Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.mft
File: C_TOA4nPk-LVfggvG-xh2oJy__E.mft (raw, json)
Hash identifier: FoyIFwrKNBjTtF7ZAJ2KHQ2+LKkt2Uc1+BzPNH4WsS0=
Subject key identifier: 00:37:D8:13:F4:85:61:F4:CE:21:68:B2:34:2F:C4:DB:29:43:79:EA
Authority key identifier: 0B:F4:CE:03:89:CF:93:E2:D5:7E:08:2F:1B:EC:61:DA:82:72:FF:F1
Certificate issuer: /CN=0bf4ce0389cf93e2d57e082f1bec61da8272fff1
Certificate serial: 01A0CE918EC84398606EDF18D492C347CA8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_TOA4nPk-LVfggvG-xh2oJy__E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.mft
Manifest number: 1338
Signing time: Wed 23 Sep 2026 14:00:40 +0000
Manifest this update: Wed 23 Sep 2026 14:00:40 +0000
Manifest next update: Thu 24 Sep 2026 14:00:40 +0000
Files and hashes: 1: C_TOA4nPk-LVfggvG-xh2oJy__E.crl (hash: TWyi04SYlHbBuCuOcmYOTs7OcYYbk/Hi+OiMqpnCSfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_TOA4nPk-LVfggvG-xh2oJy__E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:91:8e:c8:43:98:60:6e:df:18:d4:92:c3:47:ca:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bf4ce0389cf93e2d57e082f1bec61da8272fff1
Validity
Not Before: Sep 23 14:00:40 2026 GMT
Not After : Sep 24 14:00:40 2026 GMT
Subject: CN=0037d813f48561f4ce2168b2342fc4db294379ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:83:c3:d5:b8:4b:47:ea:c4:66:fb:bc:cf:80:
fe:c5:95:48:33:7c:f8:2c:52:ed:ad:48:a9:06:01:
72:3e:14:fc:5f:f1:b5:e2:f2:9a:70:5f:57:d7:21:
35:93:bb:cf:26:26:6b:c3:7c:66:3a:18:d0:80:ff:
68:17:fb:6d:50:97:1e:68:f9:31:d5:ff:7d:f6:62:
70:4e:dc:3f:ac:20:72:73:5c:84:32:94:f6:bd:28:
e8:93:bd:1d:e6:47:87:ad:4c:b2:d4:23:58:e5:3a:
17:28:e6:c7:42:6f:76:f3:be:d2:40:7d:d6:35:74:
94:97:37:09:7a:90:36:6b:f0:2d:df:7b:5f:fd:ec:
24:56:61:4d:f1:a0:46:7c:51:11:f5:5b:ef:2c:c7:
82:af:4a:01:2c:fa:34:d2:e6:ea:fb:f1:6c:ca:d5:
a6:a0:7e:7f:15:03:8a:e5:a7:23:dc:07:ae:07:d4:
f5:ec:23:eb:ae:c5:b9:60:f3:dd:fd:3b:18:a3:69:
78:3b:fb:85:f3:d7:2a:67:e2:a0:d6:2a:c3:3e:5b:
d3:19:12:24:25:d2:41:c5:b2:f0:77:11:29:78:13:
f6:70:ee:af:0b:67:18:0f:27:9c:a4:9b:f3:a2:a2:
84:3e:83:6b:db:1b:8f:65:2c:7a:84:40:83:ab:d8:
dd:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:37:D8:13:F4:85:61:F4:CE:21:68:B2:34:2F:C4:DB:29:43:79:EA
X509v3 Authority Key Identifier:
keyid:0B:F4:CE:03:89:CF:93:E2:D5:7E:08:2F:1B:EC:61:DA:82:72:FF:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_TOA4nPk-LVfggvG-xh2oJy__E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:02:a9:3a:b9:a9:fd:4b:67:fe:a3:7a:aa:54:c7:06:b2:30:
8e:60:0b:f6:ad:f2:c2:d8:60:1f:2f:55:e1:19:42:2f:6e:e8:
9a:a9:ff:ad:87:6d:9f:09:47:b6:16:ce:0e:10:2a:88:93:ae:
8d:0a:bc:f4:7c:d8:b6:cb:38:e8:c4:dd:b5:64:33:ba:7c:62:
47:c8:83:3c:b0:29:9a:3d:61:e0:82:60:21:d4:19:bc:88:94:
67:1c:ab:e4:7a:9b:5c:0d:bd:75:c5:f3:cb:7e:37:7a:b1:29:
9c:3f:3b:6a:45:62:84:60:90:f4:d8:1d:78:f0:4a:09:4a:b1:
e9:80:2b:31:55:b8:16:c5:dd:d4:85:a5:af:51:11:ea:fd:bc:
38:11:91:b5:53:fe:a6:5a:fc:ef:81:4b:00:95:7b:10:68:66:
a3:6e:a8:03:4e:79:ab:3b:7e:51:9e:e2:97:ab:bc:b8:84:dc:
2a:65:03:dd:6a:27:15:cf:58:99:27:4f:19:3f:45:5c:49:88:
83:61:06:8f:70:7f:ca:de:47:80:1e:19:2f:4e:66:96:b7:83:
b4:7b:3c:ed:29:2a:e4:05:e9:8b:a8:e6:69:af:1e:31:f2:85:
9e:22:62:56:7e:08:a6:21:3a:e0:a8:a4:bf:e9:0c:7a:f5:8a:
20:25:43:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDOkY7IQ5hgbt8Y1JLDR8qLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiZjRjZTAzODljZjkzZTJkNTdlMDgyZjFiZWM2MWRhODI3
MmZmZjEwHhcNMjYwOTIzMTQwMDQwWhcNMjYwOTI0MTQwMDQwWjAzMTEwLwYDVQQD
EygwMDM3ZDgxM2Y0ODU2MWY0Y2UyMTY4YjIzNDJmYzRkYjI5NDM3OWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYPD1bhLR+rEZvu8z4D+xZVIM3z4
LFLtrUipBgFyPhT8X/G14vKacF9X1yE1k7vPJiZrw3xmOhjQgP9oF/ttUJceaPkx
1f999mJwTtw/rCByc1yEMpT2vSjok70d5keHrUyy1CNY5ToXKObHQm92877SQH3W
NXSUlzcJepA2a/At33tf/ewkVmFN8aBGfFER9VvvLMeCr0oBLPo00ubq+/FsytWm
oH5/FQOK5acj3AeuB9T17CPrrsW5YPPd/TsYo2l4O/uF89cqZ+Kg1irDPlvTGRIk
JdJBxbLwdxEpeBP2cO6vC2cYDyecpJvzoqKEPoNr2xuPZSx6hECDq9jdJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAA32BP0hWH0ziFosjQvxNspQ3nqMB8GA1UdIwQY
MBaAFAv0zgOJz5Pi1X4ILxvsYdqCcv/xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ19UT0E0blBrLUxWZmdndkcteGgyb0p5X19FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8zYWM3ODMtOWZhYi00NjIzLTg5NGMt
NTYyOGZhZWZlMTFkLzEvQ19UT0E0blBrLUxWZmdndkcteGgyb0p5X19FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8zYWM3ODMtOWZhYi00NjIzLTg5NGMtNTYyOGZhZWZlMTFk
LzEvQ19UT0E0blBrLUxWZmdndkcteGgyb0p5X19FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFAKpOrmp
/Utn/qN6qlTHBrIwjmAL9q3ywthgHy9V4RlCL27omqn/rYdtnwlHthbODhAqiJOu
jQq89HzYtss46MTdtWQzunxiR8iDPLApmj1h4IJgIdQZvIiUZxyr5HqbXA29dcXz
y343erEpnD87akVihGCQ9NgdePBKCUqx6YArMVW4FsXd1IWlr1ER6v28OBGRtVP+
plr874FLAJV7EGhmo26oA055qzt+UZ7il6u8uITcKmUD3WonFc9YmSdPGT9FXEmI
g2EGj3B/yt5HgB4ZL05mlreDtHs87Skq5AXpi6jmaa8eMfKFniJiVn4IpiE64Kik
v+kMevWKICVDzQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 23:17:15 2026 by rpki-client