Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
File: tokpm8SVhKZFlAwd2H3wr8iqoP0.mft (raw, json)
Hash identifier: iDuyz9T/zw3j+KM0MiRpOng+n2eMRUqTYGe7yQ9eUQc=
Subject key identifier: EC:33:A3:28:51:3D:C1:BB:0C:E0:CA:7E:F0:91:AE:CE:5B:D3:BA:F9
Authority key identifier: B6:89:29:9B:C4:95:84:A6:45:94:0C:1D:D8:7D:F0:AF:C8:AA:A0:FD
Certificate issuer: /CN=b689299bc49584a645940c1dd87df0afc8aaa0fd
Certificate serial: 019EB9587FB7689FC0F997B7536F137DD33D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
Manifest number: 14EA
Signing time: Fri 12 Jun 2026 01:00:45 +0000
Manifest this update: Fri 12 Jun 2026 01:00:45 +0000
Manifest next update: Sat 13 Jun 2026 01:00:45 +0000
Files and hashes: 1: HJJWsiDjzBz_irl7pQIQoPI3r70.roa (hash: MiTsGuoftnJ+n/jpkv9HxUxKGLPjJtM51AFiqQ8gQdM=)
2: jgYJ-Ic6G5lRmnuwLRqrvftwyxQ.roa (hash: YK3pnpembYJVK3tFHfQ8eIavXzWvYt02q/rGuHr8gGU=)
3: ozI9FqQeFMr6a9EQEWwunUSWNyo.roa (hash: JhSkAeJT7kDK1ZM3fmXCcAHWjB5nY9Twt+Ukh1Zc4vU=)
4: tokpm8SVhKZFlAwd2H3wr8iqoP0.crl (hash: Mpn91fU3VfiBaaT9zPsQiaegeJ9tyZhTi+AAaljMSzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:58:7f:b7:68:9f:c0:f9:97:b7:53:6f:13:7d:d3:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b689299bc49584a645940c1dd87df0afc8aaa0fd
Validity
Not Before: Jun 12 01:00:45 2026 GMT
Not After : Jun 13 01:00:45 2026 GMT
Subject: CN=ec33a328513dc1bb0ce0ca7ef091aece5bd3baf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:29:fd:cb:aa:13:3c:4a:fc:af:99:4b:1a:b1:
d0:80:54:7d:f8:e0:0c:69:40:db:47:d8:e5:69:88:
de:fa:88:a8:cc:a2:b5:7a:cc:bc:dc:c1:ff:90:98:
c8:ff:6e:93:f5:bd:8e:5b:fe:a5:57:a3:1e:88:af:
36:9d:2e:54:80:46:43:17:83:ce:a7:30:11:f8:7c:
fd:5c:02:a6:de:85:16:63:2f:b4:ba:ea:5a:ec:4b:
d4:40:e5:f7:11:74:55:53:0c:d1:4c:96:2b:46:0a:
97:63:db:ff:d5:ca:9c:4a:ad:51:dd:d5:7a:c7:34:
cc:86:ad:d2:ae:87:3d:dc:b0:d4:8b:f5:10:c2:2e:
a9:ba:84:1f:3a:e5:a3:f0:70:df:86:7a:00:29:34:
c2:d9:89:29:40:01:15:f0:47:f0:61:8b:8b:93:d0:
a6:89:b2:12:a2:d6:20:55:95:c7:9e:7a:2f:85:9e:
71:ee:0e:2d:2c:0c:00:e4:9f:8f:0c:86:28:8e:6a:
d8:9f:7b:6d:08:f2:6f:68:fa:c1:b7:66:51:52:82:
51:cc:db:6b:a5:51:b8:2d:a4:f0:56:d2:43:83:96:
d7:f2:a6:9b:bd:e9:b5:b1:8c:ce:57:3c:42:44:83:
3a:f9:f8:f4:96:18:9c:b6:06:c1:5d:cd:34:7a:24:
66:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:33:A3:28:51:3D:C1:BB:0C:E0:CA:7E:F0:91:AE:CE:5B:D3:BA:F9
X509v3 Authority Key Identifier:
keyid:B6:89:29:9B:C4:95:84:A6:45:94:0C:1D:D8:7D:F0:AF:C8:AA:A0:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:4c:e7:48:e2:5b:4a:d7:e8:20:7f:b4:ad:d1:95:ff:c3:86:
9c:62:cb:01:db:9f:fe:89:c8:59:a8:bb:84:45:f2:f9:65:b1:
e0:08:9b:ae:0f:f5:68:b3:a2:a8:1a:42:47:68:0d:d2:b7:c6:
96:6f:73:15:ad:6b:c3:88:dd:4b:da:1f:5a:e6:86:76:d3:8f:
4d:72:ee:ea:9a:46:f8:67:f5:85:f4:a7:af:11:7d:84:0f:09:
5d:3a:6c:a0:61:58:ff:52:6e:bf:11:4b:20:66:12:fc:dc:ba:
07:3b:d1:0a:4e:1b:63:b0:7e:39:fb:8c:6e:47:db:50:75:50:
93:6b:dd:bc:f3:50:e7:01:74:ed:0f:00:c4:34:b0:4a:21:7a:
49:48:d5:5c:bf:8f:7e:64:d7:3c:75:a6:92:dd:f9:12:17:75:
06:12:e2:5d:7f:e3:cd:aa:f7:c3:4d:09:23:f6:5a:b0:c1:57:
93:78:43:6a:cc:1f:e4:77:3b:13:fc:d0:f9:aa:0c:2f:27:4a:
a0:67:33:8e:1d:cb:e8:98:2b:b9:cb:91:62:e5:36:d4:3e:a1:
3d:ca:9a:1a:96:e0:6a:ab:8d:23:83:94:88:34:18:18:4b:6e:
88:93:31:bc:1f:41:be:78:55:3c:10:e5:99:0c:db:72:b6:11:
0d:86:21:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ65WH+3aJ/A+Ze3U28TfdM9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2ODkyOTliYzQ5NTg0YTY0NTk0MGMxZGQ4N2RmMGFmYzhh
YWEwZmQwHhcNMjYwNjEyMDEwMDQ1WhcNMjYwNjEzMDEwMDQ1WjAzMTEwLwYDVQQD
EyhlYzMzYTMyODUxM2RjMWJiMGNlMGNhN2VmMDkxYWVjZTViZDNiYWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSn9y6oTPEr8r5lLGrHQgFR9+OAM
aUDbR9jlaYje+oiozKK1esy83MH/kJjI/26T9b2OW/6lV6MeiK82nS5UgEZDF4PO
pzAR+Hz9XAKm3oUWYy+0uupa7EvUQOX3EXRVUwzRTJYrRgqXY9v/1cqcSq1R3dV6
xzTMhq3Sroc93LDUi/UQwi6puoQfOuWj8HDfhnoAKTTC2YkpQAEV8EfwYYuLk9Cm
ibISotYgVZXHnnovhZ5x7g4tLAwA5J+PDIYojmrYn3ttCPJvaPrBt2ZRUoJRzNtr
pVG4LaTwVtJDg5bX8qabvem1sYzOVzxCRIM6+fj0lhictgbBXc00eiRmYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOwzoyhRPcG7DODKfvCRrs5b07r5MB8GA1UdIwQY
MBaAFLaJKZvElYSmRZQMHdh98K/IqqD9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdG9rcG04U1ZoS1pGbEF3ZDJIM3dyOGlxb1AwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy83Y2E2MWEtY2UzZC00YmFjLTkxMTAt
YzBmM2JhZDk5YTQwLzEvdG9rcG04U1ZoS1pGbEF3ZDJIM3dyOGlxb1AwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy83Y2E2MWEtY2UzZC00YmFjLTkxMTAtYzBmM2JhZDk5YTQw
LzEvdG9rcG04U1ZoS1pGbEF3ZDJIM3dyOGlxb1AwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp0znSOJb
StfoIH+0rdGV/8OGnGLLAduf/onIWai7hEXy+WWx4Aibrg/1aLOiqBpCR2gN0rfG
lm9zFa1rw4jdS9ofWuaGdtOPTXLu6ppG+Gf1hfSnrxF9hA8JXTpsoGFY/1JuvxFL
IGYS/Ny6BzvRCk4bY7B+OfuMbkfbUHVQk2vdvPNQ5wF07Q8AxDSwSiF6SUjVXL+P
fmTXPHWmkt35Ehd1BhLiXX/jzar3w00JI/ZasMFXk3hDaswf5Hc7E/zQ+aoMLydK
oGczjh3L6JgrucuRYuU21D6hPcqaGpbgaquNI4OUiDQYGEtuiJMxvB9BvnhVPBDl
mQzbcrYRDYYhTA==
-----END CERTIFICATE-----
Generated at Fri Jun 12 07:29:16 2026 by rpki-client