
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
File: t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft (raw, json)
Hash identifier: xkaNWMYLx6ed2IhO3zd2IF961KOF1dOfsTIrgctyqvs=
Subject key identifier: 9E:7F:2D:B0:A0:94:FE:3E:71:BE:64:FD:E8:92:E9:BF:F9:86:86:79
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Certificate issuer: /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial: 019F939196FE4BEA0E0CD4F4C02B5F43AA8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
Manifest number: 19CC
Signing time: Fri 24 Jul 2026 10:00:19 +0000
Manifest this update: Fri 24 Jul 2026 10:00:19 +0000
Manifest next update: Sat 25 Jul 2026 10:00:19 +0000
Files and hashes: 1: 2MSpCLbIJT_dNS85cUQH7P6hQQQ.roa (hash: LqxKJfwKg1vJNoy6niHI6Ay0t/ibwSsUhqanJ+kZvVg=)
2: TZEmLmroEs6IRm7BIRkKTFCJTnA.roa (hash: QhC3msm1fXEe5FbZInDyO6caWrevlSV8+0GhYVm+mSE=)
3: XKyWf4Y6NjYLpXjJG8NNu1YgV8I.roa (hash: Wg/rYioLK0eT7zXUczkOHExRo3EIegYLBIdXxr8Hp88=)
4: t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl (hash: uptTEmZm6zPIWUxJ7IW5OOoHLBpCxY53SnwMPhKBalI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:91:96:fe:4b:ea:0e:0c:d4:f4:c0:2b:5f:43:aa:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Validity
Not Before: Jul 24 10:00:19 2026 GMT
Not After : Jul 25 10:00:19 2026 GMT
Subject: CN=9e7f2db0a094fe3e71be64fde892e9bff9868679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f9:cd:da:7c:ff:4e:75:ac:2e:be:44:76:58:
77:19:77:f6:11:d7:8c:fb:4a:12:d5:a3:e3:3e:aa:
6f:a5:c9:12:1d:12:2c:1e:77:46:ba:b3:bf:27:eb:
b6:29:ca:41:04:f9:ae:42:56:53:35:75:47:63:74:
bb:8f:bb:e8:3b:c0:86:79:ba:85:a8:2f:df:86:7c:
14:3f:27:48:ad:de:5f:ed:1b:e5:61:99:6c:07:4f:
b1:29:71:23:eb:2b:5c:0f:fa:f3:8a:c6:1e:bd:08:
1f:6d:cf:9d:e7:2f:fb:4b:01:60:38:fc:88:32:47:
32:23:0c:5c:6f:90:6e:40:e2:c8:df:37:ad:dc:97:
fd:af:0b:03:eb:ea:44:d8:ea:36:18:73:8d:6c:2a:
13:4a:8c:f4:7a:ab:0c:6a:d3:82:05:6f:6c:95:23:
33:5f:97:19:ab:3f:7d:f1:18:37:60:9f:f7:68:db:
8a:07:92:e7:c3:1d:e3:ab:38:2e:c9:20:6f:01:4c:
30:ab:83:df:f2:3d:d2:23:01:2d:f3:07:3d:32:af:
9d:54:fc:c6:8f:b8:81:8d:48:12:02:95:63:ee:73:
1d:b4:a7:38:bd:d0:85:54:08:33:2c:ed:fa:76:fb:
06:93:e5:0e:e9:24:51:68:f0:5e:aa:88:ac:d4:cb:
a6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:7F:2D:B0:A0:94:FE:3E:71:BE:64:FD:E8:92:E9:BF:F9:86:86:79
X509v3 Authority Key Identifier:
keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:ad:42:52:98:2b:67:6e:11:f0:66:46:1d:2d:fb:ca:c8:f8:
57:e5:3e:8a:52:e4:97:05:0e:78:7f:21:f2:77:5f:d6:47:db:
0d:a9:3e:a1:18:7b:79:4b:b7:c1:8c:59:09:e3:6e:a5:c5:9c:
3e:7d:2c:6d:92:c2:c2:42:af:74:47:e4:74:a8:98:9b:c4:94:
87:fb:87:f2:9e:4d:55:59:69:70:9e:6f:61:b2:21:5e:9e:fe:
40:20:f0:be:0e:d9:74:60:0a:44:3e:ec:29:50:a2:6b:4e:b9:
9d:31:8e:7d:52:e4:61:ee:35:0b:16:bd:68:8f:b0:37:f6:6b:
e0:ae:94:fc:b8:16:6a:ba:ab:84:78:17:57:68:6e:ad:a5:9a:
15:df:04:6c:be:bc:d6:9a:d5:1c:25:7b:42:49:3a:d2:42:d9:
97:f6:2a:22:c2:e1:be:c2:41:4b:f0:b2:05:5b:bf:b2:7b:c0:
a2:09:b4:e1:e2:f0:b9:e7:28:2c:95:bd:28:64:55:a9:8d:6c:
b4:5f:24:c9:e4:20:83:1f:a2:b7:84:96:c6:00:24:14:c6:43:
14:15:a9:fa:d6:c1:5f:dd:70:53:bf:b0:42:46:3b:c0:1d:02:
8a:21:d2:a6:27:31:4d:c9:97:b1:0b:53:7f:47:c0:d7:03:06:
08:f5:24:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:02:17 2026 by rpki-client