Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
File: tokpm8SVhKZFlAwd2H3wr8iqoP0.mft (raw, json)
Hash identifier: 7XMmgGrt1I0112dmyyZ9whDAYrf+VSoomZTfWJqSz64=
Subject key identifier: 8A:1B:7F:1B:D4:89:60:1F:B0:BA:69:9C:50:DD:FC:70:59:86:2D:B6
Authority key identifier: B6:89:29:9B:C4:95:84:A6:45:94:0C:1D:D8:7D:F0:AF:C8:AA:A0:FD
Certificate issuer: /CN=b689299bc49584a645940c1dd87df0afc8aaa0fd
Certificate serial: 019F91A3E4EDD2E31453459BC220E18AFEB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
Manifest number: 155A
Signing time: Fri 24 Jul 2026 01:01:04 +0000
Manifest this update: Fri 24 Jul 2026 01:01:04 +0000
Manifest next update: Sat 25 Jul 2026 01:01:04 +0000
Files and hashes: 1: HJJWsiDjzBz_irl7pQIQoPI3r70.roa (hash: MiTsGuoftnJ+n/jpkv9HxUxKGLPjJtM51AFiqQ8gQdM=)
2: jgYJ-Ic6G5lRmnuwLRqrvftwyxQ.roa (hash: YK3pnpembYJVK3tFHfQ8eIavXzWvYt02q/rGuHr8gGU=)
3: ozI9FqQeFMr6a9EQEWwunUSWNyo.roa (hash: JhSkAeJT7kDK1ZM3fmXCcAHWjB5nY9Twt+Ukh1Zc4vU=)
4: tokpm8SVhKZFlAwd2H3wr8iqoP0.crl (hash: CYKuRRVsB9Q7woOkey7oMD72o8/FTk4iaV0AbjbN0ts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:e4:ed:d2:e3:14:53:45:9b:c2:20:e1:8a:fe:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b689299bc49584a645940c1dd87df0afc8aaa0fd
Validity
Not Before: Jul 24 01:01:04 2026 GMT
Not After : Jul 25 01:01:04 2026 GMT
Subject: CN=8a1b7f1bd489601fb0ba699c50ddfc7059862db6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0d:dd:e5:89:37:33:b2:03:db:8a:34:12:5f:
e3:4f:3f:7a:c6:dc:6f:63:28:a9:19:3e:60:f2:c0:
cb:d3:ea:65:58:84:f0:88:3a:ef:1f:69:d2:76:52:
58:7a:94:b3:39:db:b9:d0:0d:2f:a9:7f:22:dd:90:
17:83:e2:61:8d:ec:73:33:7d:4e:c7:6a:22:1d:20:
b7:6c:88:5a:a6:00:fa:06:50:d6:cd:63:56:8b:59:
d8:0d:f8:3a:e1:d0:b9:c9:cd:e8:18:fa:f9:52:1a:
70:a0:cd:be:a2:19:bb:fd:3c:fd:f9:18:a1:4d:83:
0c:6d:8c:26:10:98:17:e6:13:2e:5e:30:27:c7:c5:
6a:2a:b1:55:4d:77:1f:92:82:06:f4:c7:65:d5:1f:
45:ec:ce:5f:18:6b:19:c7:84:47:70:ef:d0:67:66:
b5:c4:4f:54:80:a7:0e:f3:bc:6d:a2:56:fd:e1:4b:
b2:f0:cd:4e:af:81:59:00:49:a1:7b:6c:4a:53:b3:
10:fd:26:e7:81:40:6d:7c:5d:17:6a:29:8a:80:bf:
4b:45:1d:97:22:bc:88:49:26:ec:7b:92:7a:e9:40:
70:c9:5b:db:a1:0f:a8:66:52:66:fd:1a:b7:40:85:
ad:a6:19:a7:81:ce:c8:a4:72:90:e0:16:3a:af:78:
e0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:1B:7F:1B:D4:89:60:1F:B0:BA:69:9C:50:DD:FC:70:59:86:2D:B6
X509v3 Authority Key Identifier:
keyid:B6:89:29:9B:C4:95:84:A6:45:94:0C:1D:D8:7D:F0:AF:C8:AA:A0:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:47:f3:98:d6:9b:01:47:c9:db:06:0b:c4:2f:bd:23:86:09:
51:88:7e:be:ed:49:6a:20:ef:62:82:e5:c7:18:ac:ee:93:2d:
5e:0e:10:7b:a0:15:be:c5:df:db:f9:c8:ae:5c:34:7d:c8:68:
9f:b7:67:17:d2:f4:71:ab:3f:9b:66:37:7b:64:78:a6:f0:39:
5e:a8:b7:19:0e:db:fd:f7:45:80:d2:02:02:90:bc:09:f3:af:
39:eb:b4:c7:6b:7f:e7:07:b3:30:06:84:a7:88:d4:64:9e:25:
29:7b:d2:f9:aa:66:be:6c:70:7a:e1:ec:08:7d:f7:58:1f:c9:
b5:29:2c:4c:b6:cd:fd:28:8d:48:6e:05:90:33:8a:b5:6f:2a:
32:b5:d8:cb:04:69:e6:9f:30:ec:68:59:2a:7e:6e:92:35:ec:
8a:d8:a4:45:51:46:b8:40:1b:a3:2d:67:ad:88:b0:c4:6c:32:
5b:29:ce:84:12:15:09:ba:62:c7:29:53:55:dd:d3:88:01:0d:
8a:d6:14:8c:ac:f1:cb:43:42:b1:a6:f9:13:76:39:c1:12:1e:
c1:8f:b9:a2:b9:26:44:67:1f:41:b0:ee:21:d2:f7:34:66:85:
fb:af:63:15:05:b2:6c:f9:92:36:3d:1f:be:80:9d:d7:05:e7:
7c:8b:c8:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:24:09 2026 by rpki-client