Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.mft
File: C_TOA4nPk-LVfggvG-xh2oJy__E.mft (raw, json)
Hash identifier: FfbroWnFr/tTcNWzxRxSbYhraA5mAS948fpTA/3pBpw=
Subject key identifier: D6:43:DE:96:3E:C9:25:1D:08:DD:48:32:BD:E2:ED:48:F0:18:C5:D3
Authority key identifier: 0B:F4:CE:03:89:CF:93:E2:D5:7E:08:2F:1B:EC:61:DA:82:72:FF:F1
Certificate issuer: /CN=0bf4ce0389cf93e2d57e082f1bec61da8272fff1
Certificate serial: 019F8FECB6AF4D0263D89D5F69106543980E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_TOA4nPk-LVfggvG-xh2oJy__E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.mft
Manifest number: 1293
Signing time: Thu 23 Jul 2026 17:01:22 +0000
Manifest this update: Thu 23 Jul 2026 17:01:22 +0000
Manifest next update: Fri 24 Jul 2026 17:01:22 +0000
Files and hashes: 1: C_TOA4nPk-LVfggvG-xh2oJy__E.crl (hash: wKCCwuJyOzWjlP1zWvsfdseD5anVI/BqlZpZp/YsRLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_TOA4nPk-LVfggvG-xh2oJy__E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:b6:af:4d:02:63:d8:9d:5f:69:10:65:43:98:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bf4ce0389cf93e2d57e082f1bec61da8272fff1
Validity
Not Before: Jul 23 17:01:22 2026 GMT
Not After : Jul 24 17:01:22 2026 GMT
Subject: CN=d643de963ec9251d08dd4832bde2ed48f018c5d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2f:03:13:3e:36:b3:0c:c7:aa:41:28:63:da:
dc:9c:6c:5d:16:6d:d9:07:a4:8a:22:0f:0b:39:f0:
99:2c:99:e0:f2:dc:ed:c6:6d:36:3e:50:d0:2c:84:
1d:1c:2e:c9:1c:da:4f:b6:c9:ae:dc:72:f3:d7:ed:
7c:8c:9b:3d:07:2c:68:08:80:17:48:95:e7:4c:48:
b4:f0:03:d3:de:c9:56:c9:c7:24:18:eb:48:3b:1d:
8e:e5:11:d9:3b:06:b0:50:c8:95:89:10:cb:62:64:
e7:3d:fe:60:4f:df:92:53:40:d7:c1:e3:7e:aa:9c:
ab:bc:b1:85:77:63:c1:18:63:4f:50:7d:69:56:f0:
bf:e1:c5:e1:e8:83:ce:5e:03:79:b4:75:fe:04:12:
23:81:ac:4b:19:49:cc:bf:f2:56:ca:ae:67:24:48:
0c:4c:a0:53:8f:94:22:fb:43:2c:48:86:d7:96:89:
9d:d9:99:cb:15:f4:a6:23:9e:13:fa:50:98:a5:64:
f5:06:8f:b4:c4:2a:ac:92:52:b5:38:d4:e9:da:2d:
d9:c0:ed:99:0a:c1:ae:03:e5:c7:c0:05:6b:1a:06:
63:25:d8:7f:07:a9:1e:79:cb:d1:9e:01:f5:65:7b:
18:d9:d5:fe:11:2b:26:b9:7c:d2:ab:9f:b3:24:b0:
2a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:43:DE:96:3E:C9:25:1D:08:DD:48:32:BD:E2:ED:48:F0:18:C5:D3
X509v3 Authority Key Identifier:
keyid:0B:F4:CE:03:89:CF:93:E2:D5:7E:08:2F:1B:EC:61:DA:82:72:FF:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_TOA4nPk-LVfggvG-xh2oJy__E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:68:a9:26:c9:da:e8:75:5c:e9:89:22:36:fd:8b:95:ee:20:
78:62:1a:4e:27:75:87:a5:59:d5:c6:27:10:3b:05:56:0b:e7:
39:8a:01:5c:e5:dc:d2:60:45:e5:79:ec:b2:72:06:dd:ac:56:
9d:68:49:1c:fd:8b:04:71:06:c2:df:f2:63:aa:75:db:14:5f:
bc:d4:8b:ed:3a:f4:26:c2:76:4b:51:49:b7:39:f6:d5:9b:0c:
86:44:3a:22:09:42:6c:62:ab:49:2b:8b:89:a7:2b:c9:3b:50:
bf:c5:17:68:8d:12:3d:40:d4:7a:11:43:a4:7e:1e:e3:c3:8b:
a8:70:96:dd:e1:c1:f2:76:b8:97:65:20:8a:76:0a:12:32:e4:
07:4e:26:87:e4:f7:4a:74:32:1c:8e:0a:46:6e:3c:48:f9:35:
82:31:4b:44:4d:b9:3b:02:d9:f3:26:bc:85:3b:45:ad:6a:c0:
98:b2:1c:b4:78:9f:5f:42:5b:3b:25:ae:73:65:a1:1d:f2:74:
d5:87:fe:3c:0d:a4:08:e2:2f:b0:67:1d:f2:8e:a3:92:30:8a:
90:d0:6b:6a:ed:0e:b5:91:85:c7:15:8c:80:d4:5a:61:19:a7:
d6:a8:c9:32:4f:2d:f0:b9:c3:b9:76:d8:69:ed:18:d0:41:14:
06:f3:72:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:54:56 2026 by rpki-client