Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
File: tokpm8SVhKZFlAwd2H3wr8iqoP0.mft (raw, json)
Hash identifier: KNOdhHbo396d/WF+15Je05R8kVmlr9Ukw6OeG0WT3OQ=
Subject key identifier: 57:94:60:2E:57:E6:17:36:77:CA:9A:B8:77:ED:89:A1:9C:B2:92:B1
Authority key identifier: B6:89:29:9B:C4:95:84:A6:45:94:0C:1D:D8:7D:F0:AF:C8:AA:A0:FD
Certificate issuer: /CN=b689299bc49584a645940c1dd87df0afc8aaa0fd
Certificate serial: 01A12B0DB63DB9E217A923D3D94002474708
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
Manifest number: 162E
Signing time: Sun 11 Oct 2026 13:01:21 +0000
Manifest this update: Sun 11 Oct 2026 13:01:21 +0000
Manifest next update: Mon 12 Oct 2026 13:01:21 +0000
Files and hashes: 1: HJJWsiDjzBz_irl7pQIQoPI3r70.roa (hash: MiTsGuoftnJ+n/jpkv9HxUxKGLPjJtM51AFiqQ8gQdM=)
2: jgYJ-Ic6G5lRmnuwLRqrvftwyxQ.roa (hash: YK3pnpembYJVK3tFHfQ8eIavXzWvYt02q/rGuHr8gGU=)
3: ozI9FqQeFMr6a9EQEWwunUSWNyo.roa (hash: JhSkAeJT7kDK1ZM3fmXCcAHWjB5nY9Twt+Ukh1Zc4vU=)
4: tokpm8SVhKZFlAwd2H3wr8iqoP0.crl (hash: Ykv+hDAJo4CDjF9vp58IdvjaNoTfjNNn0oFMxJ/Q3/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 13:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:0d:b6:3d:b9:e2:17:a9:23:d3:d9:40:02:47:47:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b689299bc49584a645940c1dd87df0afc8aaa0fd
Validity
Not Before: Oct 11 13:01:21 2026 GMT
Not After : Oct 12 13:01:21 2026 GMT
Subject: CN=5794602e57e6173677ca9ab877ed89a19cb292b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:57:a8:1e:cf:4e:df:3b:2a:f7:1e:d4:2e:62:
e4:84:30:57:95:e2:b1:28:28:58:3e:88:3a:ba:0e:
00:42:5f:fb:0f:d6:5f:be:b5:71:62:59:6e:96:9f:
88:91:f6:7e:ba:5f:bd:ab:80:d3:c7:72:42:c3:49:
07:be:e4:48:a8:51:82:f5:f7:b3:e6:4d:26:6c:63:
00:32:e9:5e:36:49:12:52:f4:fe:e5:8b:59:fe:f6:
62:75:29:69:e8:a7:e5:a7:fb:55:a7:e3:87:82:02:
08:27:81:df:85:1f:0b:45:c6:c4:4d:59:68:45:c6:
01:6b:dc:b9:dd:18:76:0c:51:66:ad:75:20:99:a4:
04:7d:09:9d:e0:e6:ec:22:4e:cf:85:ef:2b:63:48:
c8:21:3e:74:bc:48:b9:96:0a:b2:8b:ca:1b:64:df:
77:b4:c2:5b:b9:7a:1e:fc:9f:0c:1a:da:8f:21:93:
53:fa:20:05:f9:02:cb:ef:25:66:2a:f5:3b:3c:29:
45:28:99:da:56:5e:ec:bc:3e:0e:f2:25:ac:a0:6b:
8e:f5:00:43:78:ee:6e:e1:99:24:55:a7:6b:ca:64:
f0:27:7d:6f:a4:69:c2:84:ea:36:bf:9d:24:44:30:
71:42:fc:9a:b1:b4:ab:d7:11:0f:26:a5:8b:b4:7b:
e5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:94:60:2E:57:E6:17:36:77:CA:9A:B8:77:ED:89:A1:9C:B2:92:B1
X509v3 Authority Key Identifier:
keyid:B6:89:29:9B:C4:95:84:A6:45:94:0C:1D:D8:7D:F0:AF:C8:AA:A0:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:68:9d:73:c8:6c:8c:b8:09:30:1b:27:e0:45:fe:f6:1e:c7:
b0:59:3d:11:c4:bd:44:c9:e1:02:ba:cb:02:9c:14:43:2e:aa:
6e:17:a9:95:9c:24:5d:7c:49:cc:24:eb:e0:9d:f9:5a:1a:a4:
0e:f6:84:f7:1e:f1:61:39:e9:2f:c2:10:4e:37:8d:ed:5f:ba:
a9:45:8d:8f:21:8b:43:b8:f4:55:95:35:72:13:d8:76:3a:2a:
1f:d8:fd:13:f9:51:4e:a2:69:95:05:4c:46:d4:d9:ce:46:e3:
94:7b:ac:4d:47:ad:2f:65:5d:c2:5d:15:46:85:62:fb:7c:2f:
56:53:23:5f:88:63:3e:05:54:5f:6d:af:85:1b:b4:4a:e2:2c:
75:b6:7e:a6:2e:a2:62:5a:6f:95:bc:ec:08:20:0c:70:cc:8a:
54:7f:90:0b:39:5c:f5:90:d4:ed:8b:bb:67:05:d7:e2:ef:d8:
36:7d:05:8a:99:ea:6a:3b:36:7b:d1:b8:25:63:73:0f:d6:04:
e7:65:bb:f1:5d:4d:8e:cf:93:d7:3f:c7:45:a0:f4:02:02:e2:
ac:42:df:e8:06:c4:ff:15:df:4d:3e:2d:05:0c:f1:1d:3d:5b:
3c:23:46:f8:ce:f5:58:ff:dc:f1:15:46:88:0a:37:9c:68:58:
56:94:59:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaErDbY9ueIXqSPT2UACR0cIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2ODkyOTliYzQ5NTg0YTY0NTk0MGMxZGQ4N2RmMGFmYzhh
YWEwZmQwHhcNMjYxMDExMTMwMTIxWhcNMjYxMDEyMTMwMTIxWjAzMTEwLwYDVQQD
Eyg1Nzk0NjAyZTU3ZTYxNzM2NzdjYTlhYjg3N2VkODlhMTljYjI5MmIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVeoHs9O3zsq9x7ULmLkhDBXleKx
KChYPog6ug4AQl/7D9ZfvrVxYllulp+IkfZ+ul+9q4DTx3JCw0kHvuRIqFGC9fez
5k0mbGMAMuleNkkSUvT+5YtZ/vZidSlp6Kflp/tVp+OHggIIJ4HfhR8LRcbETVlo
RcYBa9y53Rh2DFFmrXUgmaQEfQmd4ObsIk7Phe8rY0jIIT50vEi5lgqyi8obZN93
tMJbuXoe/J8MGtqPIZNT+iAF+QLL7yVmKvU7PClFKJnaVl7svD4O8iWsoGuO9QBD
eO5u4ZkkVadrymTwJ31vpGnChOo2v50kRDBxQvyasbSr1xEPJqWLtHvlPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFeUYC5X5hc2d8qauHftiaGcspKxMB8GA1UdIwQY
MBaAFLaJKZvElYSmRZQMHdh98K/IqqD9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdG9rcG04U1ZoS1pGbEF3ZDJIM3dyOGlxb1AwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy83Y2E2MWEtY2UzZC00YmFjLTkxMTAt
YzBmM2JhZDk5YTQwLzEvdG9rcG04U1ZoS1pGbEF3ZDJIM3dyOGlxb1AwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy83Y2E2MWEtY2UzZC00YmFjLTkxMTAtYzBmM2JhZDk5YTQw
LzEvdG9rcG04U1ZoS1pGbEF3ZDJIM3dyOGlxb1AwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdGidc8hs
jLgJMBsn4EX+9h7HsFk9EcS9RMnhArrLApwUQy6qbheplZwkXXxJzCTr4J35Whqk
DvaE9x7xYTnpL8IQTjeN7V+6qUWNjyGLQ7j0VZU1chPYdjoqH9j9E/lRTqJplQVM
RtTZzkbjlHusTUetL2Vdwl0VRoVi+3wvVlMjX4hjPgVUX22vhRu0SuIsdbZ+pi6i
YlpvlbzsCCAMcMyKVH+QCzlc9ZDU7Yu7ZwXX4u/YNn0Fipnqajs2e9G4JWNzD9YE
52W78V1Njs+T1z/HRaD0AgLirELf6AbE/xXfTT4tBQzxHT1bPCNG+M71WP/c8RVG
iAo3nGhYVpRZkQ==
-----END CERTIFICATE-----
Generated at Sun Oct 11 19:03:43 2026 by rpki-client