Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/bcf7b2-44a5-4da1-9477-35cf86e4e56d/1/ToFckvwcZCWqy8xFFZbHPtZFcAc.mft
File: ToFckvwcZCWqy8xFFZbHPtZFcAc.mft (raw, json)
Hash identifier: M60LxlX6toldgT674qWllW1omH0DXe+q/fxulMSAPs4=
Subject key identifier: F0:7F:84:54:C8:F6:05:2E:D6:04:76:B2:56:4B:FF:D2:51:C3:8F:FB
Authority key identifier: 4E:81:5C:92:FC:1C:64:25:AA:CB:CC:45:15:96:C7:3E:D6:45:70:07
Certificate issuer: /CN=4e815c92fc1c6425aacbcc451596c73ed6457007
Certificate serial: 019E20915950550DD590A21F554B7F023544
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ToFckvwcZCWqy8xFFZbHPtZFcAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/bcf7b2-44a5-4da1-9477-35cf86e4e56d/1/ToFckvwcZCWqy8xFFZbHPtZFcAc.mft
Manifest number: 01C4
Signing time: Wed 13 May 2026 09:00:56 +0000
Manifest this update: Wed 13 May 2026 09:00:56 +0000
Manifest next update: Thu 14 May 2026 09:00:56 +0000
Files and hashes: 1: 1-8NbCoWGL2RGLtrzFx5dvyYdViM.roa (hash: +8X4viP4tBSyquY8znXf6UEmn4jZ8QbXgaaFStEun3c=)
2: ToFckvwcZCWqy8xFFZbHPtZFcAc.crl (hash: ZqWZ68/eMN8o6KwCKT8sozeSR82nimI8z8ddjzGYN24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/bcf7b2-44a5-4da1-9477-35cf86e4e56d/1/ToFckvwcZCWqy8xFFZbHPtZFcAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/bcf7b2-44a5-4da1-9477-35cf86e4e56d/1/ToFckvwcZCWqy8xFFZbHPtZFcAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ToFckvwcZCWqy8xFFZbHPtZFcAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:91:59:50:55:0d:d5:90:a2:1f:55:4b:7f:02:35:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e815c92fc1c6425aacbcc451596c73ed6457007
Validity
Not Before: May 13 09:00:56 2026 GMT
Not After : May 14 09:00:56 2026 GMT
Subject: CN=f07f8454c8f6052ed60476b2564bffd251c38ffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d3:15:74:1b:d9:66:18:de:e5:46:79:b8:f0:
f4:87:55:0e:22:c8:42:e9:46:d5:0d:9f:2e:6d:c9:
fe:37:b7:14:11:0b:47:c9:9f:83:29:d9:12:60:55:
bd:3b:01:33:dc:3d:9a:31:66:e8:f7:9f:a2:12:1e:
d0:51:e1:b0:52:72:a0:e6:b5:61:91:0c:1f:d8:b5:
76:8c:a7:1a:07:57:b1:b1:97:63:18:3e:e6:8e:3e:
d6:d5:e1:8a:38:ae:46:d7:cc:ed:69:eb:fb:4f:30:
21:c5:fa:db:e9:43:2c:94:5c:16:b3:76:68:a5:92:
b2:d4:18:60:81:15:fd:1a:77:ce:e6:3b:e0:39:c1:
26:a4:66:c6:51:3a:72:c8:74:9e:23:31:cb:ab:db:
d6:46:5d:73:46:31:04:ed:a4:aa:ea:49:a5:68:50:
85:c8:73:24:6b:72:22:11:f3:96:c3:c0:86:10:df:
b2:80:93:cf:79:1b:6b:dc:5e:fe:16:75:19:39:c0:
e9:39:78:52:d8:f0:ba:9c:75:56:a7:47:1a:25:14:
29:e4:06:89:ab:70:24:b8:6f:7d:21:ca:7f:52:0b:
73:bb:af:a3:fc:2a:78:37:4d:e8:c1:77:f9:af:b4:
57:f1:1d:70:f9:96:2e:32:f0:d8:46:42:80:4f:eb:
4c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:7F:84:54:C8:F6:05:2E:D6:04:76:B2:56:4B:FF:D2:51:C3:8F:FB
X509v3 Authority Key Identifier:
keyid:4E:81:5C:92:FC:1C:64:25:AA:CB:CC:45:15:96:C7:3E:D6:45:70:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ToFckvwcZCWqy8xFFZbHPtZFcAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bcf7b2-44a5-4da1-9477-35cf86e4e56d/1/ToFckvwcZCWqy8xFFZbHPtZFcAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bcf7b2-44a5-4da1-9477-35cf86e4e56d/1/ToFckvwcZCWqy8xFFZbHPtZFcAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:4a:a8:28:f2:0c:f0:9e:c4:fa:d1:b5:49:d3:01:13:53:3c:
fa:03:1a:44:c4:61:c0:21:bf:55:8f:f8:12:44:f7:9c:c9:d7:
27:47:62:2f:24:01:f5:ca:e3:7f:a4:70:ff:25:6e:74:f6:9b:
fc:8a:0a:f4:17:03:db:31:4d:9f:fc:f6:53:44:f6:9c:aa:35:
e0:81:10:4e:c4:ca:35:ef:6b:0d:9b:1b:19:38:69:7d:9d:84:
05:be:21:e1:39:3a:16:c1:82:51:22:f4:75:58:c9:4c:fc:d9:
c0:72:86:d1:d9:55:77:6d:eb:5a:f6:59:33:71:d8:06:38:72:
2b:8e:fe:6e:89:cf:df:08:60:ca:e5:2f:66:26:6e:3d:d8:1e:
05:31:fc:9e:09:9c:e0:be:b2:ba:e1:17:5a:f5:29:67:43:ce:
72:94:5f:9b:a0:9d:ad:c8:c3:10:ae:5f:15:c2:5d:5a:1b:de:
b7:f4:92:1f:31:32:90:b6:dd:35:40:1a:e5:43:04:39:bc:4f:
b8:ad:0d:cf:e8:4f:97:12:2b:a2:34:6e:65:1d:69:e4:d0:bc:
59:92:a2:b3:12:8e:51:4a:59:08:ed:17:6a:6f:76:ab:98:25:
9d:b1:2c:41:3b:c2:a0:bd:93:5b:aa:ea:3c:c2:7d:29:1d:11:
af:75:42:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:12:34 2026 by rpki-client