Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9bacf8-146c-4b63-9d36-8200b86603b1/1/TOkDeb2NBDdLOt7wYNUa4hVxCTU.mft
File: TOkDeb2NBDdLOt7wYNUa4hVxCTU.mft (raw, json)
Hash identifier: o9wxZ4LsXjU4bCE3RGvDR/Im1595YFUc2BGKqSm14i8=
Subject key identifier: E2:7C:E9:BB:4A:57:57:CF:8F:E7:12:C4:73:C8:B7:F4:57:0F:0A:13
Authority key identifier: 4C:E9:03:79:BD:8D:04:37:4B:3A:DE:F0:60:D5:1A:E2:15:71:09:35
Certificate issuer: /CN=4ce90379bd8d04374b3adef060d51ae215710935
Certificate serial: 019F94A432EDB7C9CF2BB8B2FED6839195C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TOkDeb2NBDdLOt7wYNUa4hVxCTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9bacf8-146c-4b63-9d36-8200b86603b1/1/TOkDeb2NBDdLOt7wYNUa4hVxCTU.mft
Manifest number: 03B0
Signing time: Fri 24 Jul 2026 15:00:16 +0000
Manifest this update: Fri 24 Jul 2026 15:00:16 +0000
Manifest next update: Sat 25 Jul 2026 15:00:16 +0000
Files and hashes: 1: EjuIE4enXZzinM4ZfgsSD3gwxuY.roa (hash: VmAOnFMFZNZ7v7h3b1tL7nh4Drf7aU0G1qxfw7anYLc=)
2: TOkDeb2NBDdLOt7wYNUa4hVxCTU.crl (hash: K7PCUxW3IbWzAVir3AEmXq/ESd6t0zo2yucGXYOzpRI=)
3: ksdLr_cpg0SNdbhzGPEUMaDjaa0.roa (hash: aWZAiEXDI8uHWbww+kMMTpEPGkhJJ3i3CwUVKl+KHtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9bacf8-146c-4b63-9d36-8200b86603b1/1/TOkDeb2NBDdLOt7wYNUa4hVxCTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/9bacf8-146c-4b63-9d36-8200b86603b1/1/TOkDeb2NBDdLOt7wYNUa4hVxCTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TOkDeb2NBDdLOt7wYNUa4hVxCTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:a4:32:ed:b7:c9:cf:2b:b8:b2:fe:d6:83:91:95:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce90379bd8d04374b3adef060d51ae215710935
Validity
Not Before: Jul 24 15:00:16 2026 GMT
Not After : Jul 25 15:00:16 2026 GMT
Subject: CN=e27ce9bb4a5757cf8fe712c473c8b7f4570f0a13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c9:65:c8:3b:05:04:f0:83:49:9e:84:53:57:
ee:09:31:4c:10:29:6d:1e:87:c3:dd:21:ad:cb:a4:
f9:9a:56:53:07:94:78:35:fc:43:81:4f:e3:52:60:
e2:68:12:cb:c0:3c:4d:ba:30:10:75:e5:3a:b0:b1:
ec:a2:83:b9:0e:87:18:15:99:6f:6a:7b:fa:08:68:
75:61:8a:e5:cf:3f:bf:f6:44:7f:fa:f9:c2:a8:75:
70:d2:7a:a9:8d:0e:7e:48:26:01:9d:35:7a:9c:2b:
c6:0e:66:a4:e5:fc:94:e9:1e:2e:8d:cc:af:22:66:
41:86:a5:22:cb:0c:66:02:a2:32:8b:01:39:15:a1:
39:ee:a9:7a:77:9c:68:3a:db:27:8f:45:16:c0:98:
fa:2b:f8:f9:75:d3:77:eb:23:4d:9c:55:b2:24:12:
f4:ab:7e:19:5c:7d:10:36:3a:f5:97:fa:c6:8c:b3:
74:95:f4:6c:7d:c0:71:f5:dc:c1:f2:3e:4d:09:00:
43:3d:69:56:ad:d2:f6:48:53:39:ac:35:f8:53:b3:
05:2e:46:90:9f:46:1f:f8:27:e8:5e:74:75:c3:e5:
51:98:c3:31:7f:91:65:c4:30:ef:4d:19:d5:81:b3:
12:81:44:dc:04:64:59:2a:9e:ca:3e:03:ef:bc:a9:
12:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:7C:E9:BB:4A:57:57:CF:8F:E7:12:C4:73:C8:B7:F4:57:0F:0A:13
X509v3 Authority Key Identifier:
keyid:4C:E9:03:79:BD:8D:04:37:4B:3A:DE:F0:60:D5:1A:E2:15:71:09:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOkDeb2NBDdLOt7wYNUa4hVxCTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9bacf8-146c-4b63-9d36-8200b86603b1/1/TOkDeb2NBDdLOt7wYNUa4hVxCTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9bacf8-146c-4b63-9d36-8200b86603b1/1/TOkDeb2NBDdLOt7wYNUa4hVxCTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:c8:f6:87:35:97:d3:ff:9f:d4:19:3c:b5:77:bf:40:55:ad:
70:bb:2d:6f:28:09:03:9a:e1:2d:5e:7c:96:d2:6f:5c:c5:15:
57:62:62:23:c7:0e:97:d3:95:d2:f0:3d:be:97:80:e9:be:a8:
ea:2a:35:09:82:ec:db:2f:62:83:3a:9f:0e:7f:bf:b4:5c:14:
13:3d:f0:83:f4:de:0f:c8:0a:24:4c:b2:9c:3f:b0:f9:02:05:
44:0b:c7:2b:6a:60:ff:cd:67:81:4a:13:73:aa:97:89:2a:08:
a5:47:83:fa:e3:a1:14:fc:cf:96:63:6a:36:0e:76:51:89:40:
b7:48:64:90:89:6f:19:d1:34:16:7e:6b:06:02:f0:e7:c5:51:
43:25:bf:43:2b:8e:5c:76:cd:f0:cd:4f:d5:ad:bf:8d:8d:90:
3e:64:a2:11:63:9d:ba:ef:a6:9b:b4:7e:fd:bf:1b:88:10:26:
3e:b6:15:11:72:29:15:c4:db:39:bf:6d:d7:37:3a:ea:15:78:
55:b8:bc:6f:c8:43:b7:cb:0d:a3:0c:10:eb:8a:44:6e:4f:20:
36:f7:fd:c3:52:f5:79:4e:8c:ac:37:47:c4:69:9a:8b:79:78:
41:c0:8a:67:29:08:9f:71:8e:e9:af:d6:fb:63:25:8d:c2:ad:
81:c6:92:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:56:48 2026 by rpki-client