Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/TODEiXTgrnBa9Q7Q1lJH0afmL9s.mft
File: TODEiXTgrnBa9Q7Q1lJH0afmL9s.mft (raw, json)
Hash identifier: nDDEOU2xsRVaNIvRlhv8GVOf18c7ZdFZjLiSk/xWRxc=
Subject key identifier: AA:9D:14:D5:C4:C7:6A:C8:30:99:1F:A4:33:E1:44:8E:E9:CC:7E:9A
Authority key identifier: 4C:E0:C4:89:74:E0:AE:70:5A:F5:0E:D0:D6:52:47:D1:A7:E6:2F:DB
Certificate issuer: /CN=4ce0c48974e0ae705af50ed0d65247d1a7e62fdb
Certificate serial: 01A0E3628C5E16C0A5C286B99BECF4F2BA6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TODEiXTgrnBa9Q7Q1lJH0afmL9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/TODEiXTgrnBa9Q7Q1lJH0afmL9s.mft
Manifest number: EF
Signing time: Sun 27 Sep 2026 15:01:21 +0000
Manifest this update: Sun 27 Sep 2026 15:01:21 +0000
Manifest next update: Mon 28 Sep 2026 15:01:21 +0000
Files and hashes: 1: TODEiXTgrnBa9Q7Q1lJH0afmL9s.crl (hash: OCZqW4qCa/XhhQy3c0UN7+NTDF8lcE11IrxEsfx9XG0=)
2: ebblHkxH_4mxEtlIvQdRAh9glJA.roa (hash: 3iH299M2+mtu/XgvXbZ9sMSTDosmnZ7V4KjCGJX9hzQ=)
3: i5z3KQc2e0-K2v0h5qLdZBQJJXU.roa (hash: KrOQvD/t0VuGa9aPl/HCdbKeqmz1JIB0jRemVYeffNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/TODEiXTgrnBa9Q7Q1lJH0afmL9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/TODEiXTgrnBa9Q7Q1lJH0afmL9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/TODEiXTgrnBa9Q7Q1lJH0afmL9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:62:8c:5e:16:c0:a5:c2:86:b9:9b:ec:f4:f2:ba:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce0c48974e0ae705af50ed0d65247d1a7e62fdb
Validity
Not Before: Sep 27 15:01:21 2026 GMT
Not After : Sep 28 15:01:21 2026 GMT
Subject: CN=aa9d14d5c4c76ac830991fa433e1448ee9cc7e9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:60:e0:bd:47:19:66:01:ec:79:4d:0f:19:b9:
ff:eb:f8:4b:19:4f:04:b1:2a:ec:80:9a:c4:6b:47:
f1:d7:c3:bf:f4:ce:00:cc:d1:b4:d1:6a:cd:92:7e:
57:95:a6:58:6a:94:18:c0:69:12:ef:34:a6:96:34:
ff:0f:dc:34:90:48:52:69:49:75:0b:8c:3e:4d:9c:
dc:d1:2a:74:f4:1f:5a:fa:0c:85:1b:3e:e5:72:cf:
5e:80:48:f6:6a:70:e3:76:70:2d:09:9a:51:10:31:
55:b7:0a:a8:9f:2e:2f:c0:a6:57:ef:c6:1a:6d:8c:
ee:b5:64:cb:c8:51:ac:70:bb:0f:1c:20:d6:f5:59:
64:5e:4d:55:88:55:b8:b8:5c:e3:86:0d:9a:0c:1d:
5d:8c:57:b2:18:49:15:7b:84:1d:32:59:49:00:61:
7a:2f:98:42:9d:f9:5d:c7:72:06:66:2d:ee:e4:d9:
0b:ac:17:dd:84:59:8d:f3:ef:8e:71:e5:dc:84:ac:
4a:40:b5:d8:57:a5:ea:c0:5f:15:f9:7e:81:be:27:
4a:b3:c2:20:d3:a7:3b:09:eb:ba:f1:f0:54:84:01:
09:04:98:17:f9:f5:ce:1d:05:0f:fe:cf:f8:f7:c2:
8d:24:da:91:c9:a5:46:bb:7b:a5:fa:95:6f:70:b5:
e9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:9D:14:D5:C4:C7:6A:C8:30:99:1F:A4:33:E1:44:8E:E9:CC:7E:9A
X509v3 Authority Key Identifier:
keyid:4C:E0:C4:89:74:E0:AE:70:5A:F5:0E:D0:D6:52:47:D1:A7:E6:2F:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TODEiXTgrnBa9Q7Q1lJH0afmL9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/TODEiXTgrnBa9Q7Q1lJH0afmL9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/TODEiXTgrnBa9Q7Q1lJH0afmL9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:3a:30:f4:fd:6b:e7:18:ba:12:12:96:0d:1b:bc:49:99:e6:
98:aa:28:b2:c7:e4:6d:81:f3:77:a7:59:9e:4c:6e:5a:2c:b8:
a1:29:b1:fe:17:81:b7:d7:c7:c2:a2:18:b1:d8:40:6f:fc:09:
57:62:7d:5c:d1:a6:a8:88:70:40:2a:4a:8d:7b:ad:c9:0f:5a:
00:2d:cb:40:a9:11:8a:79:28:aa:0c:98:9f:65:4b:45:9d:e0:
e5:43:78:76:41:e6:fa:5e:41:ca:d8:c2:d4:91:6a:73:ec:4d:
1f:52:7e:22:56:d2:93:d9:41:f8:4a:4d:7b:d9:36:12:76:ce:
dc:44:14:aa:b6:29:f1:6f:d4:37:76:19:d9:34:25:25:90:c0:
1c:c6:f9:e2:27:29:eb:4c:dd:c5:14:a4:93:a0:3a:b5:7c:7f:
01:d1:b3:1a:1b:42:64:e6:61:5d:76:89:11:08:bc:f6:c0:d7:
01:75:a5:51:a1:f6:5e:08:ed:d1:53:3a:80:15:c9:54:b9:fc:
ce:ba:dc:da:63:a1:7d:c8:65:2c:87:4b:04:b4:b8:4d:b3:e6:
cd:5e:5e:73:a7:85:a1:72:fc:df:89:72:74:3a:03:87:c4:3b:
7d:a0:80:9c:85:e6:ec:e0:18:85:49:35:86:94:8b:50:29:34:
73:e2:50:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 21:20:16 2026 by rpki-client