Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.mft
File: C_TOA4nPk-LVfggvG-xh2oJy__E.mft (raw, json)
Hash identifier: xGfv7YLot1I9DOA0BK93uFqukxNAt+pNESv1l+yMVyw=
Subject key identifier: D7:C8:52:AD:E3:B7:CA:23:E0:4B:6E:2B:88:C9:0D:58:84:C7:6E:EB
Authority key identifier: 0B:F4:CE:03:89:CF:93:E2:D5:7E:08:2F:1B:EC:61:DA:82:72:FF:F1
Certificate issuer: /CN=0bf4ce0389cf93e2d57e082f1bec61da8272fff1
Certificate serial: 019F1830B21E564DBD78CF4A018FDC375A20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_TOA4nPk-LVfggvG-xh2oJy__E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.mft
Manifest number: 1255
Signing time: Tue 30 Jun 2026 11:01:12 +0000
Manifest this update: Tue 30 Jun 2026 11:01:12 +0000
Manifest next update: Wed 01 Jul 2026 11:01:12 +0000
Files and hashes: 1: C_TOA4nPk-LVfggvG-xh2oJy__E.crl (hash: D+RcfCG3taG8sPAAzY/h45VnJ93s+ygLfBpN7BMLHH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_TOA4nPk-LVfggvG-xh2oJy__E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 11:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:30:b2:1e:56:4d:bd:78:cf:4a:01:8f:dc:37:5a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bf4ce0389cf93e2d57e082f1bec61da8272fff1
Validity
Not Before: Jun 30 11:01:12 2026 GMT
Not After : Jul 1 11:01:12 2026 GMT
Subject: CN=d7c852ade3b7ca23e04b6e2b88c90d5884c76eeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ff:40:71:c3:0a:ed:49:45:5c:c8:75:1b:e1:
85:41:79:c5:95:81:26:fd:dd:0d:7e:bd:e4:d7:aa:
0c:fd:00:48:99:cf:74:c4:c9:35:74:3c:f9:a2:e6:
26:4d:74:95:42:12:79:e7:04:95:f4:a5:d4:ab:0d:
f1:48:e7:46:54:03:73:7a:51:7c:8c:a3:fa:4c:65:
ee:cf:db:ec:b3:bf:88:a6:dc:30:c3:c5:fb:a9:da:
eb:be:1c:f9:93:51:32:9c:25:d2:1f:9e:57:db:17:
0e:c7:9e:54:aa:14:23:ca:fa:b0:06:63:5c:da:3e:
56:5c:59:a1:6a:b1:3c:e6:41:e2:f3:d2:83:2c:c1:
7e:b3:84:0d:48:20:16:29:ee:34:a5:b8:92:a5:0b:
18:c4:63:05:c9:76:1a:b8:3b:48:1b:44:2a:4f:83:
65:f3:a8:e5:88:39:45:fa:03:0d:cd:11:df:2f:96:
0e:29:14:54:d5:33:7a:87:66:45:88:64:e8:60:8e:
ad:4e:d3:05:a1:a3:cb:66:bf:c7:3f:f5:71:20:64:
71:6b:bf:21:91:b3:84:5f:b1:3c:4e:92:c8:42:be:
cc:cd:a9:a9:6f:03:ce:63:73:9b:0e:51:0f:f2:a1:
3a:08:d9:c0:d2:28:e6:07:a8:86:46:28:ce:d6:55:
3c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:C8:52:AD:E3:B7:CA:23:E0:4B:6E:2B:88:C9:0D:58:84:C7:6E:EB
X509v3 Authority Key Identifier:
keyid:0B:F4:CE:03:89:CF:93:E2:D5:7E:08:2F:1B:EC:61:DA:82:72:FF:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_TOA4nPk-LVfggvG-xh2oJy__E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:21:ba:13:df:d6:aa:1b:53:af:56:b7:e3:25:1c:51:8e:31:
f1:cd:35:a9:1b:10:27:00:37:60:af:89:c0:fc:d8:db:37:89:
3d:fe:43:f6:7d:95:16:55:4e:18:81:73:c5:cd:51:b7:8f:36:
21:c3:d3:34:b8:4c:92:7f:c5:14:02:9c:2d:46:42:ac:27:51:
92:2b:11:3b:65:33:cf:8c:ba:7d:18:aa:a7:c1:94:f9:5c:67:
ce:5c:2e:93:40:28:35:30:35:4a:89:63:21:b6:80:2d:4b:a8:
fc:17:46:15:40:39:8f:ef:eb:bd:81:48:93:61:e9:2b:c5:54:
04:d2:da:fe:17:37:17:f7:36:85:2d:b2:d8:89:0c:42:73:ca:
cc:54:d8:d4:b0:76:63:27:85:5b:64:3a:10:a9:e0:c6:71:19:
11:26:c1:73:e8:c9:8c:a4:69:84:8c:41:a7:43:26:2d:4f:ae:
e5:5d:98:2c:d6:d5:84:f2:79:66:38:90:c8:bb:31:07:0e:0f:
94:6e:28:ee:0c:2d:92:6d:2a:2c:4f:49:de:3b:f5:76:9d:16:
e0:f8:48:fc:9e:aa:d1:00:78:35:1a:03:a1:39:a4:15:55:a5:
59:e9:ec:12:bc:0b:d6:aa:5b:7c:8b:ca:65:f3:1e:e0:24:0d:
55:ed:30:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:07 2026 by rpki-client