Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/9bacf8-146c-4b63-9d36-8200b86603b1/1/TOkDeb2NBDdLOt7wYNUa4hVxCTU.mft
File: TOkDeb2NBDdLOt7wYNUa4hVxCTU.mft (raw, json)
Hash identifier: Kgd1gN4leG+Bj/9U5A9ELWWPWWVyo8GwxhcaD1YDheM=
Subject key identifier: C3:98:9C:94:26:EB:21:13:63:C7:B6:52:C8:38:BA:08:8A:B8:9B:AD
Authority key identifier: 4C:E9:03:79:BD:8D:04:37:4B:3A:DE:F0:60:D5:1A:E2:15:71:09:35
Certificate issuer: /CN=4ce90379bd8d04374b3adef060d51ae215710935
Certificate serial: 01A0DB0445AF482E464197249475BC1902D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TOkDeb2NBDdLOt7wYNUa4hVxCTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9bacf8-146c-4b63-9d36-8200b86603b1/1/TOkDeb2NBDdLOt7wYNUa4hVxCTU.mft
Manifest number: 0459
Signing time: Sat 26 Sep 2026 00:01:25 +0000
Manifest this update: Sat 26 Sep 2026 00:01:25 +0000
Manifest next update: Sun 27 Sep 2026 00:01:25 +0000
Files and hashes: 1: EjuIE4enXZzinM4ZfgsSD3gwxuY.roa (hash: VmAOnFMFZNZ7v7h3b1tL7nh4Drf7aU0G1qxfw7anYLc=)
2: TOkDeb2NBDdLOt7wYNUa4hVxCTU.crl (hash: vM+zSlKS2f2tCfxOpkulh0r3bQkoYKYGyReOQaBa2RQ=)
3: ksdLr_cpg0SNdbhzGPEUMaDjaa0.roa (hash: aWZAiEXDI8uHWbww+kMMTpEPGkhJJ3i3CwUVKl+KHtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9bacf8-146c-4b63-9d36-8200b86603b1/1/TOkDeb2NBDdLOt7wYNUa4hVxCTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/9bacf8-146c-4b63-9d36-8200b86603b1/1/TOkDeb2NBDdLOt7wYNUa4hVxCTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TOkDeb2NBDdLOt7wYNUa4hVxCTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 00:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:04:45:af:48:2e:46:41:97:24:94:75:bc:19:02:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce90379bd8d04374b3adef060d51ae215710935
Validity
Not Before: Sep 26 00:01:25 2026 GMT
Not After : Sep 27 00:01:25 2026 GMT
Subject: CN=c3989c9426eb211363c7b652c838ba088ab89bad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6f:f1:80:68:87:12:bd:19:d0:ae:c9:a1:6b:
f0:07:0d:59:4c:2c:9a:b7:c0:79:f5:12:b0:07:d5:
62:cd:ea:c1:6f:81:cd:fa:ef:55:03:35:7f:09:83:
d5:3c:13:0c:34:46:ae:09:c2:00:0a:e7:1a:92:53:
39:ec:30:2b:83:b6:76:9e:e6:f6:74:c2:49:38:fd:
73:b0:c5:0e:a7:85:95:99:77:93:52:97:07:cc:81:
88:2b:62:76:2e:98:7c:0d:2d:c3:eb:72:5b:35:08:
1f:33:b2:07:64:25:72:b9:51:ea:34:9b:8c:59:9d:
1d:9a:74:41:3d:71:6c:20:a7:4f:26:21:e3:7d:86:
ff:40:bc:ff:d8:a0:70:7a:4b:43:49:d8:9f:f4:b6:
86:72:84:01:24:40:86:90:fe:67:08:d5:80:6b:a6:
7f:a4:07:2e:a7:45:b8:99:ec:17:a0:69:a6:9d:c9:
4b:c0:60:6f:b7:f0:9e:40:33:73:21:54:d1:88:92:
9d:9e:68:84:53:25:74:b2:89:1d:2c:a1:48:d3:9d:
af:cf:b0:3d:b4:ec:66:58:01:c8:c3:41:d5:ac:fa:
65:0d:4d:34:a8:ec:b4:a4:fa:86:14:d5:42:28:e5:
55:22:05:2f:66:f3:78:1f:7e:65:26:a6:86:2f:fc:
27:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:98:9C:94:26:EB:21:13:63:C7:B6:52:C8:38:BA:08:8A:B8:9B:AD
X509v3 Authority Key Identifier:
keyid:4C:E9:03:79:BD:8D:04:37:4B:3A:DE:F0:60:D5:1A:E2:15:71:09:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOkDeb2NBDdLOt7wYNUa4hVxCTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9bacf8-146c-4b63-9d36-8200b86603b1/1/TOkDeb2NBDdLOt7wYNUa4hVxCTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9bacf8-146c-4b63-9d36-8200b86603b1/1/TOkDeb2NBDdLOt7wYNUa4hVxCTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:e2:3b:50:35:ab:cb:64:e2:95:64:7a:f9:68:51:d7:99:93:
16:d8:94:90:09:68:ea:46:7f:a7:7f:66:a7:6f:ac:63:c2:55:
3d:ff:4d:18:fb:33:30:0c:f0:9a:d9:3d:8a:c9:4b:1d:b1:37:
b1:97:8d:a2:a8:c3:f9:11:0f:09:7d:70:3d:fa:b4:8a:17:b9:
fb:7d:83:16:f3:0a:ac:52:8c:52:9e:50:2e:85:0c:7e:73:07:
16:24:2a:84:7f:2a:5c:7c:fa:88:e8:3b:cd:32:31:6e:2a:e0:
11:0e:fb:62:24:3a:07:95:f7:0f:69:87:73:bd:4c:ab:74:e1:
d5:d0:d4:2a:ee:f4:8b:c7:45:7c:20:0d:6c:f9:80:8f:72:4e:
7f:d3:eb:47:3b:c5:67:8b:6d:09:74:09:a2:c5:98:11:63:e2:
1d:25:72:af:8d:93:26:87:fe:4c:0c:64:b9:a1:64:82:e5:b2:
f2:5d:88:1e:fd:4a:82:3c:f3:82:40:79:42:43:60:89:b1:0c:
c4:16:a8:f8:d1:d6:63:53:a2:0c:aa:f8:d9:16:e7:24:e4:a6:
0c:37:e3:83:29:70:32:34:35:ea:69:9b:33:7f:26:e3:b2:ad:
dd:89:d9:38:c0:5a:fe:73:b0:88:eb:52:90:6e:51:97:67:2f:
ab:b8:b1:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:57:07 2026 by rpki-client