Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.mft
File: totCki04fFePpXaSSH8qGQaFibo.mft (raw, json)
Hash identifier: bQ5xmpiJ5Pvzn5xRchmaIt6usZOAPia51aAlGm5Mirk=
Subject key identifier: AB:49:14:63:EA:CB:63:23:95:0C:56:05:EF:13:71:6C:13:3D:A6:37
Authority key identifier: B6:8B:42:92:2D:38:7C:57:8F:A5:76:92:48:7F:2A:19:06:85:89:BA
Certificate issuer: /CN=b68b42922d387c578fa57692487f2a19068589ba
Certificate serial: 019D37F7159377DAE6767E4205C938908D9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/totCki04fFePpXaSSH8qGQaFibo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 05:00:32 +0000
Manifest this update: Sun 29 Mar 2026 05:00:32 +0000
Manifest next update: Mon 30 Mar 2026 05:00:32 +0000
Files and hashes: 1: kTdybG-Kfglf-A6Co4UkfB2W_s4.roa (hash: CUsIkIUnZkWXcbfe+QGR3qcpsv5V6ygh7qnKWL+glCA=)
2: totCki04fFePpXaSSH8qGQaFibo.crl (hash: Iu0TOW8Xm4JYzv8gS1ulumgHM1cdLUz6vSwnQrmnSFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.mft
rsync://rpki.ripe.net/repository/DEFAULT/totCki04fFePpXaSSH8qGQaFibo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:15:93:77:da:e6:76:7e:42:05:c9:38:90:8d:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b68b42922d387c578fa57692487f2a19068589ba
Validity
Not Before: Mar 29 05:00:32 2026 GMT
Not After : Mar 30 05:00:32 2026 GMT
Subject: CN=ab491463eacb6323950c5605ef13716c133da637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a1:15:80:f0:85:b4:c5:d4:7b:f9:03:76:9c:
5b:ba:d8:a7:f7:51:5b:5d:b7:89:00:76:6c:4a:7c:
45:31:e3:d3:53:3d:4d:b6:c7:17:f8:4c:33:19:a2:
f8:90:32:06:96:9b:1a:65:31:52:8f:c0:bf:e2:e9:
53:74:11:cc:16:a8:81:de:c7:5b:9a:4f:2a:51:21:
3d:a6:dd:e3:f7:54:e4:b1:14:3a:cc:df:b3:70:dc:
38:d3:c1:ab:a9:92:05:dd:b1:e6:12:c8:54:ae:3d:
af:8c:a1:c1:c2:e4:5d:c5:50:e0:2d:18:33:bb:4e:
82:67:79:a4:b8:6d:76:ed:33:6c:7b:21:2b:ed:bd:
77:c9:14:e3:2f:5c:8c:ce:2f:41:63:24:25:c9:28:
09:af:8b:d8:06:42:c2:06:50:99:93:25:c1:46:54:
15:c0:71:89:9d:91:c9:11:19:d3:34:11:16:e1:fb:
35:fe:b6:c2:07:ef:98:05:08:99:ea:ed:15:9a:7c:
bf:2a:9c:38:b5:46:73:8a:ef:3f:4a:ca:68:37:90:
93:75:86:b1:90:32:b4:f7:4e:c6:c4:51:2c:dc:f9:
31:28:40:22:d5:c9:41:6e:5e:1a:36:3b:65:81:c6:
82:f8:aa:4f:35:ba:20:93:16:fd:06:8b:18:48:80:
e0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:49:14:63:EA:CB:63:23:95:0C:56:05:EF:13:71:6C:13:3D:A6:37
X509v3 Authority Key Identifier:
keyid:B6:8B:42:92:2D:38:7C:57:8F:A5:76:92:48:7F:2A:19:06:85:89:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/totCki04fFePpXaSSH8qGQaFibo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:9e:6d:b8:f0:3f:ac:4a:e7:dc:2c:6f:05:f3:4f:02:a6:2a:
5f:ba:ce:5d:dc:0f:e4:fb:67:8b:5f:19:f0:62:5a:9a:77:51:
89:17:dc:ce:2f:92:69:e7:ea:19:0d:d4:6b:e3:67:19:9b:d3:
04:72:d3:de:a7:ae:34:c4:e2:12:d5:5e:90:dd:ef:d5:03:d7:
33:8e:0a:41:9b:fe:01:4d:75:3b:73:2a:9d:25:be:00:81:8a:
3e:a5:58:2a:48:c2:2f:f1:51:a2:d9:8a:fb:e5:f0:b0:0b:60:
88:79:73:ed:0b:4b:68:c3:26:c2:5d:bb:80:ea:e7:3b:8b:41:
e5:65:09:5d:f0:74:96:9e:87:00:86:72:e4:52:8e:df:07:d2:
d8:02:50:db:4c:6e:16:70:f8:9f:e7:92:92:b8:ce:b7:d6:fd:
ef:7a:ca:31:d0:63:e5:df:e6:17:4c:01:8f:0d:c3:4e:17:22:
93:7e:95:9a:32:4d:a8:63:bc:62:aa:9d:25:33:c4:95:20:86:
ce:a3:b8:e7:55:20:70:c4:82:b9:e4:f9:c5:bd:67:c7:b5:3d:
4f:06:62:42:9a:68:f0:d8:20:c9:95:12:51:d4:48:de:4a:0c:
bd:10:8f:b6:98:17:bd:a6:e9:2f:05:30:75:fc:eb:28:21:19:
b6:1e:84:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:37 2026 by rpki-client