
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.mft
File: toqZTkLmDaT0pUdbFfXidRbHzxQ.mft (raw, json)
Hash identifier: xCrrOYFTtG+TAVFivnlodKHrpubB84x7/4UHAxZIuLo=
Subject key identifier: C6:41:F9:54:C3:66:86:E7:18:B5:EE:4D:62:8A:16:44:9B:F6:ED:42
Authority key identifier: B6:8A:99:4E:42:E6:0D:A4:F4:A5:47:5B:15:F5:E2:75:16:C7:CF:14
Certificate issuer: /CN=b68a994e42e60da4f4a5475b15f5e27516c7cf14
Certificate serial: 019F90C809E10512F197D90B618BCE406CDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toqZTkLmDaT0pUdbFfXidRbHzxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.mft
Manifest number: 19C6
Signing time: Thu 23 Jul 2026 21:00:56 +0000
Manifest this update: Thu 23 Jul 2026 21:00:56 +0000
Manifest next update: Fri 24 Jul 2026 21:00:56 +0000
Files and hashes: 1: Jpz2_pjmoHdo-RmCR1hSGVo1EHM.roa (hash: z2PsPLaUE/pjgoZrk9x3ve1iWv9V87jouLdEBjFOK3I=)
2: toqZTkLmDaT0pUdbFfXidRbHzxQ.crl (hash: DQd69It3bHwqFC0dim/MGSLUBRGiYStwY6akgpACfqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/toqZTkLmDaT0pUdbFfXidRbHzxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c8:09:e1:05:12:f1:97:d9:0b:61:8b:ce:40:6c:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b68a994e42e60da4f4a5475b15f5e27516c7cf14
Validity
Not Before: Jul 23 21:00:56 2026 GMT
Not After : Jul 24 21:00:56 2026 GMT
Subject: CN=c641f954c36686e718b5ee4d628a16449bf6ed42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:73:3c:e6:fc:a7:23:70:20:bd:92:d9:ee:8f:
fd:eb:d9:46:f5:87:74:35:3c:21:d9:31:19:d9:fe:
e0:05:c6:29:99:69:db:b3:ec:3c:c7:0f:b3:df:60:
6a:fc:10:83:4b:23:72:9c:1a:49:95:90:0f:0d:8e:
17:75:28:4a:21:f8:d2:83:dd:55:7c:74:4c:ae:24:
c8:4b:4f:05:49:ac:4a:77:28:27:1f:b1:45:b0:05:
da:00:96:b3:7b:40:ca:5a:3f:dd:fa:7c:af:1c:91:
8c:15:b4:41:f9:a9:a9:ed:84:c0:23:e7:7a:69:f0:
4a:f8:43:2e:b7:fb:89:8e:d9:2a:f6:cb:59:ae:1c:
ab:d0:6c:7c:43:b1:87:87:e6:70:f5:4c:47:fa:6b:
67:1f:7e:61:5d:ea:93:49:8d:a2:a3:aa:ac:29:a7:
09:bb:32:7b:01:77:32:7f:be:41:3e:13:b2:9c:df:
e1:9c:43:11:fe:1a:5d:bc:3e:bc:a9:f9:cc:08:56:
f0:55:49:ef:84:f5:60:33:55:71:96:98:0e:46:e3:
91:6f:d1:e8:82:af:3e:f0:d2:49:b2:3f:2d:70:f5:
a6:09:f8:d3:65:d4:9a:9b:3d:1a:5f:d5:2b:d2:a8:
26:6e:f5:88:91:09:7b:d2:3d:5d:6b:2b:a3:5b:1c:
f0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:41:F9:54:C3:66:86:E7:18:B5:EE:4D:62:8A:16:44:9B:F6:ED:42
X509v3 Authority Key Identifier:
keyid:B6:8A:99:4E:42:E6:0D:A4:F4:A5:47:5B:15:F5:E2:75:16:C7:CF:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toqZTkLmDaT0pUdbFfXidRbHzxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:66:c4:ff:5e:50:29:c4:8a:50:d9:54:b3:07:53:e3:1f:96:
4b:6e:c3:44:f1:ae:a8:1b:3c:b7:3e:36:ae:74:95:4a:04:13:
b6:83:c7:43:fc:d6:9e:3e:20:69:d7:4d:86:ca:24:04:5a:b8:
48:b1:68:2d:90:eb:fd:2c:0c:15:51:77:29:1c:d7:0c:c4:2e:
c3:f8:d2:27:98:26:45:97:2e:6b:22:5a:4f:6e:ac:83:2a:28:
48:69:d5:34:d5:88:dc:8e:42:8d:d9:ac:8a:dd:a8:28:de:9e:
22:b8:eb:e7:19:d4:84:c6:5b:cf:98:4b:c8:bb:cf:4b:d5:99:
dc:f9:de:3b:f5:ec:fe:90:e5:c5:75:5e:fd:cc:ce:a4:ec:35:
cd:2f:96:f7:0b:c6:70:00:68:0e:7e:2b:04:18:37:02:c4:90:
1e:0b:99:98:e9:28:40:ca:c5:f6:e8:f2:cf:fd:6b:13:db:00:
b5:ca:d4:78:b9:ee:a0:60:b9:a6:b5:00:75:6f:e8:21:da:74:
e4:06:35:18:5f:c4:5d:3c:ac:9b:39:b2:d6:dd:ea:8a:aa:3f:
8a:d8:33:eb:f3:0a:29:78:c1:54:56:b0:a7:97:92:19:ea:fe:
1a:c2:9e:65:ce:c5:cb:99:9d:03:3d:8b:3c:0d:4f:a3:df:2f:
54:f1:b8:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:55:52 2026 by rpki-client