Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.mft
File: C_TOA4nPk-LVfggvG-xh2oJy__E.mft (raw, json)
Hash identifier: viUmVrMLoSLUds0MrW000zKDR/98HsNYpSGhExcUJC8=
Subject key identifier: D4:5B:F9:BF:E9:C5:8E:1C:22:BA:BB:E5:D3:0B:9E:9C:B5:68:D9:4A
Authority key identifier: 0B:F4:CE:03:89:CF:93:E2:D5:7E:08:2F:1B:EC:61:DA:82:72:FF:F1
Certificate issuer: /CN=0bf4ce0389cf93e2d57e082f1bec61da8272fff1
Certificate serial: 01A001DD3AF86F6A74F9A0E4B5A691004C3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_TOA4nPk-LVfggvG-xh2oJy__E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.mft
Manifest number: 12CE
Signing time: Fri 14 Aug 2026 20:01:10 +0000
Manifest this update: Fri 14 Aug 2026 20:01:10 +0000
Manifest next update: Sat 15 Aug 2026 20:01:10 +0000
Files and hashes: 1: C_TOA4nPk-LVfggvG-xh2oJy__E.crl (hash: M4Y1e5hiFAEW4jyXrAs0aaABPgo7F22k3B47QX2TCxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_TOA4nPk-LVfggvG-xh2oJy__E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:3a:f8:6f:6a:74:f9:a0:e4:b5:a6:91:00:4c:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bf4ce0389cf93e2d57e082f1bec61da8272fff1
Validity
Not Before: Aug 14 20:01:10 2026 GMT
Not After : Aug 15 20:01:10 2026 GMT
Subject: CN=d45bf9bfe9c58e1c22babbe5d30b9e9cb568d94a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:01:f8:75:bb:7b:f1:d3:b0:c5:ef:cc:d4:97:
68:79:8a:73:25:b2:53:d7:74:79:df:14:af:bb:81:
dc:bd:65:83:99:73:47:60:64:d9:16:68:13:d4:4a:
1f:2f:58:cc:fa:dd:07:7d:0d:5c:2e:0e:05:96:d3:
46:00:a8:be:04:06:65:42:d1:d2:1e:4c:af:81:bb:
b3:ba:e6:f5:0b:a0:b2:80:6c:30:57:b2:93:d2:5e:
0d:a9:c0:70:e6:9c:d9:7c:48:b0:46:86:1e:9a:47:
dc:61:07:04:16:c4:ce:83:d2:19:e3:e3:43:75:e3:
80:b4:fd:55:ff:38:d5:7a:60:01:3d:26:52:5b:3a:
ac:cc:4c:ea:3b:c9:69:c8:f7:64:8b:6a:52:6b:29:
cf:10:d1:71:77:98:46:b2:f5:3b:b9:59:98:17:b4:
b8:85:28:e8:47:68:8d:2e:cf:80:05:54:80:74:62:
14:65:b9:7f:a6:ba:ad:77:5d:9a:9c:51:b2:0c:c8:
a6:ff:04:4c:74:cb:86:aa:22:8e:87:f8:63:ae:60:
65:9a:63:2d:2b:23:e0:00:2f:53:63:65:7c:c9:ea:
e1:c6:cd:f0:63:88:da:1b:36:56:74:6c:99:c6:e4:
c0:e4:71:6a:6f:07:f1:17:c8:7c:f5:91:82:0d:49:
e3:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:5B:F9:BF:E9:C5:8E:1C:22:BA:BB:E5:D3:0B:9E:9C:B5:68:D9:4A
X509v3 Authority Key Identifier:
keyid:0B:F4:CE:03:89:CF:93:E2:D5:7E:08:2F:1B:EC:61:DA:82:72:FF:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_TOA4nPk-LVfggvG-xh2oJy__E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:3c:44:c4:c7:91:8d:e1:12:c2:ba:df:bd:0b:98:56:c1:5e:
67:64:cf:f4:0e:32:d9:e5:4d:48:0f:52:e0:6c:5d:7b:e8:0d:
d4:ec:62:55:88:67:73:ad:5f:f0:9f:8d:25:f8:b4:42:3c:37:
ee:23:49:22:b3:6a:72:96:3f:b7:2b:5f:94:d4:21:28:00:a7:
d8:42:9c:5a:65:5f:23:1e:af:bc:7b:55:c8:b7:57:a9:cd:10:
06:af:8e:f8:fb:e3:de:6b:44:35:10:6c:d7:a6:ee:69:2c:13:
64:79:bc:4c:98:6a:a0:75:1f:79:6f:d8:03:38:3d:ca:01:a8:
75:16:b7:33:4e:35:55:d0:11:a7:fd:32:11:8a:40:6a:0e:4e:
e8:39:47:87:4d:4d:db:2d:ee:95:9e:e6:f1:58:ec:29:99:fa:
c5:78:81:34:a4:bc:4a:ac:78:a3:0a:49:88:97:cb:86:9c:1e:
2e:df:84:15:c7:dc:15:f7:fa:32:37:e0:be:41:f1:fa:2e:0f:
d4:55:9d:aa:ff:83:42:4d:d3:71:fa:27:e5:e1:27:b6:ad:15:
92:70:f0:cb:4b:c9:73:34:b4:47:15:71:49:31:05:37:2e:e9:
df:5d:89:ff:61:bc:c2:aa:4b:01:99:fb:0d:12:8b:d2:f2:8f:
bd:36:94:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:29:43 2026 by rpki-client