Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
File: tokpm8SVhKZFlAwd2H3wr8iqoP0.mft (raw, json)
Hash identifier: /nJyDCC9AuEtphYacSHH/pIPqKY/8Mbql4oawj2IDzk=
Subject key identifier: 77:D5:2A:98:60:7F:F2:EF:05:C3:2F:B6:D3:BB:F0:C2:87:89:31:3A
Authority key identifier: B6:89:29:9B:C4:95:84:A6:45:94:0C:1D:D8:7D:F0:AF:C8:AA:A0:FD
Certificate issuer: /CN=b689299bc49584a645940c1dd87df0afc8aaa0fd
Certificate serial: 019FA3057574C4AD3EB30120E6DAD12D167F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
Manifest number: 1563
Signing time: Mon 27 Jul 2026 10:01:11 +0000
Manifest this update: Mon 27 Jul 2026 10:01:11 +0000
Manifest next update: Tue 28 Jul 2026 10:01:11 +0000
Files and hashes: 1: HJJWsiDjzBz_irl7pQIQoPI3r70.roa (hash: MiTsGuoftnJ+n/jpkv9HxUxKGLPjJtM51AFiqQ8gQdM=)
2: jgYJ-Ic6G5lRmnuwLRqrvftwyxQ.roa (hash: YK3pnpembYJVK3tFHfQ8eIavXzWvYt02q/rGuHr8gGU=)
3: ozI9FqQeFMr6a9EQEWwunUSWNyo.roa (hash: JhSkAeJT7kDK1ZM3fmXCcAHWjB5nY9Twt+Ukh1Zc4vU=)
4: tokpm8SVhKZFlAwd2H3wr8iqoP0.crl (hash: FrB+bLKQjroa/8Zn7CxWfCPNKe0exSnJYGYKTTPj6FY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:05:75:74:c4:ad:3e:b3:01:20:e6:da:d1:2d:16:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b689299bc49584a645940c1dd87df0afc8aaa0fd
Validity
Not Before: Jul 27 10:01:11 2026 GMT
Not After : Jul 28 10:01:11 2026 GMT
Subject: CN=77d52a98607ff2ef05c32fb6d3bbf0c28789313a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e1:80:eb:1f:7e:b9:8f:0c:01:f6:0c:ea:30:
93:a8:43:ed:85:19:5b:4f:95:06:41:1f:73:4e:a7:
8f:c3:05:f5:2e:ec:f3:55:13:44:01:e4:38:c6:b7:
32:86:2a:f6:61:35:b8:27:9f:95:b5:90:72:61:ac:
a3:52:f2:b4:57:a5:c2:4d:31:24:f1:be:01:b5:fa:
24:0f:4f:67:f5:b8:95:ed:f0:09:e1:36:b5:79:7f:
6f:36:76:ed:d8:8f:40:76:14:70:36:29:be:a6:95:
05:6e:e9:e1:c2:9d:35:7a:7e:eb:c3:ff:a4:f7:08:
c0:47:58:4e:9e:9c:88:1f:29:8e:61:b0:03:f3:53:
6f:41:3b:d0:91:c7:4d:36:e4:86:d2:06:a6:75:23:
98:ea:2d:85:e9:34:68:8f:0e:7d:c2:e6:e3:44:55:
5c:74:f3:eb:e1:f8:7c:88:13:c3:9b:54:a7:4a:d1:
a1:66:f4:58:cf:fc:32:e2:0a:97:4f:6f:28:9a:d4:
65:e6:8c:85:99:e2:0d:13:38:d0:78:c6:87:8e:d7:
15:f5:71:c0:28:e2:08:e3:c7:7f:ff:b9:92:a0:1a:
db:32:14:23:f6:01:ce:c4:f3:28:71:3b:ae:c6:58:
bb:5c:71:61:eb:2f:d6:d9:a2:d1:03:d2:18:e1:77:
e7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:D5:2A:98:60:7F:F2:EF:05:C3:2F:B6:D3:BB:F0:C2:87:89:31:3A
X509v3 Authority Key Identifier:
keyid:B6:89:29:9B:C4:95:84:A6:45:94:0C:1D:D8:7D:F0:AF:C8:AA:A0:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:c4:57:14:59:6f:a9:94:74:c2:60:d5:af:7b:50:cd:f4:54:
34:96:19:91:0c:93:2f:aa:a6:66:53:65:4e:4a:22:bc:fc:f0:
0d:de:9b:2f:52:11:71:9e:ea:e8:92:cb:e2:31:df:83:0d:64:
c5:5a:1f:af:22:94:1c:6b:a9:17:74:21:15:77:f7:07:06:06:
51:d6:08:27:b6:c7:31:d0:d6:9c:49:39:b8:5a:a7:20:be:28:
52:78:d0:0f:a6:d3:ca:44:31:ea:1f:e5:b9:12:07:ef:4c:2b:
58:5b:91:d1:07:9c:80:4d:f1:33:b8:95:15:7b:49:a2:5d:d1:
57:2b:03:69:f6:bb:d3:1e:7b:58:d0:86:26:b7:dd:bc:96:a3:
d1:7d:9d:1d:a6:d1:b5:31:d6:01:6c:7e:7f:40:7a:63:d7:b2:
48:e2:ce:d4:10:8c:d0:b3:08:4a:34:56:47:61:d1:bd:ca:98:
c3:dd:3b:e2:b4:92:13:c3:20:86:78:76:a8:56:01:22:1c:46:
90:8c:60:80:71:d7:48:af:35:3f:61:97:01:65:43:f2:a7:cc:
4d:3c:31:b1:e2:25:5e:bc:fc:03:89:ab:a6:48:63:ef:73:4a:
4c:d5:8b:3d:68:58:45:2b:28:89:c7:4a:c8:4f:3f:a6:43:97:
89:b0:98:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+jBXV0xK0+swEg5trRLRZ/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2ODkyOTliYzQ5NTg0YTY0NTk0MGMxZGQ4N2RmMGFmYzhh
YWEwZmQwHhcNMjYwNzI3MTAwMTExWhcNMjYwNzI4MTAwMTExWjAzMTEwLwYDVQQD
Eyg3N2Q1MmE5ODYwN2ZmMmVmMDVjMzJmYjZkM2JiZjBjMjg3ODkzMTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuGA6x9+uY8MAfYM6jCTqEPthRlb
T5UGQR9zTqePwwX1LuzzVRNEAeQ4xrcyhir2YTW4J5+VtZByYayjUvK0V6XCTTEk
8b4BtfokD09n9biV7fAJ4Ta1eX9vNnbt2I9AdhRwNim+ppUFbunhwp01en7rw/+k
9wjAR1hOnpyIHymOYbAD81NvQTvQkcdNNuSG0gamdSOY6i2F6TRojw59wubjRFVc
dPPr4fh8iBPDm1SnStGhZvRYz/wy4gqXT28omtRl5oyFmeINEzjQeMaHjtcV9XHA
KOII48d//7mSoBrbMhQj9gHOxPMocTuuxli7XHFh6y/W2aLRA9IY4XfnbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHfVKphgf/LvBcMvttO78MKHiTE6MB8GA1UdIwQY
MBaAFLaJKZvElYSmRZQMHdh98K/IqqD9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdG9rcG04U1ZoS1pGbEF3ZDJIM3dyOGlxb1AwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy83Y2E2MWEtY2UzZC00YmFjLTkxMTAt
YzBmM2JhZDk5YTQwLzEvdG9rcG04U1ZoS1pGbEF3ZDJIM3dyOGlxb1AwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy83Y2E2MWEtY2UzZC00YmFjLTkxMTAtYzBmM2JhZDk5YTQw
LzEvdG9rcG04U1ZoS1pGbEF3ZDJIM3dyOGlxb1AwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApsRXFFlv
qZR0wmDVr3tQzfRUNJYZkQyTL6qmZlNlTkoivPzwDd6bL1IRcZ7q6JLL4jHfgw1k
xVofryKUHGupF3QhFXf3BwYGUdYIJ7bHMdDWnEk5uFqnIL4oUnjQD6bTykQx6h/l
uRIH70wrWFuR0QecgE3xM7iVFXtJol3RVysDafa70x57WNCGJrfdvJaj0X2dHabR
tTHWAWx+f0B6Y9eySOLO1BCM0LMISjRWR2HRvcqYw9074rSSE8Mghnh2qFYBIhxG
kIxggHHXSK81P2GXAWVD8qfMTTwxseIlXrz8A4mrpkhj73NKTNWLPWhYRSsoicdK
yE8/pkOXibCYww==
-----END CERTIFICATE-----
Generated at Mon Jul 27 12:47:08 2026 by rpki-client