Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.mft
File: C_TOA4nPk-LVfggvG-xh2oJy__E.mft (raw, json)
Hash identifier: 6x9exxBtgOM/n9Te5tBN1nPjzpBGuYTeDQ9GQy94muE=
Subject key identifier: 63:52:EB:C3:AB:E2:D6:5B:19:71:B9:88:29:42:24:0E:AE:EF:E3:56
Authority key identifier: 0B:F4:CE:03:89:CF:93:E2:D5:7E:08:2F:1B:EC:61:DA:82:72:FF:F1
Certificate issuer: /CN=0bf4ce0389cf93e2d57e082f1bec61da8272fff1
Certificate serial: 019E30726EC13660C441EB4BC7366101EE14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_TOA4nPk-LVfggvG-xh2oJy__E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.mft
Manifest number: 11DD
Signing time: Sat 16 May 2026 11:01:06 +0000
Manifest this update: Sat 16 May 2026 11:01:06 +0000
Manifest next update: Sun 17 May 2026 11:01:06 +0000
Files and hashes: 1: C_TOA4nPk-LVfggvG-xh2oJy__E.crl (hash: rMa4sGb+/tKTgHdPOYsh07r+hKaXb9D+qTsX3gBhZj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_TOA4nPk-LVfggvG-xh2oJy__E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:72:6e:c1:36:60:c4:41:eb:4b:c7:36:61:01:ee:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bf4ce0389cf93e2d57e082f1bec61da8272fff1
Validity
Not Before: May 16 11:01:06 2026 GMT
Not After : May 17 11:01:06 2026 GMT
Subject: CN=6352ebc3abe2d65b1971b9882942240eaeefe356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f2:12:05:8b:5d:c2:7c:a5:9c:4e:15:8d:2b:
5e:3e:7e:5d:16:47:c2:74:28:a7:5f:08:fd:c9:62:
fd:b6:fc:8f:e0:aa:e3:df:4c:b4:a4:15:2f:6f:e1:
4a:65:d4:cf:a9:cc:ef:8f:cb:46:c1:39:ab:46:06:
bd:f3:50:fc:99:92:e2:46:28:9e:73:14:07:68:19:
6a:10:be:59:35:7e:bf:26:fa:02:75:67:6a:5e:68:
7b:bb:44:5a:23:27:cd:eb:03:01:04:b8:a4:3f:6c:
f4:d0:eb:1c:17:52:e2:95:99:90:5a:75:cc:6a:99:
1a:30:22:12:45:b8:7c:9d:4d:c7:65:25:ed:fc:79:
92:3e:37:fe:8c:a2:1f:e1:92:29:aa:e6:4d:9f:5d:
e9:51:f8:0a:6b:e7:bb:40:c8:33:37:ae:1e:90:57:
65:7d:35:ce:81:6e:33:1a:31:4c:fe:14:ac:41:66:
72:ca:23:0c:fc:1b:91:38:90:d9:b6:e8:00:aa:74:
3f:f9:0e:4a:6a:85:a8:58:a8:e7:91:68:97:35:07:
73:6b:f2:81:35:62:00:23:9a:e3:b4:bf:a2:82:79:
eb:72:b1:9e:21:ef:23:d9:96:cd:ba:c1:23:70:d5:
df:a4:0c:e3:cb:73:10:38:d5:b9:87:b5:90:00:2c:
8c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:52:EB:C3:AB:E2:D6:5B:19:71:B9:88:29:42:24:0E:AE:EF:E3:56
X509v3 Authority Key Identifier:
keyid:0B:F4:CE:03:89:CF:93:E2:D5:7E:08:2F:1B:EC:61:DA:82:72:FF:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_TOA4nPk-LVfggvG-xh2oJy__E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:fe:96:89:fd:a9:ff:44:d4:1b:80:44:4e:3e:ed:b5:f8:2a:
bb:48:56:cd:71:ff:eb:8c:d1:e1:54:95:24:10:91:a2:25:04:
5d:b6:63:c6:53:e3:c7:9d:6e:79:b2:f6:11:ec:a7:e0:6a:b8:
d3:b0:9e:26:e0:05:4b:f8:80:ad:39:6e:11:d5:62:82:9e:cb:
9d:d6:94:a7:b6:eb:ba:9f:23:2a:b6:e1:91:a8:4b:e0:9f:e2:
67:eb:81:12:c1:2d:79:3b:a8:b0:45:b3:9e:9f:ef:62:48:db:
e9:68:96:58:e5:6e:e9:a5:6f:83:3e:95:10:de:ee:cc:11:21:
cd:5a:0a:8a:a8:27:36:c6:04:8a:e4:4e:da:a6:ff:b4:b8:34:
0c:1c:ee:48:02:e6:8d:3e:5f:0a:b1:b2:d1:f1:d3:b5:98:b0:
9a:d0:52:d0:f2:a0:6c:29:58:dd:bb:5c:6c:e0:4b:24:eb:e0:
27:d4:af:76:e4:62:f5:90:8e:ac:bc:c4:0f:3c:0e:99:86:d2:
59:ca:36:f5:1a:e5:a3:9b:20:99:35:45:21:a4:1f:5a:04:ec:
cd:a0:a5:ee:04:84:15:b2:a0:c1:8e:e9:e0:c2:44:49:d6:c7:
b7:61:4d:62:25:e6:6b:53:cb:cc:b5:50:46:16:f8:4e:2d:15:
1e:2f:ac:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:21 2026 by rpki-client