Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
File: t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft (raw, json)
Hash identifier: vaCezTyumDD+VULy19LRFhYkJn0lWKMOrrp73RuGe7A=
Subject key identifier: FA:9F:DE:5B:2A:5D:A7:B5:F5:1B:7A:DC:11:3A:B2:43:45:2A:21:BC
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Certificate issuer: /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial: 019F995CCB582BF79670E61E08D70F6F05E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
Manifest number: 19CF
Signing time: Sat 25 Jul 2026 13:00:23 +0000
Manifest this update: Sat 25 Jul 2026 13:00:23 +0000
Manifest next update: Sun 26 Jul 2026 13:00:23 +0000
Files and hashes: 1: 2MSpCLbIJT_dNS85cUQH7P6hQQQ.roa (hash: LqxKJfwKg1vJNoy6niHI6Ay0t/ibwSsUhqanJ+kZvVg=)
2: TZEmLmroEs6IRm7BIRkKTFCJTnA.roa (hash: QhC3msm1fXEe5FbZInDyO6caWrevlSV8+0GhYVm+mSE=)
3: XKyWf4Y6NjYLpXjJG8NNu1YgV8I.roa (hash: Wg/rYioLK0eT7zXUczkOHExRo3EIegYLBIdXxr8Hp88=)
4: t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl (hash: g1uuLickIpe1CWdpaBsZtl1uQCmU0BMY8zeytH5xWUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Jul 2026 11:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:99:5c:cb:58:2b:f7:96:70:e6:1e:08:d7:0f:6f:05:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Validity
Not Before: Jul 25 13:00:23 2026 GMT
Not After : Jul 26 13:00:23 2026 GMT
Subject: CN=fa9fde5b2a5da7b5f51b7adc113ab243452a21bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:14:68:67:c2:2d:26:e5:be:60:58:6a:f0:7a:
90:7d:b9:9c:f9:4c:e7:19:fa:93:a1:84:bf:3c:d8:
a1:70:94:f7:92:13:9a:d6:07:1d:f4:5c:0c:b1:19:
20:0f:49:b9:48:56:25:25:34:75:13:7a:95:46:64:
ca:b5:01:8b:60:e2:07:47:ca:3c:bc:c3:64:37:e1:
76:d0:eb:8f:25:ee:40:24:ab:3f:9b:f6:3c:78:85:
b5:11:c1:26:d9:45:b7:57:74:24:93:85:d0:e1:4e:
1d:4c:63:e5:36:32:4d:66:74:5d:53:7a:e4:93:3d:
bf:85:d3:68:e7:20:4e:cb:d1:a8:aa:95:84:69:9b:
4e:ab:45:bf:ff:be:c9:01:88:ba:cb:db:0b:3f:30:
aa:22:e3:bb:86:55:00:99:85:53:7a:c8:a6:b5:a8:
55:46:37:cb:3a:d1:52:f4:2f:e1:9d:c1:74:57:c3:
a1:46:3a:63:49:c8:4a:da:54:71:53:81:d9:31:9e:
65:98:cf:c8:a5:87:6d:ca:3d:1c:46:56:ea:7d:77:
aa:df:49:84:e2:12:fa:03:db:3a:e8:f4:ee:40:fc:
1c:db:e8:08:d7:bb:14:9e:51:bd:1e:e3:48:7f:4e:
ab:68:3b:91:9c:a5:2a:8a:ac:eb:4b:aa:51:13:71:
da:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:9F:DE:5B:2A:5D:A7:B5:F5:1B:7A:DC:11:3A:B2:43:45:2A:21:BC
X509v3 Authority Key Identifier:
keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:84:fb:fc:09:55:b9:10:60:9a:87:41:0c:8f:4d:3f:78:48:
3c:a1:a0:5a:cb:03:2a:0c:f4:df:d8:37:8e:f0:ad:11:9c:d2:
a1:58:47:31:4e:48:e9:58:9e:67:c8:8b:22:88:8a:5a:6c:e6:
0f:00:0b:a6:ea:c7:7f:d8:57:fb:a1:dc:bf:e2:d6:7b:59:8c:
d6:b3:e2:a1:dc:16:67:8d:4d:fd:44:24:03:2e:be:ea:b2:d4:
83:d5:61:5f:ef:2b:3d:5d:93:bd:8e:d0:cb:02:ef:77:c3:e3:
38:7d:22:b0:81:43:04:02:5d:d3:7a:55:9f:72:56:9a:a8:11:
3f:6f:f5:6c:a8:d7:a7:a0:02:8f:b6:ef:18:13:fb:e9:dc:a4:
c3:d5:cf:0b:50:fd:c2:8c:35:00:ce:d6:2f:11:fd:2c:fb:33:
d8:8f:ad:d0:33:09:b9:4f:18:3f:93:56:1b:46:ee:6d:9e:9b:
54:05:3f:b5:bc:9d:cf:0e:23:50:ac:9a:ea:60:cf:24:3d:f9:
9f:01:55:0c:b6:ac:a7:cb:82:5e:f7:f1:78:0d:fc:9e:3c:54:
69:1f:5a:6a:56:9a:e7:d6:d7:84:ca:ce:df:26:a1:17:22:92:
39:98:d5:ec:9c:5a:eb:20:b9:b7:62:64:97:69:21:0b:27:ca:
72:96:70:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 19:04:25 2026 by rpki-client