Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
File: t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft (raw, json)
Hash identifier: HYQyjQAKoM/tKgJ8soem9ireyBr6km6D3Gg8VS98fNk=
Subject key identifier: EB:62:0D:84:92:C3:C4:99:FA:96:00:A3:08:33:36:FC:77:DA:56:7E
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Certificate issuer: /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial: 01A1814FEAD1743D1CDCFB37A142A9302088
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
Manifest number: 1ACD
Signing time: Wed 28 Oct 2026 07:01:00 +0000
Manifest this update: Wed 28 Oct 2026 07:01:00 +0000
Manifest next update: Thu 29 Oct 2026 07:01:00 +0000
Files and hashes: 1: PRNpmNoXJBIoF9gh578wEhtMpdQ.roa (hash: g9ylBrvDhSOD9y5ykNiZEjQPUeqbZ/uKUmYrg55Kn+I=)
2: iE0cS-gjGQ2wH2CEFbUXZzlClEs.roa (hash: zt5rLB2IKmjF4fOUcKb7lO1SdJgaIMds/uhpaf0hUX0=)
3: t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl (hash: JecdbmY0LOBmL5axn4WES3W2VJR3ZM8GlCtlrOpKGKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:4f:ea:d1:74:3d:1c:dc:fb:37:a1:42:a9:30:20:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Validity
Not Before: Oct 28 07:01:00 2026 GMT
Not After : Oct 29 07:01:00 2026 GMT
Subject: CN=eb620d8492c3c499fa9600a3083336fc77da567e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:39:d7:aa:6c:c6:4e:d1:6d:7e:a7:99:f9:34:
20:c0:2a:99:a3:1b:ba:8f:b7:c2:09:85:31:69:f8:
48:5f:5a:36:2f:fe:86:91:34:d3:1e:da:90:68:5e:
e4:21:e4:3b:40:72:36:a4:fa:33:ec:27:77:ba:5f:
53:02:39:aa:f9:7b:7c:5e:d4:14:eb:e3:b7:d8:67:
b2:69:c5:10:33:fb:44:fd:c4:40:f4:72:d5:32:3f:
b8:8c:95:27:91:41:69:ff:43:0a:be:e0:d5:ef:e7:
24:9c:85:b4:56:a4:e1:9a:f8:1a:53:8f:e3:fa:b7:
d4:38:96:f3:eb:00:7f:0e:0d:eb:db:11:f2:ea:c5:
fb:d0:e4:42:58:74:db:0b:75:a4:ce:f4:9c:45:d5:
cd:4c:81:8f:35:9c:1a:e3:94:c5:6f:f9:40:98:15:
5f:a4:c5:7d:58:c5:e1:8e:7d:65:d2:0d:be:f9:35:
45:fe:90:3b:a8:78:63:83:0e:c9:e2:4e:24:35:1a:
e9:7a:58:ca:b9:4e:a7:5d:ee:f3:cb:21:19:e2:fe:
a4:f0:6a:b1:63:98:9c:a1:19:49:1a:2a:98:6a:87:
c2:47:d7:9b:72:30:53:de:56:6e:96:aa:38:1b:ed:
d3:e7:f6:9e:25:79:23:ed:4b:4b:7b:1f:f8:78:72:
17:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:62:0D:84:92:C3:C4:99:FA:96:00:A3:08:33:36:FC:77:DA:56:7E
X509v3 Authority Key Identifier:
keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:41:89:83:c3:a4:6c:4a:06:3b:17:1a:a1:8f:3e:5b:ab:25:
ff:23:b8:2c:fc:7d:45:9f:c6:22:75:23:47:39:c0:d4:36:14:
be:ca:dd:58:0a:63:2b:a7:1f:0f:62:af:c0:20:e9:45:ef:c5:
3a:87:36:19:34:7b:32:8d:4b:8c:da:7c:9c:21:86:0d:66:bc:
b3:b9:da:5e:5e:1f:98:19:55:27:c1:a6:af:28:0d:39:4c:5b:
57:91:9b:09:09:44:b7:ab:01:58:23:b2:5f:0c:ea:0c:52:8b:
df:f5:48:15:14:da:a0:53:0f:d5:fc:71:0e:12:28:4c:7c:a8:
62:7a:e3:95:24:ee:64:4f:92:f5:3f:24:ca:15:aa:b7:bd:4c:
ef:3d:20:00:6c:73:27:a3:3c:a4:e1:3b:dd:00:b7:d0:57:1b:
56:e3:e5:c4:94:18:09:b0:62:c7:af:86:5f:c6:1b:03:26:86:
38:51:95:dc:1c:f9:ef:82:68:bf:a4:16:4f:6f:bf:28:34:bb:
98:ae:ab:81:eb:85:e8:cf:e4:a5:f3:20:3a:5e:5a:fc:2a:08:
63:e6:62:50:4a:2f:00:37:0a:1f:79:a5:d0:2a:69:62:ed:f2:
83:72:3b:3b:fe:3e:07:69:07:77:63:87:4e:c7:0b:f4:a6:d3:
47:26:61:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 16:33:54 2026 by rpki-client