Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9bacf8-146c-4b63-9d36-8200b86603b1/1/TOkDeb2NBDdLOt7wYNUa4hVxCTU.mft
File: TOkDeb2NBDdLOt7wYNUa4hVxCTU.mft (raw, json)
Hash identifier: vIqDmfEkBzXYhpgaxxwXu9+R3C1/40N5cadZiROPHvg=
Subject key identifier: CD:84:5F:2C:81:17:61:6D:BE:0B:F1:7D:CB:30:A6:74:2F:AC:6D:B3
Authority key identifier: 4C:E9:03:79:BD:8D:04:37:4B:3A:DE:F0:60:D5:1A:E2:15:71:09:35
Certificate issuer: /CN=4ce90379bd8d04374b3adef060d51ae215710935
Certificate serial: 019D382E49DE4D8F036662BC662623602BB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TOkDeb2NBDdLOt7wYNUa4hVxCTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9bacf8-146c-4b63-9d36-8200b86603b1/1/TOkDeb2NBDdLOt7wYNUa4hVxCTU.mft
Manifest number: 0277
Signing time: Sun 29 Mar 2026 06:00:50 +0000
Manifest this update: Sun 29 Mar 2026 06:00:50 +0000
Manifest next update: Mon 30 Mar 2026 06:00:50 +0000
Files and hashes: 1: EjuIE4enXZzinM4ZfgsSD3gwxuY.roa (hash: VmAOnFMFZNZ7v7h3b1tL7nh4Drf7aU0G1qxfw7anYLc=)
2: TOkDeb2NBDdLOt7wYNUa4hVxCTU.crl (hash: E0zxrayj0MX6OvbfJqbLhYJdhxLNGrwFO9LcTuSxbGQ=)
3: ksdLr_cpg0SNdbhzGPEUMaDjaa0.roa (hash: aWZAiEXDI8uHWbww+kMMTpEPGkhJJ3i3CwUVKl+KHtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9bacf8-146c-4b63-9d36-8200b86603b1/1/TOkDeb2NBDdLOt7wYNUa4hVxCTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/9bacf8-146c-4b63-9d36-8200b86603b1/1/TOkDeb2NBDdLOt7wYNUa4hVxCTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TOkDeb2NBDdLOt7wYNUa4hVxCTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:49:de:4d:8f:03:66:62:bc:66:26:23:60:2b:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce90379bd8d04374b3adef060d51ae215710935
Validity
Not Before: Mar 29 06:00:50 2026 GMT
Not After : Mar 30 06:00:50 2026 GMT
Subject: CN=cd845f2c8117616dbe0bf17dcb30a6742fac6db3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:78:c1:4f:0c:16:f3:28:21:f6:01:e4:2b:cd:
3c:36:cd:40:50:ad:52:65:f4:b4:0c:36:4e:98:97:
3e:24:f8:54:6b:86:e3:b9:ff:ab:2d:e8:cb:ee:a5:
39:21:e5:7c:89:7e:24:5f:3c:84:4e:e5:1e:5d:ab:
4c:4a:fd:39:37:43:47:ed:ed:42:ab:4e:ab:e2:ac:
b6:d8:97:bd:92:df:e9:15:83:a8:d1:da:f9:10:51:
13:98:e1:d3:8d:eb:91:ca:32:47:14:ae:4a:79:c5:
ee:c7:19:4a:4b:c7:a8:9b:a8:54:ab:b8:e0:20:70:
f7:a1:d6:48:0d:fa:fc:7f:8a:32:95:e2:21:c7:05:
28:10:33:27:fe:dc:19:bb:cb:e0:22:73:d2:20:2b:
a3:97:77:67:f5:51:a0:46:c0:df:7a:d6:da:55:0a:
a5:fb:47:2b:64:3e:e7:50:f8:03:20:4f:cb:39:1a:
7e:03:1c:01:2d:6c:95:62:58:98:9d:d9:7a:b7:0e:
16:07:a7:30:e1:fe:d5:22:44:97:67:2e:3d:d4:a1:
a9:36:15:1b:52:a4:fc:01:f4:b6:2e:de:dc:05:8d:
0e:92:2f:d9:8e:12:79:ea:1b:63:0b:1f:60:d0:e5:
2e:9b:09:f7:15:a2:b2:a5:21:86:2a:5a:e9:1f:9c:
c3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:84:5F:2C:81:17:61:6D:BE:0B:F1:7D:CB:30:A6:74:2F:AC:6D:B3
X509v3 Authority Key Identifier:
keyid:4C:E9:03:79:BD:8D:04:37:4B:3A:DE:F0:60:D5:1A:E2:15:71:09:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOkDeb2NBDdLOt7wYNUa4hVxCTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9bacf8-146c-4b63-9d36-8200b86603b1/1/TOkDeb2NBDdLOt7wYNUa4hVxCTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9bacf8-146c-4b63-9d36-8200b86603b1/1/TOkDeb2NBDdLOt7wYNUa4hVxCTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:c0:c4:03:ad:09:63:32:56:d0:97:9c:d1:01:84:7f:08:3a:
30:74:ea:fe:14:db:e9:87:5f:06:c9:68:fb:e8:b1:cb:7e:01:
8d:a2:e1:82:dc:0c:24:96:3a:3d:9a:ce:1f:2d:bd:84:e5:50:
ba:e2:f1:d5:1d:60:cf:26:d4:54:84:7c:2f:9f:8d:6a:47:df:
e1:c1:b3:15:4b:24:58:ef:91:ca:7e:a8:a8:61:a9:bf:d6:07:
f6:90:52:3c:25:d5:57:d8:11:b8:7c:c1:be:c4:1c:32:f9:cb:
9c:d0:5b:d1:3f:5d:9c:38:16:ba:25:19:49:a7:d7:64:4a:86:
80:36:5a:66:48:76:29:38:9b:87:a4:72:76:af:31:5f:f2:0b:
4f:97:b5:25:ac:d6:d4:bb:88:db:07:67:d7:9a:7d:85:91:b4:
3c:31:3b:5d:d9:23:77:62:29:e2:50:96:99:5e:bd:17:8d:79:
b3:50:b7:7c:08:a9:28:bc:1a:ec:b0:38:23:dc:8d:be:28:8a:
b7:55:06:fc:34:a3:8f:9c:ea:de:3f:8a:cd:30:32:ea:30:c4:
a1:67:f5:c7:bd:df:d5:89:b0:b4:b9:cb:d4:5a:29:9d:d3:0f:
e0:e8:45:24:1b:2a:79:1d:a1:8c:e4:df:ec:bb:4e:69:e6:78:
a3:b4:4d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:16 2026 by rpki-client