cb:40:58:a1:57:
0a:40:f4:dd:d1:7a:b3:8d:53:14:1d:4e:81:58:d5:fb:13:cc:
f2:da:c1:86:c1:1f:b1:25:cb:be:67:4d:ca:33:48:27:f7:ef:
ba:43:a8:02:d3:3a:0e:35:10:a7:de:07:1b:e0:06:c1:b6:39:
cd:61:3e:e1:b9:d7:f3:87:d5:1e:f3:04:d6:3c:6d:a3:a3:85:
73:cf:32:19:ec:f9:dd:a7:12:e5:05:0a:c8:09:2b:02:ac:9d:
13:0b:78:70:76:c6:76:d7:29:8a:fa:2c:c2:03:be:57:ab:f3:
c9:2a:6c:52:a1:7e:81:7b:8c:97:c9:71:0a:fd:8d:3a:87:52:
e2:5e:43:3b:9f:e5:b3:0b:dc:bd:30:ba:80:e7:f5:a1:f8:64:
f3:9d:6b:47:bf:ce:35:db:08:39:5e:f6:f1:e9:d8:0c:a2:ed:
ec:e0:36:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 19:03:43 2026 by rpki-client