Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
File: tokpm8SVhKZFlAwd2H3wr8iqoP0.mft (raw, json)
Hash identifier: TxYkswOzeh7F1yTdWzhjaJX7Y5k3ZdArgvI7W7Wuw3g=
Subject key identifier: 65:93:42:22:C5:A0:17:F3:B1:0F:46:26:45:F4:C4:34:52:B1:04:FE
Authority key identifier: B6:89:29:9B:C4:95:84:A6:45:94:0C:1D:D8:7D:F0:AF:C8:AA:A0:FD
Certificate issuer: /CN=b689299bc49584a645940c1dd87df0afc8aaa0fd
Certificate serial: 019DB0C5A5279FCE41FE90C753C4D58C70CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
Manifest number: 1461
Signing time: Tue 21 Apr 2026 16:00:36 +0000
Manifest this update: Tue 21 Apr 2026 16:00:36 +0000
Manifest next update: Wed 22 Apr 2026 16:00:36 +0000
Files and hashes: 1: HJJWsiDjzBz_irl7pQIQoPI3r70.roa (hash: MiTsGuoftnJ+n/jpkv9HxUxKGLPjJtM51AFiqQ8gQdM=)
2: jgYJ-Ic6G5lRmnuwLRqrvftwyxQ.roa (hash: YK3pnpembYJVK3tFHfQ8eIavXzWvYt02q/rGuHr8gGU=)
3: ozI9FqQeFMr6a9EQEWwunUSWNyo.roa (hash: JhSkAeJT7kDK1ZM3fmXCcAHWjB5nY9Twt+Ukh1Zc4vU=)
4: tokpm8SVhKZFlAwd2H3wr8iqoP0.crl (hash: HfXKIVdWNjHJdSZPIS2D3Tux9wZu2RnENLOKjpnST0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 16:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b0:c5:a5:27:9f:ce:41:fe:90:c7:53:c4:d5:8c:70:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b689299bc49584a645940c1dd87df0afc8aaa0fd
Validity
Not Before: Apr 21 16:00:36 2026 GMT
Not After : Apr 22 16:00:36 2026 GMT
Subject: CN=65934222c5a017f3b10f462645f4c43452b104fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:8b:b2:03:b3:76:01:6b:1d:89:56:e1:af:cb:
6b:f1:89:dd:2d:85:ad:54:c4:22:08:c3:06:02:df:
65:23:ca:40:08:64:02:cb:00:9f:6f:33:c0:12:fe:
01:c9:4f:b5:0c:50:93:a2:40:ba:cd:35:33:84:fd:
68:c4:77:f0:5d:ed:47:e2:c8:00:24:c2:d1:cd:ae:
eb:f0:8c:15:f7:f1:a9:64:d0:39:d6:e5:a5:cf:95:
47:02:f3:c4:0e:a6:e2:18:a1:a9:e4:dd:3b:a3:29:
37:f1:9a:4e:d3:a9:e1:22:3a:f3:5c:ea:ce:9b:37:
41:7e:ce:87:f7:9d:e7:e1:18:56:25:9e:58:ce:31:
d3:da:71:af:fc:77:85:63:1a:3f:99:0e:69:c5:45:
ba:4b:fa:ac:9f:45:df:52:e5:f8:4a:03:5a:9a:3e:
26:1e:cf:e8:ed:c7:44:93:77:78:04:ff:93:33:87:
be:e6:19:7e:6e:29:77:be:0a:fb:da:57:c7:d7:1e:
33:1b:92:b8:c3:df:10:2d:b0:4e:3b:5e:bb:c0:f5:
e0:4d:32:52:08:f1:8c:10:b8:22:fd:63:7c:59:0e:
2e:86:66:df:e2:e0:09:b4:bc:a9:54:b2:ba:c7:d3:
40:6f:ea:f0:44:6a:7f:3d:0a:72:26:96:a1:87:c9:
03:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:93:42:22:C5:A0:17:F3:B1:0F:46:26:45:F4:C4:34:52:B1:04:FE
X509v3 Authority Key Identifier:
keyid:B6:89:29:9B:C4:95:84:A6:45:94:0C:1D:D8:7D:F0:AF:C8:AA:A0:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:be:e1:66:10:07:77:b2:46:f8:90:01:fc:87:57:34:6c:6a:
22:54:e8:aa:cd:f0:07:27:6b:10:26:78:f0:77:05:dc:37:10:
c4:06:5e:c6:f6:c7:78:a6:9a:99:40:f6:4c:b7:1a:32:ac:62:
84:10:89:41:24:d7:d7:6d:8b:b1:82:83:4b:a8:73:f4:93:ac:
41:e8:47:aa:48:d8:5f:d2:37:12:94:62:5b:67:23:ec:f2:52:
3e:80:7d:44:86:e2:54:a9:f4:ec:07:ab:d7:15:60:07:8a:17:
05:40:91:79:46:04:81:ab:cf:61:9d:bc:bb:f0:b3:e1:05:08:
95:5f:6e:d1:d6:d9:4a:f3:38:30:73:24:9d:1f:67:91:55:06:
1c:e3:59:24:26:1d:35:2d:83:e9:fb:b9:f8:7a:47:4f:89:46:
69:c9:61:6a:f8:c0:16:c7:02:c0:26:45:fc:c9:2a:b0:fb:08:
16:c5:cd:c8:22:05:7f:52:ab:e5:21:9c:bf:fa:f4:83:f7:60:
15:02:b2:bf:4b:7a:88:7d:f6:58:6f:00:74:75:f6:80:08:84:
ec:9f:31:03:e1:66:f4:bd:b8:0d:c4:31:fb:7b:a3:aa:1a:e9:
8e:e8:ce:04:d7:78:f2:2f:14:1a:b0:a5:12:2d:23:73:b2:f9:
98:4b:e1:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 02:14:56 2026 by rpki-client