Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
File: tokpm8SVhKZFlAwd2H3wr8iqoP0.mft (raw, json)
Hash identifier: xrmHXM2BpwllNjh/kq6KDfRcu8T2clRFkkKr/TIRfXM=
Subject key identifier: FC:E1:90:7D:39:E7:7B:19:BC:8E:47:DC:B1:65:45:3F:E8:E9:07:5C
Authority key identifier: B6:89:29:9B:C4:95:84:A6:45:94:0C:1D:D8:7D:F0:AF:C8:AA:A0:FD
Certificate issuer: /CN=b689299bc49584a645940c1dd87df0afc8aaa0fd
Certificate serial: 019D27A93167A18146FD11A6A4318F3BDE60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
Manifest number: 141A
Signing time: Thu 26 Mar 2026 01:01:32 +0000
Manifest this update: Thu 26 Mar 2026 01:01:32 +0000
Manifest next update: Fri 27 Mar 2026 01:01:32 +0000
Files and hashes: 1: HJJWsiDjzBz_irl7pQIQoPI3r70.roa (hash: MiTsGuoftnJ+n/jpkv9HxUxKGLPjJtM51AFiqQ8gQdM=)
2: jgYJ-Ic6G5lRmnuwLRqrvftwyxQ.roa (hash: YK3pnpembYJVK3tFHfQ8eIavXzWvYt02q/rGuHr8gGU=)
3: ozI9FqQeFMr6a9EQEWwunUSWNyo.roa (hash: JhSkAeJT7kDK1ZM3fmXCcAHWjB5nY9Twt+Ukh1Zc4vU=)
4: tokpm8SVhKZFlAwd2H3wr8iqoP0.crl (hash: pw7CQ1uHeYPD7Dg41A/k86VPpgyORbJ1XZQWVaXYgIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:31:67:a1:81:46:fd:11:a6:a4:31:8f:3b:de:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b689299bc49584a645940c1dd87df0afc8aaa0fd
Validity
Not Before: Mar 26 01:01:32 2026 GMT
Not After : Mar 27 01:01:32 2026 GMT
Subject: CN=fce1907d39e77b19bc8e47dcb165453fe8e9075c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:50:bc:79:e4:36:97:83:27:a9:cc:16:cc:05:
c9:c9:ff:09:ae:c5:f9:7b:22:7a:c2:79:7c:a6:a2:
88:7b:8b:ee:9a:4c:05:fd:65:02:fe:a2:b8:e7:52:
59:60:bf:95:a0:10:d6:94:45:de:31:fd:b6:96:9f:
12:8f:8d:a7:56:96:19:dc:70:9d:e7:3e:6c:e1:14:
89:67:33:7d:42:6d:59:c8:28:5f:eb:54:0f:07:f1:
95:eb:7b:66:2e:c6:15:ff:b4:2a:ac:bf:83:99:e5:
27:e6:94:19:24:ab:0d:44:78:cf:a3:2c:f3:49:38:
0c:52:0f:85:b9:a5:d6:51:d2:c7:6d:04:35:7b:4c:
5f:83:b6:5c:5d:f6:b3:92:a5:3d:33:aa:91:94:7a:
ba:7c:7e:69:c4:0a:b0:96:99:34:43:3d:2b:69:55:
10:93:d9:4c:30:9b:ed:45:c6:ca:fc:d8:89:12:cb:
6a:30:f3:e6:a8:01:20:e0:f6:7e:f7:8e:27:47:b2:
73:17:0c:7a:a9:2b:48:10:d7:7b:6a:11:da:c9:7d:
da:6a:c5:3b:9e:3b:b6:5b:4e:7e:6b:cb:cd:ab:36:
01:59:f0:0b:71:66:76:5f:97:14:c3:67:23:e5:d5:
af:ed:b3:7c:83:7e:24:fc:e4:d9:ad:2b:17:4a:b1:
dc:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:E1:90:7D:39:E7:7B:19:BC:8E:47:DC:B1:65:45:3F:E8:E9:07:5C
X509v3 Authority Key Identifier:
keyid:B6:89:29:9B:C4:95:84:A6:45:94:0C:1D:D8:7D:F0:AF:C8:AA:A0:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:9a:13:f3:eb:8c:05:de:96:bf:ff:30:45:9e:b4:87:a1:49:
93:74:e0:4a:79:77:23:e3:a9:1b:2c:75:18:b7:30:9a:bf:55:
18:f7:3a:62:88:78:c8:d8:ea:6e:e1:28:c9:61:23:c3:9a:5e:
e7:5a:21:dd:39:cd:e2:25:31:70:f4:04:bb:77:d9:c8:af:f6:
ba:00:0a:04:49:2a:e1:0f:b5:f3:af:ef:56:d3:11:9a:6f:28:
59:b5:c4:72:17:c1:c4:a7:e3:c9:71:21:e5:34:51:0c:4d:99:
3f:33:2b:d7:77:6a:cf:9b:19:29:bd:3c:e4:e5:1b:39:9a:7d:
02:14:b5:e7:2a:6f:7d:54:38:d9:80:a6:5e:32:e8:9b:94:c4:
ea:79:eb:11:da:b6:07:bb:98:c3:92:6b:9a:50:13:75:2e:30:
f4:0a:42:a2:e8:9d:e9:c3:ad:ce:f9:26:00:c5:16:4b:1f:ca:
3d:ca:92:13:69:c9:08:d2:e5:7e:5a:ec:51:dc:f1:dc:3b:a7:
87:31:54:72:cc:1f:d8:f4:4a:9e:82:5c:7b:66:70:a2:89:0d:
5c:c4:80:eb:a8:63:f0:90:38:82:5e:90:c7:f1:b0:61:c9:f1:
75:b5:90:3e:6f:08:68:ef:fe:73:3d:3b:d2:f1:69:d0:e0:9c:
b8:87:1e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:37:26 2026 by rpki-client