Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.mft
File: ToWU69x9fPfaLgA8hNhqfBr4cbw.mft (raw, json)
Hash identifier: t5cZYXvsFmYh77cguEAzWH2lh9Cl8qsohrw9jIVePuE=
Subject key identifier: 1B:20:3A:32:EF:E1:F9:57:AE:87:E5:65:46:D1:C9:6F:86:7C:4D:FB
Authority key identifier: 4E:85:94:EB:DC:7D:7C:F7:DA:2E:00:3C:84:D8:6A:7C:1A:F8:71:BC
Certificate issuer: /CN=4e8594ebdc7d7cf7da2e003c84d86a7c1af871bc
Certificate serial: 019D28844DC23F2B0DC571177C09C84CA355
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ToWU69x9fPfaLgA8hNhqfBr4cbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.mft
Manifest number: 072A
Signing time: Thu 26 Mar 2026 05:00:52 +0000
Manifest this update: Thu 26 Mar 2026 05:00:52 +0000
Manifest next update: Fri 27 Mar 2026 05:00:52 +0000
Files and hashes: 1: S8bTyJBZhokS15ViVs9bepd7lJY.roa (hash: 8XtBGUfQ0OE1e70++hji6820sGNOYH1fI8pCKjr4jm4=)
2: ToWU69x9fPfaLgA8hNhqfBr4cbw.crl (hash: ypmizDPofvALvYbJCan8tZlPtwzpKbz8aFGisFiuwn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ToWU69x9fPfaLgA8hNhqfBr4cbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:4d:c2:3f:2b:0d:c5:71:17:7c:09:c8:4c:a3:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e8594ebdc7d7cf7da2e003c84d86a7c1af871bc
Validity
Not Before: Mar 26 05:00:52 2026 GMT
Not After : Mar 27 05:00:52 2026 GMT
Subject: CN=1b203a32efe1f957ae87e56546d1c96f867c4dfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:58:88:85:c8:35:5a:52:b1:23:07:53:6a:03:
2a:ae:9b:38:51:b7:f5:40:19:44:8e:d3:ee:c9:65:
49:7a:f2:5e:d9:d2:69:52:79:08:95:00:ad:c4:29:
d9:53:5d:4e:af:2c:35:9a:0e:1d:f9:55:9d:fa:8a:
d6:87:f8:e7:1e:a3:da:d3:8b:9a:df:05:fc:b3:6d:
58:0d:24:6e:04:49:54:06:76:9e:58:46:6e:ac:cd:
c1:a7:6f:dd:20:9e:44:56:b9:61:85:59:85:af:c3:
d2:99:17:f4:3b:1d:06:70:6b:db:bf:58:ef:6f:6a:
02:45:1b:d6:4d:37:47:b5:04:7b:de:f4:de:82:9e:
72:c8:9f:51:d2:f6:15:9c:89:9e:52:8c:bb:5c:8b:
b1:87:c2:49:0e:fb:12:1f:55:88:25:dc:c1:15:e7:
64:b3:59:c5:4c:dc:a4:3c:9d:3d:dc:28:b6:a0:4c:
4b:9a:52:26:64:94:68:fb:b8:2f:5a:a9:78:b7:97:
6b:6b:af:56:8f:33:25:6b:97:fb:76:dc:90:18:a6:
cc:c1:ca:bc:f0:4d:fe:6d:a7:df:5c:03:ee:31:58:
6e:43:2d:82:21:f9:be:04:81:a5:2a:6f:1a:a4:2a:
2a:bf:c7:f5:81:0a:bd:38:ba:76:ce:c7:81:76:31:
14:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:20:3A:32:EF:E1:F9:57:AE:87:E5:65:46:D1:C9:6F:86:7C:4D:FB
X509v3 Authority Key Identifier:
keyid:4E:85:94:EB:DC:7D:7C:F7:DA:2E:00:3C:84:D8:6A:7C:1A:F8:71:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ToWU69x9fPfaLgA8hNhqfBr4cbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:c1:09:f6:f8:84:cb:b6:0b:22:02:5a:6a:0d:60:62:d3:7d:
dc:7a:a3:40:cf:8f:db:8f:36:97:e0:9f:51:83:d9:01:d3:56:
f5:e6:ea:31:67:3a:ed:bd:57:33:ac:e7:45:e6:3e:ee:9f:8c:
79:c9:6c:67:c9:55:68:7a:39:2b:aa:f6:51:6c:eb:4c:a9:55:
c2:4c:6c:49:e4:03:2d:c3:55:c1:4e:5f:91:c4:50:30:84:07:
4a:12:ff:d0:24:e2:3c:e5:3f:1d:1a:e4:4f:91:57:04:12:5d:
dd:5c:47:4d:69:58:71:16:c3:b9:2a:24:b2:f3:54:ad:8a:9d:
37:b0:f4:b9:50:3c:aa:99:25:8c:4b:d7:de:7c:3c:6f:67:8c:
33:07:8c:d1:34:54:09:57:4b:30:9c:cc:be:e5:1b:90:20:c7:
96:76:13:bb:6c:31:3e:15:f4:28:15:8b:b6:82:35:85:69:e1:
33:af:18:ac:b3:3d:72:b9:9f:e3:82:7f:e4:3d:9d:7c:46:48:
e3:b0:1d:7b:d7:9c:9c:e8:4d:b5:d2:b4:cc:89:b9:d9:86:27:
d4:e5:ba:94:1c:96:77:22:94:2a:d9:88:bb:9d:5b:f2:d0:6a:
92:aa:42:39:12:3d:59:f6:9f:93:62:77:e8:f0:6d:45:e1:32:
c5:9e:a2:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:57:34 2026 by rpki-client