Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
File: tokpm8SVhKZFlAwd2H3wr8iqoP0.mft (raw, json)
Hash identifier: Y2GYWB1dfxbNKZcAoWxSy5sEiyeyqTBvTLdIYfXEmcw=
Subject key identifier: 94:AE:86:E1:94:1F:9B:29:3D:B3:E0:EE:53:E1:4B:8C:1B:F7:7A:70
Authority key identifier: B6:89:29:9B:C4:95:84:A6:45:94:0C:1D:D8:7D:F0:AF:C8:AA:A0:FD
Certificate issuer: /CN=b689299bc49584a645940c1dd87df0afc8aaa0fd
Certificate serial: 019CC90766E8A8B85001D7D3A75C4946E13F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
Manifest number: 13E9
Signing time: Sat 07 Mar 2026 16:00:31 +0000
Manifest this update: Sat 07 Mar 2026 16:00:31 +0000
Manifest next update: Sun 08 Mar 2026 16:00:31 +0000
Files and hashes: 1: HJJWsiDjzBz_irl7pQIQoPI3r70.roa (hash: MiTsGuoftnJ+n/jpkv9HxUxKGLPjJtM51AFiqQ8gQdM=)
2: jgYJ-Ic6G5lRmnuwLRqrvftwyxQ.roa (hash: YK3pnpembYJVK3tFHfQ8eIavXzWvYt02q/rGuHr8gGU=)
3: ozI9FqQeFMr6a9EQEWwunUSWNyo.roa (hash: JhSkAeJT7kDK1ZM3fmXCcAHWjB5nY9Twt+Ukh1Zc4vU=)
4: tokpm8SVhKZFlAwd2H3wr8iqoP0.crl (hash: E+FfHOESiv06fWrCDd7C/hKJtEovBM/Xl9MhY/Fcc2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 10:49:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c9:07:66:e8:a8:b8:50:01:d7:d3:a7:5c:49:46:e1:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b689299bc49584a645940c1dd87df0afc8aaa0fd
Validity
Not Before: Mar 7 16:00:31 2026 GMT
Not After : Mar 8 16:00:31 2026 GMT
Subject: CN=94ae86e1941f9b293db3e0ee53e14b8c1bf77a70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b5:b4:c0:3c:b6:39:cf:a1:79:7c:c9:c1:53:
d7:a3:c9:4a:29:46:0f:32:d3:b1:bb:af:82:56:f8:
29:e5:5f:bc:c8:3e:33:aa:9b:96:c0:e9:a8:20:2c:
be:f7:9a:8d:18:6f:2c:33:b6:34:15:1d:40:e9:69:
b1:c2:36:d3:01:c7:89:a7:9c:0c:7f:0a:85:b3:2c:
3b:af:ee:3e:63:a9:f9:42:3e:1f:cc:06:d1:d1:23:
fc:73:fc:74:b7:8c:86:80:4f:0a:b4:bf:9b:65:15:
98:ab:18:77:93:36:07:ba:89:bd:1d:a9:eb:94:3a:
6e:5f:1c:b3:1c:f4:ea:ce:62:d8:05:2c:41:ec:88:
d1:fd:8f:3e:2d:13:a4:14:ab:35:c0:fc:98:e7:15:
eb:8e:3d:49:c5:31:53:e9:fd:f9:b1:f8:a7:60:df:
a6:3c:ea:72:3b:1a:71:3a:fe:00:34:81:d1:e2:33:
f3:3d:94:46:b5:02:7e:68:88:7e:e9:a2:5e:24:ed:
16:15:7b:40:35:28:ae:14:08:a3:9f:f5:e5:2b:3f:
30:a3:fa:3d:f5:8f:cf:cf:ac:6d:bc:6e:e7:ec:5f:
75:86:a5:70:47:f9:8b:98:b4:a0:8e:79:cc:50:ff:
19:a9:3e:81:1e:0b:7e:7c:fe:88:79:0c:db:1f:9b:
75:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:AE:86:E1:94:1F:9B:29:3D:B3:E0:EE:53:E1:4B:8C:1B:F7:7A:70
X509v3 Authority Key Identifier:
keyid:B6:89:29:9B:C4:95:84:A6:45:94:0C:1D:D8:7D:F0:AF:C8:AA:A0:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:5b:77:b3:be:99:34:5e:90:9d:d9:af:a6:89:c5:8a:dc:2a:
59:62:3b:6a:61:98:01:78:35:bc:e9:69:be:28:9f:a9:49:eb:
08:3e:83:1e:2c:ab:65:10:f9:68:3b:bc:cb:58:8a:ca:60:fd:
3a:23:75:ff:e8:1d:42:9a:1d:87:67:6e:c8:c3:35:46:7c:94:
3e:04:a5:83:31:01:fb:49:e1:92:16:a3:49:93:ec:b1:7a:51:
25:18:88:eb:4e:5d:ae:a7:74:b3:e0:fb:ff:68:22:f5:22:c6:
97:c9:ee:f2:d7:2f:aa:2e:5b:60:35:39:c3:97:ad:bb:66:ae:
0b:c8:5d:2d:17:2c:22:26:9d:50:3f:0c:78:29:1e:89:e6:72:
24:10:fa:6e:d5:9e:57:25:23:ff:52:e5:6d:32:b0:12:ed:d5:
e9:62:af:1a:4c:41:96:95:41:f6:de:f2:22:85:c0:21:15:b3:
ed:8d:b2:0d:92:22:3a:c8:92:24:da:c0:cb:c6:85:04:20:00:
66:b4:b4:cd:b7:21:73:26:69:30:eb:86:14:6b:86:c0:67:b8:
fa:c7:47:b3:91:68:87:3d:03:0d:17:43:a4:80:a0:17:ce:87:
5a:04:71:34:3c:9e:4d:9d:97:de:89:b4:42:f2:27:2c:07:3d:
0e:8d:8d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 18:22:14 2026 by rpki-client