Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/2d542d-1ec5-4943-b63e-915120b63093/1/TOCCAEkieEhNbIj1OGuns5aWy5Y.mft
File: TOCCAEkieEhNbIj1OGuns5aWy5Y.mft (raw, json)
Hash identifier: pDN3RBEHLpWBava/nf6wy9l6rGGL1RvFN3iBAtPzbi4=
Subject key identifier: 3E:15:CB:22:1E:54:A6:D0:28:30:39:68:B0:CB:54:E9:D9:22:1E:0E
Authority key identifier: 4C:E0:82:00:49:22:78:48:4D:6C:88:F5:38:6B:A7:B3:96:96:CB:96
Certificate issuer: /CN=4ce08200492278484d6c88f5386ba7b39696cb96
Certificate serial: 019D2961A86669C6BAF802E55E327C2E20AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TOCCAEkieEhNbIj1OGuns5aWy5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/2d542d-1ec5-4943-b63e-915120b63093/1/TOCCAEkieEhNbIj1OGuns5aWy5Y.mft
Manifest number: 0F5A
Signing time: Thu 26 Mar 2026 09:02:39 +0000
Manifest this update: Thu 26 Mar 2026 09:02:39 +0000
Manifest next update: Fri 27 Mar 2026 09:02:39 +0000
Files and hashes: 1: TOCCAEkieEhNbIj1OGuns5aWy5Y.crl (hash: I67yCb7LMxlbGtjWsJ520fNDCd4/gRir198QHywsMQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/2d542d-1ec5-4943-b63e-915120b63093/1/TOCCAEkieEhNbIj1OGuns5aWy5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/2d542d-1ec5-4943-b63e-915120b63093/1/TOCCAEkieEhNbIj1OGuns5aWy5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/TOCCAEkieEhNbIj1OGuns5aWy5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:a8:66:69:c6:ba:f8:02:e5:5e:32:7c:2e:20:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce08200492278484d6c88f5386ba7b39696cb96
Validity
Not Before: Mar 26 09:02:39 2026 GMT
Not After : Mar 27 09:02:39 2026 GMT
Subject: CN=3e15cb221e54a6d028303968b0cb54e9d9221e0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e0:f0:a5:1d:d6:57:cd:35:6b:2d:ed:6d:31:
64:03:6e:72:8f:63:a3:da:59:a3:7d:9d:b1:9f:0d:
6a:db:8a:1e:4d:66:92:7a:f9:ef:b8:99:a3:04:e1:
af:bc:92:8b:f5:bb:ac:ff:40:7c:1a:3f:ae:d8:81:
b2:3e:de:f4:37:61:78:94:c6:4d:aa:b9:82:d3:ee:
5d:b9:0c:92:1f:64:d1:7c:9b:7e:06:b6:f5:fb:89:
ba:cb:1d:5b:cb:bd:cb:c3:27:f4:2e:80:56:a2:88:
07:48:ce:33:29:02:9d:1f:b8:3f:0f:aa:b2:e5:13:
2c:34:b6:11:88:7a:12:d7:78:65:7e:5e:95:76:d7:
7b:fa:5c:2e:50:6d:93:3f:bf:49:a9:b6:5d:d0:7d:
63:84:af:d5:22:b8:0b:da:9a:e8:7b:63:ba:40:e5:
ae:1d:1c:38:73:c9:0e:8d:ad:15:ea:90:6e:7c:6c:
76:47:e8:07:5e:90:6a:b3:04:8d:00:c7:1a:ec:a8:
25:fc:9e:ae:20:89:4f:12:9b:82:5c:86:e8:0f:27:
76:69:c3:99:41:85:2c:ff:f3:72:80:d2:8c:1f:66:
f0:68:97:ec:ba:cb:2b:91:f0:79:ef:4d:8d:71:b7:
f8:d8:ff:3a:98:7b:c8:50:1d:7e:7f:1a:c2:d8:56:
ee:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:15:CB:22:1E:54:A6:D0:28:30:39:68:B0:CB:54:E9:D9:22:1E:0E
X509v3 Authority Key Identifier:
keyid:4C:E0:82:00:49:22:78:48:4D:6C:88:F5:38:6B:A7:B3:96:96:CB:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOCCAEkieEhNbIj1OGuns5aWy5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2d542d-1ec5-4943-b63e-915120b63093/1/TOCCAEkieEhNbIj1OGuns5aWy5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2d542d-1ec5-4943-b63e-915120b63093/1/TOCCAEkieEhNbIj1OGuns5aWy5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:ab:67:02:a7:e3:12:27:1f:b0:a8:14:fd:f4:fa:0e:a5:bf:
50:38:e0:3c:f8:cd:29:41:60:23:13:c0:9f:24:51:d0:7d:8e:
34:ff:ca:a4:a3:2c:76:f3:e4:fe:cc:68:bb:34:8e:19:de:45:
4f:1e:e6:be:a5:61:67:57:9d:c3:5c:10:2e:6a:4c:3a:c7:a2:
0d:23:07:26:f7:76:c2:1a:6d:0e:b8:6c:74:52:80:35:40:e7:
7b:f0:b8:2e:92:c8:e7:04:c5:e7:03:37:1a:43:49:94:80:6e:
10:f8:be:ed:89:82:3b:7c:cf:5f:1d:3e:e2:5d:08:bb:13:d5:
40:1d:8d:3c:33:9b:73:98:58:4e:0d:6c:b3:a4:84:9d:13:2d:
01:b0:f0:e3:36:53:de:ab:a9:27:8e:a1:71:a5:d9:c0:b9:c8:
57:f6:a6:8d:3a:30:ad:71:b8:ba:61:1d:db:a5:4e:d8:10:1b:
90:df:70:e6:00:06:f5:74:22:50:d4:99:8d:ba:9e:21:d2:95:
97:4f:40:17:cc:70:65:3c:11:44:78:a5:d1:4d:64:0c:f0:93:
23:b0:ef:7b:19:0a:bc:c2:74:64:cb:15:8c:1d:d4:31:e2:a9:
fd:98:4b:93:45:dd:63:16:d1:03:6a:10:55:54:b8:fd:72:cb:
25:cf:b5:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:22:48 2026 by rpki-client