Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
File: t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft (raw, json)
Hash identifier: 0lfNji9hM0rNO3rKvZRVrgd8jc3OwtLAYpmBdYOwk6A=
Subject key identifier: 22:DE:1E:DE:D8:C0:8B:B6:17:8B:4B:55:CB:44:B2:25:80:EF:C3:FA
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Certificate issuer: /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial: 01A052542F747DABC94D45C0F7D0BC7625C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
Manifest number: 1A2F
Signing time: Sun 30 Aug 2026 11:00:43 +0000
Manifest this update: Sun 30 Aug 2026 11:00:43 +0000
Manifest next update: Mon 31 Aug 2026 11:00:43 +0000
Files and hashes: 1: 3PZtOtEP32pxmagHDWpHuXtCCRc.roa (hash: bpJEOxuRCU5ZgS5FbAAwutvMDXKwEbHigoSaJaf1e2M=)
2: TZEmLmroEs6IRm7BIRkKTFCJTnA.roa (hash: QhC3msm1fXEe5FbZInDyO6caWrevlSV8+0GhYVm+mSE=)
3: iE0cS-gjGQ2wH2CEFbUXZzlClEs.roa (hash: zt5rLB2IKmjF4fOUcKb7lO1SdJgaIMds/uhpaf0hUX0=)
4: t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl (hash: 9Ma3N3d4DWtfiLFqqZukMhUByeQ7ICQiYsYY6WejgoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 31 Aug 2026 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:52:54:2f:74:7d:ab:c9:4d:45:c0:f7:d0:bc:76:25:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Validity
Not Before: Aug 30 11:00:43 2026 GMT
Not After : Aug 31 11:00:43 2026 GMT
Subject: CN=22de1eded8c08bb6178b4b55cb44b22580efc3fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ab:b2:fe:f5:1b:e6:ce:ef:68:05:ad:6e:bf:
73:cc:f5:29:e7:20:99:a6:cc:7c:62:60:c5:ba:fa:
d6:90:32:53:e4:55:16:be:26:2a:dd:30:ba:34:ac:
16:85:7f:c8:ad:e2:ef:57:da:4a:dd:37:13:fc:36:
03:04:ee:ea:df:fa:24:d9:ec:a1:71:38:e2:e3:97:
94:9a:51:c2:bc:17:9a:da:2a:25:2e:ba:a6:e9:a9:
34:86:16:c5:ca:ad:e1:89:64:e5:8d:22:cf:bd:5f:
c8:6c:7e:44:58:9a:0b:76:c9:1a:79:8e:bb:9b:39:
f9:48:4b:1e:ec:73:d1:7a:1f:e0:34:1a:f3:a3:22:
6b:55:2f:ae:58:b0:4e:4a:8e:5d:66:df:4b:4a:3e:
84:36:42:dc:b7:28:30:48:26:60:f6:2d:ac:ec:2d:
f9:af:54:19:9e:6d:dd:9e:12:bd:39:d7:3c:da:9b:
ff:57:24:f9:be:88:63:ce:d5:cf:9e:58:c0:c6:01:
17:3c:0e:f6:17:68:bc:ca:38:9f:22:9e:73:22:69:
b9:60:a1:a2:85:b3:f3:32:61:2d:24:e3:3e:c4:90:
0f:2f:cd:63:c0:16:66:5c:eb:12:14:42:65:a8:3a:
9e:77:3c:88:40:57:99:51:6b:23:8d:3c:fd:19:46:
dc:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:DE:1E:DE:D8:C0:8B:B6:17:8B:4B:55:CB:44:B2:25:80:EF:C3:FA
X509v3 Authority Key Identifier:
keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:6d:ce:8f:36:c6:d4:9e:68:d4:ae:54:2f:7c:54:4d:4f:7c:
58:5d:63:35:e2:dc:98:b0:e0:41:ff:d6:5e:5a:e4:0a:94:de:
47:83:c2:9d:81:34:c6:5a:e0:c0:e9:8b:6e:1f:d9:6d:fe:d4:
3c:78:f3:9b:b1:cb:d3:73:f7:10:1e:f5:59:28:39:f6:2a:40:
87:c5:9e:b0:04:d1:ed:4e:be:47:1c:4f:79:f9:bd:04:7c:f7:
e8:bf:b6:a9:09:95:21:6a:3e:02:a4:95:85:20:20:ee:6d:b8:
8c:de:c2:e1:52:dd:56:87:c3:49:e9:73:76:47:12:13:a0:02:
91:81:a3:73:27:7d:41:00:f9:a9:1f:9f:1d:0b:94:ad:7f:c3:
a7:4c:20:6e:11:4f:a3:48:56:81:4d:fc:9d:61:87:83:ba:f9:
dd:1f:69:ed:66:1c:7a:74:37:ea:d8:ac:23:bd:49:42:30:80:
47:34:0f:01:90:85:39:73:8c:4a:3d:1f:05:f3:e2:30:ef:9a:
ed:c2:35:0c:2b:3d:50:67:9f:12:53:b1:30:07:ea:e4:0e:80:
f6:f3:23:12:80:6b:c4:7f:12:40:e4:3b:2d:70:1b:78:e6:37:
1a:01:88:dc:09:e8:8f:86:39:24:90:2d:7a:31:81:55:52:42:
ca:26:a6:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBSVC90favJTUXA99C8diXFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3NWEwNTY2ZDBiNjNhMWY4NjJkODM0NThlNGYyZWE2ZmQ4
ZjdkMjEwHhcNMjYwODMwMTEwMDQzWhcNMjYwODMxMTEwMDQzWjAzMTEwLwYDVQQD
EygyMmRlMWVkZWQ4YzA4YmI2MTc4YjRiNTVjYjQ0YjIyNTgwZWZjM2ZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1auy/vUb5s7vaAWtbr9zzPUp5yCZ
psx8YmDFuvrWkDJT5FUWviYq3TC6NKwWhX/IreLvV9pK3TcT/DYDBO7q3/ok2eyh
cTji45eUmlHCvBea2iolLrqm6ak0hhbFyq3hiWTljSLPvV/IbH5EWJoLdskaeY67
mzn5SEse7HPReh/gNBrzoyJrVS+uWLBOSo5dZt9LSj6ENkLctygwSCZg9i2s7C35
r1QZnm3dnhK9Odc82pv/VyT5vohjztXPnljAxgEXPA72F2i8yjifIp5zImm5YKGi
hbPzMmEtJOM+xJAPL81jwBZmXOsSFEJlqDqedzyIQFeZUWsjjTz9GUbczQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCLeHt7YwIu2F4tLVctEsiWA78P6MB8GA1UdIwQY
MBaAFLdaBWbQtjofhi2DRY5PLqb9j30hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDFvRlp0QzJPaC1HTFlORmprOHVwdjJQZlNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8xMDM1NzAtMWNmNi00MmFjLTgxZDQt
ODNmNjAxYzNmYjU5LzEvdDFvRlp0QzJPaC1HTFlORmprOHVwdjJQZlNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi8xMDM1NzAtMWNmNi00MmFjLTgxZDQtODNmNjAxYzNmYjU5
LzEvdDFvRlp0QzJPaC1HTFlORmprOHVwdjJQZlNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXG3OjzbG
1J5o1K5UL3xUTU98WF1jNeLcmLDgQf/WXlrkCpTeR4PCnYE0xlrgwOmLbh/Zbf7U
PHjzm7HL03P3EB71WSg59ipAh8WesATR7U6+RxxPefm9BHz36L+2qQmVIWo+AqSV
hSAg7m24jN7C4VLdVofDSelzdkcSE6ACkYGjcyd9QQD5qR+fHQuUrX/Dp0wgbhFP
o0hWgU38nWGHg7r53R9p7WYcenQ36tisI71JQjCARzQPAZCFOXOMSj0fBfPiMO+a
7cI1DCs9UGefElOxMAfq5A6A9vMjEoBrxH8SQOQ7LXAbeOY3GgGI3Anoj4Y5JJAt
ejGBVVJCyiam0A==
-----END CERTIFICATE-----
Generated at Sun Aug 30 21:17:09 2026 by rpki-client