Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
File: t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft (raw, json)
Hash identifier: x/WdGgqJEeicMNTcWYt/lpgLOliz3QiL8Q/m6eKl8Os=
Subject key identifier: 3C:B3:BD:BB:38:8C:DD:DA:24:74:AA:E0:F1:1A:C9:C6:C5:FA:33:F8
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Certificate issuer: /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial: 01A135FEA5A8059B670D4EFA17BFA5C94277
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
Manifest number: 1AA6
Signing time: Tue 13 Oct 2026 16:00:43 +0000
Manifest this update: Tue 13 Oct 2026 16:00:43 +0000
Manifest next update: Wed 14 Oct 2026 16:00:43 +0000
Files and hashes: 1: PRNpmNoXJBIoF9gh578wEhtMpdQ.roa (hash: g9ylBrvDhSOD9y5ykNiZEjQPUeqbZ/uKUmYrg55Kn+I=)
2: iE0cS-gjGQ2wH2CEFbUXZzlClEs.roa (hash: zt5rLB2IKmjF4fOUcKb7lO1SdJgaIMds/uhpaf0hUX0=)
3: t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl (hash: eBSYXpo/HAArloaM0QYotA2BlkAlZuKuHzwlFHBRxQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 14:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:fe:a5:a8:05:9b:67:0d:4e:fa:17:bf:a5:c9:42:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Validity
Not Before: Oct 13 16:00:43 2026 GMT
Not After : Oct 14 16:00:43 2026 GMT
Subject: CN=3cb3bdbb388cddda2474aae0f11ac9c6c5fa33f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:49:63:d3:c7:1e:e5:ee:a7:4f:38:91:c3:24:
48:a1:b0:82:16:dd:0a:fb:1d:be:12:87:2c:7a:03:
fc:ab:a4:cd:47:2b:71:f3:6a:42:08:c5:b3:ed:a0:
e5:2c:3e:3e:a4:34:b5:71:0d:af:26:0f:4b:5f:34:
c3:89:11:34:63:95:ea:77:27:4a:b7:89:b2:a0:ee:
56:ac:18:fe:80:13:9d:2a:1d:14:f9:8b:fd:4e:41:
19:c4:57:d2:8e:a0:49:8b:85:fc:21:b4:fb:16:80:
73:e4:43:be:55:3c:19:04:48:ea:30:95:fd:e6:71:
a5:07:c6:e4:8b:2a:91:6f:07:39:e2:e3:09:59:34:
46:af:19:81:96:03:8c:17:e4:16:12:0f:01:5a:f8:
75:6e:ef:4d:bf:c1:e1:dc:e0:6d:5b:1c:39:13:39:
0b:08:09:b4:8c:03:e4:0f:27:e5:06:72:55:7a:53:
a2:69:8e:7e:e5:bb:d3:f3:b1:94:d2:83:59:c3:dd:
80:3a:bf:ff:fc:6d:94:34:39:85:ca:d3:a3:9d:ef:
3d:7e:27:ee:7f:94:bb:19:50:a5:97:91:b6:f1:50:
fc:12:9e:7a:d3:49:f9:2e:dc:34:69:12:e8:e2:3c:
92:a0:de:7f:c0:0c:7a:8f:50:2f:1c:bf:a7:46:e8:
11:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B3:BD:BB:38:8C:DD:DA:24:74:AA:E0:F1:1A:C9:C6:C5:FA:33:F8
X509v3 Authority Key Identifier:
keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:d6:6b:ee:06:97:c8:29:00:ae:49:04:d3:bc:e9:51:a2:3d:
a1:98:1c:42:ca:f5:fb:bb:50:37:65:37:dd:28:ec:0b:e3:56:
f2:66:b5:55:a7:60:c4:06:8d:93:05:e6:68:5f:5d:80:f0:6e:
22:cb:e2:af:e0:3d:05:ac:c2:ac:85:53:53:8d:4f:a4:66:cb:
84:30:13:67:be:0a:36:4b:e4:ee:6a:49:39:29:32:de:ea:05:
79:1f:2c:eb:80:32:2d:e2:42:86:57:48:9c:7c:28:e8:e5:75:
da:4c:04:ae:76:28:b0:9d:15:a6:d1:9a:90:72:c1:57:04:ac:
5f:c8:16:1a:18:a4:df:98:9e:d5:76:53:67:66:1b:58:55:3c:
48:51:3c:e0:38:ee:87:48:97:57:84:d9:a8:d6:dc:30:03:d5:
59:05:4f:21:04:68:78:10:b6:d8:af:e5:fe:73:bd:80:59:4a:
48:26:06:fb:2d:09:35:1d:33:59:35:84:5d:1a:a0:2b:5e:6b:
3b:a3:5b:61:a5:4d:c9:d6:16:9e:b8:ca:96:66:2d:1e:0d:6b:
dd:99:97:75:cf:a7:0a:fd:ee:dd:6d:7d:c9:d2:ae:72:59:74:
d1:79:67:0a:df:8f:c0:15:36:7e:e2:6c:3b:5a:b0:3f:cc:6e:
37:f1:8a:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE1/qWoBZtnDU76F7+lyUJ3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3NWEwNTY2ZDBiNjNhMWY4NjJkODM0NThlNGYyZWE2ZmQ4
ZjdkMjEwHhcNMjYxMDEzMTYwMDQzWhcNMjYxMDE0MTYwMDQzWjAzMTEwLwYDVQQD
EygzY2IzYmRiYjM4OGNkZGRhMjQ3NGFhZTBmMTFhYzljNmM1ZmEzM2Y4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuElj08ce5e6nTziRwyRIobCCFt0K
+x2+EocsegP8q6TNRytx82pCCMWz7aDlLD4+pDS1cQ2vJg9LXzTDiRE0Y5XqdydK
t4myoO5WrBj+gBOdKh0U+Yv9TkEZxFfSjqBJi4X8IbT7FoBz5EO+VTwZBEjqMJX9
5nGlB8bkiyqRbwc54uMJWTRGrxmBlgOMF+QWEg8BWvh1bu9Nv8Hh3OBtWxw5EzkL
CAm0jAPkDyflBnJVelOiaY5+5bvT87GU0oNZw92AOr///G2UNDmFytOjne89fifu
f5S7GVCll5G28VD8Ep5600n5Ltw0aRLo4jySoN5/wAx6j1AvHL+nRugR0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDyzvbs4jN3aJHSq4PEaycbF+jP4MB8GA1UdIwQY
MBaAFLdaBWbQtjofhi2DRY5PLqb9j30hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDFvRlp0QzJPaC1HTFlORmprOHVwdjJQZlNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8xMDM1NzAtMWNmNi00MmFjLTgxZDQt
ODNmNjAxYzNmYjU5LzEvdDFvRlp0QzJPaC1HTFlORmprOHVwdjJQZlNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi8xMDM1NzAtMWNmNi00MmFjLTgxZDQtODNmNjAxYzNmYjU5
LzEvdDFvRlp0QzJPaC1HTFlORmprOHVwdjJQZlNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKdZr7gaX
yCkArkkE07zpUaI9oZgcQsr1+7tQN2U33SjsC+NW8ma1VadgxAaNkwXmaF9dgPBu
Isvir+A9BazCrIVTU41PpGbLhDATZ74KNkvk7mpJOSky3uoFeR8s64AyLeJChldI
nHwo6OV12kwErnYosJ0VptGakHLBVwSsX8gWGhik35ie1XZTZ2YbWFU8SFE84Dju
h0iXV4TZqNbcMAPVWQVPIQRoeBC22K/l/nO9gFlKSCYG+y0JNR0zWTWEXRqgK15r
O6NbYaVNydYWnrjKlmYtHg1r3ZmXdc+nCv3u3W19ydKucll00XlnCt+PwBU2fuJs
O1qwP8xuN/GKFw==
-----END CERTIFICATE-----
Generated at Tue Oct 13 21:32:17 2026 by rpki-client