Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
File: tokpm8SVhKZFlAwd2H3wr8iqoP0.mft (raw, json)
Hash identifier: 5TmmBiRuTGDvTALDzxKtv+OVL2iH6rXoJxYvLSG5dHY=
Subject key identifier: A2:D3:33:B3:4E:52:E2:13:71:F9:6C:DE:17:71:F3:54:43:37:D5:CA
Authority key identifier: B6:89:29:9B:C4:95:84:A6:45:94:0C:1D:D8:7D:F0:AF:C8:AA:A0:FD
Certificate issuer: /CN=b689299bc49584a645940c1dd87df0afc8aaa0fd
Certificate serial: 01A0E1AB7C08F667A2CA5FA0EF000EFB08BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
Manifest number: 1608
Signing time: Sun 27 Sep 2026 07:01:46 +0000
Manifest this update: Sun 27 Sep 2026 07:01:46 +0000
Manifest next update: Mon 28 Sep 2026 07:01:46 +0000
Files and hashes: 1: HJJWsiDjzBz_irl7pQIQoPI3r70.roa (hash: MiTsGuoftnJ+n/jpkv9HxUxKGLPjJtM51AFiqQ8gQdM=)
2: jgYJ-Ic6G5lRmnuwLRqrvftwyxQ.roa (hash: YK3pnpembYJVK3tFHfQ8eIavXzWvYt02q/rGuHr8gGU=)
3: ozI9FqQeFMr6a9EQEWwunUSWNyo.roa (hash: JhSkAeJT7kDK1ZM3fmXCcAHWjB5nY9Twt+Ukh1Zc4vU=)
4: tokpm8SVhKZFlAwd2H3wr8iqoP0.crl (hash: OSPaanQczYEzBfhxXB4EfWN7Yjd5fnPePkDmMQWCoIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:ab:7c:08:f6:67:a2:ca:5f:a0:ef:00:0e:fb:08:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b689299bc49584a645940c1dd87df0afc8aaa0fd
Validity
Not Before: Sep 27 07:01:46 2026 GMT
Not After : Sep 28 07:01:46 2026 GMT
Subject: CN=a2d333b34e52e21371f96cde1771f3544337d5ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:af:b7:4a:c4:2c:cc:76:8d:75:b9:f0:3a:9b:
ca:e1:c6:01:e3:e1:82:08:28:28:52:66:05:ee:bd:
73:ec:4d:f3:fb:ba:46:74:90:f2:ac:de:da:7b:32:
b3:54:25:48:4b:d9:12:60:f5:63:9b:76:04:cc:11:
36:14:c2:d5:d4:ca:bc:c9:bd:c0:93:35:df:87:4a:
06:2a:56:38:1b:bf:20:74:38:19:c4:dc:72:59:d3:
08:da:57:1f:28:5a:dc:56:e1:b3:4f:cd:b0:1a:97:
73:d6:eb:8e:3b:30:00:1e:ce:21:8a:f8:44:de:fc:
ba:af:d0:3c:8e:6c:0c:d3:04:3d:13:e1:7e:be:94:
99:ae:d1:17:cd:65:cb:a6:22:26:69:d3:06:aa:27:
f6:cd:dc:c5:16:92:bc:98:bb:16:ae:1f:53:30:2f:
53:19:7b:c8:19:04:36:0f:17:06:74:69:f8:2d:52:
a3:5b:5a:00:f6:c9:20:41:1e:6f:05:c9:92:6d:f0:
12:b6:09:ea:41:1c:d9:7c:df:af:54:21:4f:13:38:
74:9f:9c:0a:91:58:e6:19:b3:d8:eb:b1:b9:47:a0:
6a:da:4b:6e:c7:06:95:b0:c7:e7:03:4c:6b:32:c6:
15:be:34:b8:0a:6f:55:c1:f4:ee:1b:01:e3:0d:54:
a2:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:D3:33:B3:4E:52:E2:13:71:F9:6C:DE:17:71:F3:54:43:37:D5:CA
X509v3 Authority Key Identifier:
keyid:B6:89:29:9B:C4:95:84:A6:45:94:0C:1D:D8:7D:F0:AF:C8:AA:A0:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:1c:95:eb:82:4c:7f:dc:a5:39:c6:cb:77:f3:f7:fe:a5:24:
ce:a4:3a:b7:3c:36:46:8f:de:84:ad:9d:de:d6:dd:b4:bb:65:
be:42:25:d4:94:c8:c1:d8:36:f0:12:ef:88:d1:69:c0:b6:b7:
1a:dd:8e:e4:ad:fd:51:e2:3c:4e:40:08:23:d5:1d:2c:f8:f4:
74:6a:5a:cc:06:09:90:c4:38:3d:51:75:ba:e4:aa:4b:d9:3b:
c5:c7:e6:95:06:a6:d5:4d:aa:be:35:d0:0f:4f:d9:e9:ce:01:
7a:5f:1f:fd:ab:ca:7e:24:66:17:f2:88:ed:1e:e8:22:9b:81:
7f:c7:47:73:42:0b:7e:f9:50:4c:55:0c:90:8b:de:fb:b0:ca:
31:05:26:f1:49:c5:fd:7a:2f:55:93:af:cb:2c:a1:12:94:ed:
c4:7f:75:2a:3d:fe:6d:ec:50:36:13:e7:dc:38:c8:63:ed:38:
25:ef:34:3a:4d:62:12:05:05:3d:c0:14:2e:aa:cc:79:37:34:
e9:ad:86:8c:42:3a:ff:32:6e:7c:e1:85:a0:7e:43:3f:4c:3a:
2d:49:85:85:3b:4f:45:24:c7:bd:08:63:64:86:9e:0a:5d:47:
67:92:a1:cc:99:8b:cf:07:e2:ed:b9:ff:de:8e:1b:4b:50:40:
b9:5d:7e:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDhq3wI9meiyl+g7wAO+wi7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2ODkyOTliYzQ5NTg0YTY0NTk0MGMxZGQ4N2RmMGFmYzhh
YWEwZmQwHhcNMjYwOTI3MDcwMTQ2WhcNMjYwOTI4MDcwMTQ2WjAzMTEwLwYDVQQD
EyhhMmQzMzNiMzRlNTJlMjEzNzFmOTZjZGUxNzcxZjM1NDQzMzdkNWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6+3SsQszHaNdbnwOpvK4cYB4+GC
CCgoUmYF7r1z7E3z+7pGdJDyrN7aezKzVCVIS9kSYPVjm3YEzBE2FMLV1Mq8yb3A
kzXfh0oGKlY4G78gdDgZxNxyWdMI2lcfKFrcVuGzT82wGpdz1uuOOzAAHs4hivhE
3vy6r9A8jmwM0wQ9E+F+vpSZrtEXzWXLpiImadMGqif2zdzFFpK8mLsWrh9TMC9T
GXvIGQQ2DxcGdGn4LVKjW1oA9skgQR5vBcmSbfAStgnqQRzZfN+vVCFPEzh0n5wK
kVjmGbPY67G5R6Bq2ktuxwaVsMfnA0xrMsYVvjS4Cm9VwfTuGwHjDVSi/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKLTM7NOUuITcfls3hdx81RDN9XKMB8GA1UdIwQY
MBaAFLaJKZvElYSmRZQMHdh98K/IqqD9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdG9rcG04U1ZoS1pGbEF3ZDJIM3dyOGlxb1AwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy83Y2E2MWEtY2UzZC00YmFjLTkxMTAt
YzBmM2JhZDk5YTQwLzEvdG9rcG04U1ZoS1pGbEF3ZDJIM3dyOGlxb1AwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy83Y2E2MWEtY2UzZC00YmFjLTkxMTAtYzBmM2JhZDk5YTQw
LzEvdG9rcG04U1ZoS1pGbEF3ZDJIM3dyOGlxb1AwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOByV64JM
f9ylOcbLd/P3/qUkzqQ6tzw2Ro/ehK2d3tbdtLtlvkIl1JTIwdg28BLviNFpwLa3
Gt2O5K39UeI8TkAII9UdLPj0dGpazAYJkMQ4PVF1uuSqS9k7xcfmlQam1U2qvjXQ
D0/Z6c4Bel8f/avKfiRmF/KI7R7oIpuBf8dHc0ILfvlQTFUMkIve+7DKMQUm8UnF
/XovVZOvyyyhEpTtxH91Kj3+bexQNhPn3DjIY+04Je80Ok1iEgUFPcAULqrMeTc0
6a2GjEI6/zJufOGFoH5DP0w6LUmFhTtPRSTHvQhjZIaeCl1HZ5KhzJmLzwfi7bn/
3o4bS1BAuV1+4g==
-----END CERTIFICATE-----
Generated at Sun Sep 27 16:52:07 2026 by rpki-client