Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.mft
File: toqZTkLmDaT0pUdbFfXidRbHzxQ.mft (raw, json)
Hash identifier: DKSd8GVG91rQzdCfCwArCfBqYsldXWmGgk9rB7M0Dig=
Subject key identifier: 6B:AB:61:C0:71:7F:29:AA:BB:4D:C6:AC:D4:EE:41:5C:22:72:91:8F
Authority key identifier: B6:8A:99:4E:42:E6:0D:A4:F4:A5:47:5B:15:F5:E2:75:16:C7:CF:14
Certificate issuer: /CN=b68a994e42e60da4f4a5475b15f5e27516c7cf14
Certificate serial: 01A0F2310B2B89B4A906AF8A673BF0E80055
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toqZTkLmDaT0pUdbFfXidRbHzxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.mft
Manifest number: 1A7D
Signing time: Wed 30 Sep 2026 12:01:35 +0000
Manifest this update: Wed 30 Sep 2026 12:01:35 +0000
Manifest next update: Thu 01 Oct 2026 12:01:35 +0000
Files and hashes: 1: Jpz2_pjmoHdo-RmCR1hSGVo1EHM.roa (hash: z2PsPLaUE/pjgoZrk9x3ve1iWv9V87jouLdEBjFOK3I=)
2: toqZTkLmDaT0pUdbFfXidRbHzxQ.crl (hash: qehfwTbjqToP8wq/Z6hh5nkHt5dyrMz1jgSmgubbvts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/toqZTkLmDaT0pUdbFfXidRbHzxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f2:31:0b:2b:89:b4:a9:06:af:8a:67:3b:f0:e8:00:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b68a994e42e60da4f4a5475b15f5e27516c7cf14
Validity
Not Before: Sep 30 12:01:35 2026 GMT
Not After : Oct 1 12:01:35 2026 GMT
Subject: CN=6bab61c0717f29aabb4dc6acd4ee415c2272918f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f5:c6:d2:cc:01:26:22:a2:61:5c:e1:25:3f:
46:ae:7b:82:2d:3a:dc:d7:0e:12:b1:cf:20:d4:e3:
e7:1c:48:02:5f:f4:f9:7f:28:da:dd:63:b4:65:71:
96:35:46:bc:d5:42:fd:87:bf:1e:25:ff:a3:59:97:
83:44:41:d1:aa:b3:86:0a:e4:7a:ed:c2:62:e8:56:
9d:11:c7:e1:7b:11:86:30:a9:76:8a:41:af:71:a9:
50:e3:c0:16:9d:7b:89:e0:42:e9:1a:cb:63:a1:bb:
a7:50:8f:f0:65:ee:76:ea:7d:46:35:2c:60:53:33:
9d:a7:bd:64:3d:cd:6c:ea:e6:42:dc:84:bc:d7:c7:
3f:08:03:e4:99:bf:31:8a:95:30:a9:97:16:f2:52:
16:2c:8c:2d:b5:e7:b6:a2:18:56:61:78:bb:30:02:
ce:e2:42:22:b4:35:77:6b:4b:aa:5d:ad:9b:cb:44:
47:d7:fe:22:09:6d:6b:f8:66:17:68:0c:e0:7e:80:
af:1f:f7:7d:49:b7:49:26:55:d2:19:63:d9:79:2c:
4e:bd:0b:9f:f0:59:f5:a3:45:a3:35:f6:1f:95:73:
5c:07:47:39:28:b2:85:07:e1:05:8a:a2:63:82:69:
dd:25:8e:3c:96:45:9a:d4:ab:e3:5e:0a:b8:d5:2e:
e8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:AB:61:C0:71:7F:29:AA:BB:4D:C6:AC:D4:EE:41:5C:22:72:91:8F
X509v3 Authority Key Identifier:
keyid:B6:8A:99:4E:42:E6:0D:A4:F4:A5:47:5B:15:F5:E2:75:16:C7:CF:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toqZTkLmDaT0pUdbFfXidRbHzxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:42:38:27:0a:85:ce:4b:44:bd:c2:1b:4f:04:a5:12:1f:2c:
23:fb:d6:d1:e9:0f:a6:18:96:ef:9f:89:56:f2:6d:6d:0f:c2:
ea:ec:bb:b8:c9:04:0a:4d:83:d3:1e:6b:4f:57:ff:9b:92:1f:
53:ad:67:78:78:11:36:6d:81:d2:df:c8:7a:d7:9b:7c:96:d3:
ac:58:f7:6d:6d:87:20:8c:d2:0b:fd:cb:5f:d9:f4:bd:c4:a5:
af:79:ec:b7:ac:f3:4c:24:82:88:29:d5:90:88:e6:c9:83:ad:
33:2f:25:52:1e:84:9a:3d:49:01:ed:bc:72:2e:8a:a0:f2:c8:
7b:03:c8:78:85:85:79:c8:ef:f6:da:23:40:7d:30:7e:d1:01:
1f:cf:84:e6:c0:dc:d0:ed:b1:68:39:3a:02:5f:05:4e:ca:1e:
51:80:0f:66:57:9e:ee:a3:67:8c:63:df:9f:88:ba:ba:19:2e:
1a:cd:60:6f:e2:04:38:b7:c0:ce:91:54:65:0b:1c:0a:12:6c:
68:28:56:b5:c6:bc:7a:12:18:18:6b:17:b7:d0:7c:48:de:45:
39:d3:07:75:a8:a1:95:be:12:32:ce:c1:15:2f:4d:33:73:97:
b3:5b:93:65:b4:26:db:03:30:cb:e1:bb:ab:73:35:79:da:88:
06:a1:35:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDyMQsribSpBq+KZzvw6ABVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2OGE5OTRlNDJlNjBkYTRmNGE1NDc1YjE1ZjVlMjc1MTZj
N2NmMTQwHhcNMjYwOTMwMTIwMTM1WhcNMjYxMDAxMTIwMTM1WjAzMTEwLwYDVQQD
Eyg2YmFiNjFjMDcxN2YyOWFhYmI0ZGM2YWNkNGVlNDE1YzIyNzI5MThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvXG0swBJiKiYVzhJT9GrnuCLTrc
1w4Ssc8g1OPnHEgCX/T5fyja3WO0ZXGWNUa81UL9h78eJf+jWZeDREHRqrOGCuR6
7cJi6FadEcfhexGGMKl2ikGvcalQ48AWnXuJ4ELpGstjobunUI/wZe526n1GNSxg
UzOdp71kPc1s6uZC3IS818c/CAPkmb8xipUwqZcW8lIWLIwttee2ohhWYXi7MALO
4kIitDV3a0uqXa2by0RH1/4iCW1r+GYXaAzgfoCvH/d9SbdJJlXSGWPZeSxOvQuf
8Fn1o0WjNfYflXNcB0c5KLKFB+EFiqJjgmndJY48lkWa1KvjXgq41S7o1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGurYcBxfymqu03GrNTuQVwicpGPMB8GA1UdIwQY
MBaAFLaKmU5C5g2k9KVHWxX14nUWx88UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdG9xWlRrTG1EYVQwcFVkYkZmWGlkUmJIenhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9mMzgwNGQtZThhZC00ZDA4LTk5MGUt
YmQzYmViY2RkZWIzLzEvdG9xWlRrTG1EYVQwcFVkYkZmWGlkUmJIenhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9mMzgwNGQtZThhZC00ZDA4LTk5MGUtYmQzYmViY2RkZWIz
LzEvdG9xWlRrTG1EYVQwcFVkYkZmWGlkUmJIenhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAikI4JwqF
zktEvcIbTwSlEh8sI/vW0ekPphiW75+JVvJtbQ/C6uy7uMkECk2D0x5rT1f/m5If
U61neHgRNm2B0t/IetebfJbTrFj3bW2HIIzSC/3LX9n0vcSlr3nst6zzTCSCiCnV
kIjmyYOtMy8lUh6Emj1JAe28ci6KoPLIewPIeIWFecjv9tojQH0wftEBH8+E5sDc
0O2xaDk6Al8FTsoeUYAPZlee7qNnjGPfn4i6uhkuGs1gb+IEOLfAzpFUZQscChJs
aChWtca8ehIYGGsXt9B8SN5FOdMHdaihlb4SMs7BFS9NM3OXs1uTZbQm2wMwy+G7
q3M1edqIBqE1jw==
-----END CERTIFICATE-----
Generated at Wed Sep 30 21:18:59 2026 by rpki-client