Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.mft
File: totCki04fFePpXaSSH8qGQaFibo.mft (raw, json)
Hash identifier: hLk9MViir4vFFz8Lt59i0AH19M0hHYyPJtW3YRhD5fc=
Subject key identifier: 69:66:80:0A:E9:14:81:24:D1:5F:99:8F:DA:33:DD:75:10:31:43:C7
Authority key identifier: B6:8B:42:92:2D:38:7C:57:8F:A5:76:92:48:7F:2A:19:06:85:89:BA
Certificate issuer: /CN=b68b42922d387c578fa57692487f2a19068589ba
Certificate serial: 019D2696204BB21EBCC55A64508F99BAA7A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/totCki04fFePpXaSSH8qGQaFibo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 20:01:06 +0000
Manifest this update: Wed 25 Mar 2026 20:01:06 +0000
Manifest next update: Thu 26 Mar 2026 20:01:06 +0000
Files and hashes: 1: kTdybG-Kfglf-A6Co4UkfB2W_s4.roa (hash: CUsIkIUnZkWXcbfe+QGR3qcpsv5V6ygh7qnKWL+glCA=)
2: totCki04fFePpXaSSH8qGQaFibo.crl (hash: BqgjR+yG2aEwhvWy8PrVhYupT3amvxPrpqkVYflTDF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.mft
rsync://rpki.ripe.net/repository/DEFAULT/totCki04fFePpXaSSH8qGQaFibo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:20:4b:b2:1e:bc:c5:5a:64:50:8f:99:ba:a7:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b68b42922d387c578fa57692487f2a19068589ba
Validity
Not Before: Mar 25 20:01:06 2026 GMT
Not After : Mar 26 20:01:06 2026 GMT
Subject: CN=6966800ae9148124d15f998fda33dd75103143c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ee:08:29:e4:95:ac:c6:84:27:a7:c9:e5:16:
07:6b:d1:cb:a8:04:35:17:9c:9d:a1:9e:75:e2:f0:
9b:31:db:28:3e:73:4b:52:2a:79:5f:e2:3b:b8:b6:
81:81:52:27:51:95:9b:e7:6d:ed:99:a6:09:dd:cf:
92:5f:07:40:33:5f:80:7e:60:62:16:e1:5c:b4:c2:
df:f4:87:79:69:96:d3:30:10:43:c3:96:95:6c:d2:
88:cd:90:97:9a:60:ad:b9:9f:81:88:e2:fd:02:5e:
7c:ef:e7:1e:64:b0:9a:ed:f5:b5:0d:5b:4d:8f:7d:
18:6d:1b:d8:b7:d9:ae:e2:56:bc:56:cc:dc:72:2d:
02:f1:0e:99:7d:7c:5e:f4:89:66:ce:51:0a:ed:60:
26:b9:07:1c:14:27:71:f3:12:58:a2:ad:ff:84:3a:
56:85:c4:ad:83:10:f7:7b:f2:ea:85:f1:1d:39:1e:
fa:12:d4:ae:8f:86:a0:7f:0b:8e:57:cb:e5:01:73:
4a:bd:3a:1f:df:d7:f8:b3:d2:48:4a:61:14:83:55:
c7:b6:7b:17:cc:ab:5c:13:06:cb:5a:f2:00:bb:50:
da:8a:fa:8a:36:95:3a:34:27:80:20:2d:93:dc:8f:
1e:a5:07:e0:57:d0:b1:6c:7c:62:29:60:a2:0e:fe:
51:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:66:80:0A:E9:14:81:24:D1:5F:99:8F:DA:33:DD:75:10:31:43:C7
X509v3 Authority Key Identifier:
keyid:B6:8B:42:92:2D:38:7C:57:8F:A5:76:92:48:7F:2A:19:06:85:89:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/totCki04fFePpXaSSH8qGQaFibo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:a6:18:3c:7c:e7:af:92:70:6f:bb:97:61:6b:e4:73:1e:93:
87:a6:5a:3b:73:18:d3:f4:3c:a6:5f:58:b6:fe:c8:06:db:7e:
a0:8a:dc:b5:9e:b9:63:a2:88:2d:e1:6f:02:3c:c3:3e:30:c6:
b4:ce:07:18:84:f6:67:b5:76:9a:71:74:2e:77:a3:ce:56:f2:
aa:52:a6:e4:d1:3d:8e:ad:13:fc:b9:d5:2b:ac:b2:ec:82:4f:
27:36:56:ab:e2:38:52:61:fa:a4:b9:0e:8c:28:85:a7:dc:c9:
11:ba:5d:28:f4:4a:13:4a:48:bc:bd:24:3f:da:32:3f:bd:18:
84:13:bf:25:28:18:83:97:3a:5e:58:04:c5:e7:da:24:ac:b6:
57:f6:59:fe:68:ba:59:4c:38:8d:54:a6:cf:74:68:62:f4:05:
3a:3a:d8:c1:55:b4:41:60:96:ed:b2:a2:2a:3b:36:e2:db:db:
0a:a8:62:37:c6:db:2a:26:9b:6b:67:5c:8d:4e:30:58:b5:21:
3c:90:9a:a2:72:0e:9d:51:7d:6a:fa:08:13:a0:73:46:6b:e1:
75:f0:f1:db:ba:43:72:a5:37:4d:18:c0:5c:15:19:b3:d6:ee:
c5:92:a6:25:a0:c7:3c:c4:ce:16:d3:49:64:91:80:bc:15:41:
18:7c:f3:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:50:38 2026 by rpki-client