Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.mft
File: C_TOA4nPk-LVfggvG-xh2oJy__E.mft (raw, json)
Hash identifier: M/StAR3hdC+7wzFixp3sULI/2ldG44snxrH0hXHEnHU=
Subject key identifier: 30:82:57:80:3E:6A:33:F5:9D:2A:64:6C:91:C2:05:C0:09:2D:CD:68
Authority key identifier: 0B:F4:CE:03:89:CF:93:E2:D5:7E:08:2F:1B:EC:61:DA:82:72:FF:F1
Certificate issuer: /CN=0bf4ce0389cf93e2d57e082f1bec61da8272fff1
Certificate serial: 019D375260602771D8CB167ACEA6BEBF4FD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_TOA4nPk-LVfggvG-xh2oJy__E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.mft
Manifest number: 115C
Signing time: Sun 29 Mar 2026 02:00:38 +0000
Manifest this update: Sun 29 Mar 2026 02:00:38 +0000
Manifest next update: Mon 30 Mar 2026 02:00:38 +0000
Files and hashes: 1: C_TOA4nPk-LVfggvG-xh2oJy__E.crl (hash: 3q3PKW8yBvWOemspaCS+QLN/nlmry+pFZPIBcdjDHtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_TOA4nPk-LVfggvG-xh2oJy__E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:60:60:27:71:d8:cb:16:7a:ce:a6:be:bf:4f:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bf4ce0389cf93e2d57e082f1bec61da8272fff1
Validity
Not Before: Mar 29 02:00:38 2026 GMT
Not After : Mar 30 02:00:38 2026 GMT
Subject: CN=308257803e6a33f59d2a646c91c205c0092dcd68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c9:35:bd:58:0c:01:f0:4c:76:a1:dd:fa:d7:
ed:fd:8f:b2:7f:6b:99:fe:09:7c:ba:88:06:e8:c4:
d0:51:59:98:15:57:fb:85:d3:24:1d:4d:e6:8c:69:
32:0d:06:24:9c:2f:a3:a4:a5:3a:30:a3:d9:aa:66:
91:5d:f3:81:da:f6:f7:a3:03:2b:07:50:5c:e1:c5:
c8:bc:aa:af:6c:99:db:29:4c:ed:29:79:14:44:c0:
b3:0d:c6:18:56:b0:6e:85:8a:0f:22:9e:63:73:e1:
20:3f:60:68:dd:f2:39:ef:18:48:02:d5:cb:9b:7d:
91:e7:39:a5:17:da:da:08:49:de:63:b6:96:3e:d2:
5d:8f:4a:c8:24:8d:06:cb:c3:0b:fb:54:e1:e7:44:
1c:4d:6c:bc:27:18:b5:56:5d:51:ce:9b:e0:14:7c:
54:7b:63:30:27:b5:2a:fc:79:28:ed:0a:9e:45:ae:
30:42:25:2a:56:79:97:42:45:13:69:64:22:50:98:
e8:bf:c8:8f:03:46:79:9a:0b:fe:e9:ef:f9:84:bd:
f0:30:83:af:67:95:b6:4e:f8:61:49:6c:2b:51:5b:
61:19:c9:af:20:2e:ef:88:fa:3c:9d:d7:54:40:58:
d6:76:f6:a2:6a:1d:20:83:6b:42:9b:99:a0:66:71:
e2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:82:57:80:3E:6A:33:F5:9D:2A:64:6C:91:C2:05:C0:09:2D:CD:68
X509v3 Authority Key Identifier:
keyid:0B:F4:CE:03:89:CF:93:E2:D5:7E:08:2F:1B:EC:61:DA:82:72:FF:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_TOA4nPk-LVfggvG-xh2oJy__E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:e3:bc:6b:b0:5e:fc:54:3b:f0:ec:d9:db:9d:31:fd:98:b2:
7a:4d:6c:44:72:44:61:22:63:e0:4e:2f:dd:cf:74:7c:27:79:
19:e5:16:a1:36:06:f3:cb:26:9a:86:a0:c0:c2:00:01:9f:b7:
f2:5f:1b:fd:8f:0c:50:89:9c:e7:53:55:57:45:8f:20:41:ad:
7e:6c:3b:2c:8d:2e:25:b2:59:a3:3a:ec:7d:87:a9:b9:2a:97:
65:ac:f7:05:0d:8e:f3:fd:08:c2:7e:2f:ff:9d:46:3a:09:e0:
72:42:c9:c5:12:cb:a4:12:a3:1b:be:8b:d1:7c:73:08:de:65:
55:db:a2:b4:fc:db:a5:70:f7:97:aa:67:a6:65:33:ba:91:80:
e4:10:5f:3f:37:f7:e8:1c:d4:c5:50:b6:2b:71:2e:0f:92:2e:
99:c0:45:6e:bb:c2:c2:e6:84:fc:45:49:dc:d4:51:66:e4:2a:
1a:70:ca:a2:ee:1b:62:59:b1:c5:7f:37:e5:c3:4e:f6:d4:b7:
8e:e6:46:4c:dc:c4:05:73:2f:93:b3:8c:74:56:c9:30:a3:c9:
15:a1:05:63:11:05:13:41:ac:46:2a:1d:51:f2:21:ec:bb:4e:
0e:f2:a6:2e:08:5a:57:a6:30:88:6d:7e:9d:5a:f6:ed:3b:3f:
4e:c4:77:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:51 2026 by rpki-client