Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
File: tokpm8SVhKZFlAwd2H3wr8iqoP0.mft (raw, json)
Hash identifier: r/G/nY3HXdZC4PrTkGW1WrWT4c7dFS6wirOW6MnFp/k=
Subject key identifier: 58:EA:7B:85:8C:48:A5:4A:52:68:61:F2:27:D9:62:40:91:FD:C8:7D
Authority key identifier: B6:89:29:9B:C4:95:84:A6:45:94:0C:1D:D8:7D:F0:AF:C8:AA:A0:FD
Certificate issuer: /CN=b689299bc49584a645940c1dd87df0afc8aaa0fd
Certificate serial: 019DB2B406A8DA98FB0172A26C558007648E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
Manifest number: 1462
Signing time: Wed 22 Apr 2026 01:00:35 +0000
Manifest this update: Wed 22 Apr 2026 01:00:35 +0000
Manifest next update: Thu 23 Apr 2026 01:00:35 +0000
Files and hashes: 1: HJJWsiDjzBz_irl7pQIQoPI3r70.roa (hash: MiTsGuoftnJ+n/jpkv9HxUxKGLPjJtM51AFiqQ8gQdM=)
2: jgYJ-Ic6G5lRmnuwLRqrvftwyxQ.roa (hash: YK3pnpembYJVK3tFHfQ8eIavXzWvYt02q/rGuHr8gGU=)
3: ozI9FqQeFMr6a9EQEWwunUSWNyo.roa (hash: JhSkAeJT7kDK1ZM3fmXCcAHWjB5nY9Twt+Ukh1Zc4vU=)
4: tokpm8SVhKZFlAwd2H3wr8iqoP0.crl (hash: 6ZfzBVu0MrRxtdM4OvNSM6FCnaxqfulrwcOsDTRFGuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 21:56:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b2:b4:06:a8:da:98:fb:01:72:a2:6c:55:80:07:64:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b689299bc49584a645940c1dd87df0afc8aaa0fd
Validity
Not Before: Apr 22 01:00:35 2026 GMT
Not After : Apr 23 01:00:35 2026 GMT
Subject: CN=58ea7b858c48a54a526861f227d9624091fdc87d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e1:a6:9b:f9:0f:93:8d:9b:c8:56:81:0b:e8:
15:ee:1d:ea:7f:e8:0f:12:6e:22:bd:dc:60:fb:94:
ff:cc:da:71:95:2a:02:79:bf:98:f0:00:a7:be:ff:
8a:a8:84:ba:fd:12:8d:fd:73:b1:09:83:44:19:f0:
4f:31:75:00:5c:e0:b8:79:1d:c9:a1:0b:06:9b:92:
f3:b0:f8:93:f4:ce:9d:e8:36:ad:a8:74:92:e4:c9:
89:54:20:64:54:d7:46:08:3e:ef:46:18:d8:ef:62:
36:c9:f7:f6:17:85:de:00:87:bb:51:db:20:92:04:
6e:01:c8:3c:b2:85:f3:d8:30:fb:e6:cb:8c:11:ec:
de:a3:33:97:55:30:de:15:12:40:f3:52:7b:69:6f:
03:0b:ed:b3:1a:f5:7e:ea:1e:15:ae:09:67:83:f0:
23:a6:99:17:7b:fc:bc:5b:28:e1:cc:f0:ad:cd:fc:
94:a2:c4:88:55:44:77:3e:af:e8:21:92:5a:9e:30:
11:45:e4:26:55:2f:f4:62:d8:a1:17:2a:e4:3c:5c:
a1:73:d4:5a:39:d8:83:6a:98:b2:15:87:a5:cc:bc:
07:09:5f:ee:34:fd:d4:33:6f:c9:b3:15:f7:72:30:
98:62:1c:17:e5:b4:c5:bf:c6:db:6a:9d:f4:df:b1:
bd:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:EA:7B:85:8C:48:A5:4A:52:68:61:F2:27:D9:62:40:91:FD:C8:7D
X509v3 Authority Key Identifier:
keyid:B6:89:29:9B:C4:95:84:A6:45:94:0C:1D:D8:7D:F0:AF:C8:AA:A0:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:9c:0a:85:d8:39:c7:5c:0e:61:58:c1:10:6f:96:b6:a0:3e:
4d:c3:f4:9e:de:50:12:a4:38:f5:42:d2:db:8a:ec:6c:00:4e:
53:0d:b1:8c:73:08:9c:79:a7:c9:c1:bf:83:d6:69:59:dc:1e:
7f:fc:b8:e4:55:0f:8b:3c:54:e8:80:c5:e2:88:da:54:a7:81:
53:30:ae:a3:fa:97:c6:40:4b:ba:62:d9:bc:ef:46:33:44:f9:
45:da:42:3f:4d:0f:b4:67:e6:44:37:14:33:04:46:38:07:ce:
e0:0d:0c:df:e2:aa:4e:56:35:c3:70:b8:bd:ba:34:39:75:50:
c0:6a:02:95:d8:82:ac:05:72:df:43:63:51:a6:6c:85:11:0c:
50:93:0e:c0:3a:c8:6e:1a:34:6c:31:a6:ef:49:c2:ff:98:83:
53:05:60:1b:b9:0d:f1:62:4a:17:58:d3:fa:f1:46:49:8e:8d:
2a:65:54:90:5f:ec:bb:1e:42:47:d7:27:ba:88:01:00:fc:56:
c9:1c:45:c7:98:35:78:73:2b:7a:48:fd:e5:63:4a:0d:34:1b:
0b:35:ea:de:61:54:5f:f7:08:dc:51:b8:89:c8:3e:fa:4a:61:
c6:0d:31:ac:e5:be:47:49:fd:12:2f:3a:b2:fd:d9:38:71:47:
74:d1:6f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 03:17:13 2026 by rpki-client