Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c5c595-2673-4d5f-8a85-ae8c81f96f42/1/TOSIxkAcj16WnhXWRlH7Sy0tzfc.mft
File: TOSIxkAcj16WnhXWRlH7Sy0tzfc.mft (raw, json)
Hash identifier: TOPlGfYAs9OP/0mb7z+bGVCKq8RBfahWpNceFn9lbNU=
Subject key identifier: 95:AC:D6:5F:29:BB:E5:37:F0:F3:78:D5:00:16:F1:51:44:98:8E:A2
Authority key identifier: 4C:E4:88:C6:40:1C:8F:5E:96:9E:15:D6:46:51:FB:4B:2D:2D:CD:F7
Certificate issuer: /CN=4ce488c6401c8f5e969e15d64651fb4b2d2dcdf7
Certificate serial: 019D265FECF4483D8F061B12D89EDB0EAE07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TOSIxkAcj16WnhXWRlH7Sy0tzfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c5c595-2673-4d5f-8a85-ae8c81f96f42/1/TOSIxkAcj16WnhXWRlH7Sy0tzfc.mft
Manifest number: 1280
Signing time: Wed 25 Mar 2026 19:01:53 +0000
Manifest this update: Wed 25 Mar 2026 19:01:53 +0000
Manifest next update: Thu 26 Mar 2026 19:01:53 +0000
Files and hashes: 1: DiJhG9UAf5Aq6LyghoK-sgPUw_8.roa (hash: 0d9H9Swwc6nGZfIaFZU+ZW5R7VglLxDawLaZ1amO0uI=)
2: TOSIxkAcj16WnhXWRlH7Sy0tzfc.crl (hash: jrzOztRLi+3/GH2Rwmax07TL9ZWqmPGp0vdUFkKX5+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/c5c595-2673-4d5f-8a85-ae8c81f96f42/1/TOSIxkAcj16WnhXWRlH7Sy0tzfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/c5c595-2673-4d5f-8a85-ae8c81f96f42/1/TOSIxkAcj16WnhXWRlH7Sy0tzfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TOSIxkAcj16WnhXWRlH7Sy0tzfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:ec:f4:48:3d:8f:06:1b:12:d8:9e:db:0e:ae:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce488c6401c8f5e969e15d64651fb4b2d2dcdf7
Validity
Not Before: Mar 25 19:01:53 2026 GMT
Not After : Mar 26 19:01:53 2026 GMT
Subject: CN=95acd65f29bbe537f0f378d50016f15144988ea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3a:3e:66:91:c9:2f:48:7c:9b:cc:c6:a6:b2:
33:23:b6:84:b7:cb:38:62:04:71:2a:88:23:67:f6:
34:af:9b:16:70:85:2e:b0:5d:22:7f:e1:f3:2f:46:
b7:45:97:e6:0d:18:92:82:65:c8:a3:b9:2b:9f:50:
7e:45:a5:8e:a3:f9:36:44:40:36:3f:00:cb:74:7c:
c2:c1:33:3c:a3:e2:be:24:55:62:c4:fe:38:c7:e7:
79:74:b6:ec:d8:25:4f:ab:87:cc:c0:8a:6e:68:c3:
07:e8:76:cd:b5:3f:29:b1:d8:06:54:43:af:20:d5:
15:2b:1a:c0:ca:f3:54:ef:0e:67:8e:41:0a:2b:d9:
b7:2f:5a:a8:6b:6d:77:40:9c:7c:b1:43:e8:77:de:
8d:1f:a6:cf:28:5a:da:c3:48:74:06:e1:0e:01:66:
92:20:5f:80:d5:a0:a3:ad:bb:f2:cf:3a:1a:4c:c2:
47:09:cc:a8:54:27:77:1f:5a:88:43:8d:d4:94:e3:
03:2c:6b:ac:64:ab:aa:5a:da:4b:52:59:f5:88:65:
67:35:35:b4:55:55:16:be:3e:53:ff:7d:06:a5:e8:
6d:8d:60:f8:31:22:d6:80:40:1b:7e:27:85:1e:70:
cd:2d:d6:2b:f4:59:97:45:d6:92:f9:c0:42:5c:7d:
1a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:AC:D6:5F:29:BB:E5:37:F0:F3:78:D5:00:16:F1:51:44:98:8E:A2
X509v3 Authority Key Identifier:
keyid:4C:E4:88:C6:40:1C:8F:5E:96:9E:15:D6:46:51:FB:4B:2D:2D:CD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOSIxkAcj16WnhXWRlH7Sy0tzfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c5c595-2673-4d5f-8a85-ae8c81f96f42/1/TOSIxkAcj16WnhXWRlH7Sy0tzfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c5c595-2673-4d5f-8a85-ae8c81f96f42/1/TOSIxkAcj16WnhXWRlH7Sy0tzfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:92:0a:ad:68:67:b6:a3:80:25:a9:16:83:77:7d:8d:8d:73:
06:a5:85:68:e8:f7:f4:8e:58:27:98:69:13:3f:cf:58:67:74:
67:b9:9a:2e:83:0a:07:a8:1a:56:a8:aa:0a:29:c9:4a:c3:0d:
c4:f0:1e:9f:7a:1e:8c:09:28:a1:43:74:d9:80:5d:2c:4d:6a:
b3:3f:57:f9:0b:f7:8f:3d:ab:a7:3f:0d:2b:33:8e:1a:6e:6d:
6d:2c:04:44:f8:bb:af:2a:d1:cc:62:19:29:d3:5a:ef:c2:38:
07:96:4b:fa:88:e4:1d:9c:4a:65:2a:58:ca:98:d7:0e:0b:55:
96:ef:5c:b1:8f:c8:9f:31:aa:57:82:ea:23:c7:2d:23:a7:84:
a1:5c:22:c6:16:ca:f8:95:7a:86:60:08:f5:af:24:1a:cc:3a:
26:6c:61:25:08:f9:cc:2b:6b:dd:81:8d:c9:36:ad:94:99:e0:
92:9a:1b:2e:e7:18:3a:eb:d3:ac:16:90:c3:7a:a6:ad:38:b4:
ab:af:e1:6b:34:49:a1:bf:f3:a6:95:42:49:38:6e:72:ec:3d:
a5:25:11:26:d3:96:6b:b8:9e:cb:be:cf:be:d4:00:b6:a8:5f:
b9:2f:10:de:23:39:40:1b:18:8f:42:bd:ef:c3:54:6a:39:8e:
28:06:10:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX+z0SD2PBhsS2J7bDq4HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjZTQ4OGM2NDAxYzhmNWU5NjllMTVkNjQ2NTFmYjRiMmQy
ZGNkZjcwHhcNMjYwMzI1MTkwMTUzWhcNMjYwMzI2MTkwMTUzWjAzMTEwLwYDVQQD
Eyg5NWFjZDY1ZjI5YmJlNTM3ZjBmMzc4ZDUwMDE2ZjE1MTQ0OTg4ZWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTo+ZpHJL0h8m8zGprIzI7aEt8s4
YgRxKogjZ/Y0r5sWcIUusF0if+HzL0a3RZfmDRiSgmXIo7krn1B+RaWOo/k2REA2
PwDLdHzCwTM8o+K+JFVixP44x+d5dLbs2CVPq4fMwIpuaMMH6HbNtT8psdgGVEOv
INUVKxrAyvNU7w5njkEKK9m3L1qoa213QJx8sUPod96NH6bPKFraw0h0BuEOAWaS
IF+A1aCjrbvyzzoaTMJHCcyoVCd3H1qIQ43UlOMDLGusZKuqWtpLUln1iGVnNTW0
VVUWvj5T/30GpehtjWD4MSLWgEAbfieFHnDNLdYr9FmXRdaS+cBCXH0asQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJWs1l8pu+U38PN41QAW8VFEmI6iMB8GA1UdIwQY
MBaAFEzkiMZAHI9elp4V1kZR+0stLc33MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVE9TSXhrQWNqMTZXbmhYV1JsSDdTeTB0emZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9jNWM1OTUtMjY3My00ZDVmLThhODUt
YWU4YzgxZjk2ZjQyLzEvVE9TSXhrQWNqMTZXbmhYV1JsSDdTeTB0emZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9jNWM1OTUtMjY3My00ZDVmLThhODUtYWU4YzgxZjk2ZjQy
LzEvVE9TSXhrQWNqMTZXbmhYV1JsSDdTeTB0emZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFpIKrWhn
tqOAJakWg3d9jY1zBqWFaOj39I5YJ5hpEz/PWGd0Z7maLoMKB6gaVqiqCinJSsMN
xPAen3oejAkooUN02YBdLE1qsz9X+Qv3jz2rpz8NKzOOGm5tbSwERPi7ryrRzGIZ
KdNa78I4B5ZL+ojkHZxKZSpYypjXDgtVlu9csY/InzGqV4LqI8ctI6eEoVwixhbK
+JV6hmAI9a8kGsw6JmxhJQj5zCtr3YGNyTatlJngkpobLucYOuvTrBaQw3qmrTi0
q6/hazRJob/zppVCSThucuw9pSURJtOWa7iey77PvtQAtqhfuS8Q3iM5QBsYj0K9
78NUajmOKAYQTg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:15 2026 by rpki-client