Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
File: tokpm8SVhKZFlAwd2H3wr8iqoP0.mft (raw, json)
Hash identifier: UHtcCQyA26sOWoNYE5THN5m/HirxOf6SHgRnpsXa0EQ=
Subject key identifier: C6:02:E4:74:E5:9A:EE:16:0E:DB:85:67:4B:A5:34:9A:04:8A:DC:E9
Authority key identifier: B6:89:29:9B:C4:95:84:A6:45:94:0C:1D:D8:7D:F0:AF:C8:AA:A0:FD
Certificate issuer: /CN=b689299bc49584a645940c1dd87df0afc8aaa0fd
Certificate serial: 019E1ED9A6105752D5F451C677F633451414
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
Manifest number: 149A
Signing time: Wed 13 May 2026 01:00:40 +0000
Manifest this update: Wed 13 May 2026 01:00:40 +0000
Manifest next update: Thu 14 May 2026 01:00:40 +0000
Files and hashes: 1: HJJWsiDjzBz_irl7pQIQoPI3r70.roa (hash: MiTsGuoftnJ+n/jpkv9HxUxKGLPjJtM51AFiqQ8gQdM=)
2: jgYJ-Ic6G5lRmnuwLRqrvftwyxQ.roa (hash: YK3pnpembYJVK3tFHfQ8eIavXzWvYt02q/rGuHr8gGU=)
3: ozI9FqQeFMr6a9EQEWwunUSWNyo.roa (hash: JhSkAeJT7kDK1ZM3fmXCcAHWjB5nY9Twt+Ukh1Zc4vU=)
4: tokpm8SVhKZFlAwd2H3wr8iqoP0.crl (hash: N+aurgnxnIe0ZIsYbFg1PChcPisQuj5OJuPkuFsVKec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:d9:a6:10:57:52:d5:f4:51:c6:77:f6:33:45:14:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b689299bc49584a645940c1dd87df0afc8aaa0fd
Validity
Not Before: May 13 01:00:40 2026 GMT
Not After : May 14 01:00:40 2026 GMT
Subject: CN=c602e474e59aee160edb85674ba5349a048adce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3d:d9:5c:0e:47:ce:ed:56:77:2f:41:b7:f8:
20:e4:85:f4:9c:0a:24:f2:4e:11:40:ae:3d:2d:3d:
5a:88:09:62:27:5d:12:07:bd:34:e5:21:18:6c:42:
25:c8:00:82:a3:62:5b:08:11:dd:33:6a:2d:2e:29:
15:20:27:c4:b0:12:13:4f:73:cd:5c:55:12:9d:81:
4e:d5:48:20:b6:43:43:82:fe:fe:e7:6c:49:23:e2:
8c:57:66:dc:60:0e:c9:0b:39:d4:76:88:9d:46:b3:
c4:ab:9a:be:6e:6f:e1:97:b8:51:8b:c9:24:60:3d:
08:d6:fb:71:7e:40:9a:d7:5c:03:03:8e:fe:61:99:
78:ea:9c:fd:11:aa:90:7d:28:9e:66:92:24:f7:63:
83:a8:c4:80:cf:66:e0:87:9d:6d:c5:23:5d:e7:e1:
e7:1b:f2:12:ff:a9:e6:bd:0c:0a:0b:fa:ca:96:b2:
9b:d1:8b:bd:35:be:d3:07:2e:d9:0d:af:17:23:7d:
66:64:c4:4c:6b:14:b3:16:e5:b5:13:03:ac:6e:ce:
b2:87:81:2e:2d:ec:e0:b0:f7:cf:ac:4c:2e:dd:86:
0c:ea:5f:ff:58:b0:c9:cf:a3:1d:bf:7e:1a:9c:8c:
eb:49:dc:fe:12:9d:19:a8:6c:eb:28:48:73:d0:a7:
43:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:02:E4:74:E5:9A:EE:16:0E:DB:85:67:4B:A5:34:9A:04:8A:DC:E9
X509v3 Authority Key Identifier:
keyid:B6:89:29:9B:C4:95:84:A6:45:94:0C:1D:D8:7D:F0:AF:C8:AA:A0:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:bf:d9:f5:49:5a:0e:15:0f:12:c1:23:b1:67:ab:9b:04:fe:
87:ef:7f:28:17:56:ae:9a:7e:96:ab:d8:01:d4:93:3d:68:e2:
b1:fd:46:f3:91:5c:07:b0:46:01:89:e1:e1:7b:49:1b:c7:cf:
28:ca:09:de:0c:d8:be:df:a8:09:f7:d1:3f:e6:62:f2:39:3e:
59:45:66:ef:e1:40:4d:97:ee:5e:fe:5e:54:67:2d:01:0c:d5:
dd:ca:35:a4:4a:29:3d:37:a5:b4:53:74:2e:ab:55:97:af:a4:
2d:09:1c:9e:6b:94:0b:19:16:8e:72:84:f0:b3:c6:db:3b:c5:
b9:86:95:a0:68:cb:f7:81:c3:b7:e8:ef:96:e9:f7:3b:7e:a2:
a8:6c:5d:66:d9:ef:43:ba:f4:37:05:ff:7f:85:e0:4d:41:33:
2a:82:d0:b2:a2:74:f6:88:1b:e8:4e:29:70:6e:0a:db:3d:5b:
e5:ac:9e:d7:91:03:cb:ee:be:1e:d3:8c:c0:7a:a9:cf:1b:92:
13:6f:f4:a7:95:46:26:e1:c2:05:38:5c:0d:f5:ee:76:91:63:
6b:8b:5e:48:6e:1d:c4:99:aa:05:8c:00:47:44:c1:32:f4:a9:
51:d3:d3:97:ba:96:f3:98:06:73:4b:c9:a0:f4:78:eb:1a:09:
a0:96:85:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:07:56 2026 by rpki-client