Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
File: t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft (raw, json)
Hash identifier: gDbA0cpJpToFf5ENp0d0b3QQOCjkIUSxYEUsV0g8zKY=
Subject key identifier: FF:C7:8A:31:EB:5C:1C:07:3C:84:C3:C2:1C:77:AD:C5:07:08:27:93
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Certificate issuer: /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial: 01A07CBC73EACB554C9D015E1BFD009EB96D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
Manifest number: 1A46
Signing time: Mon 07 Sep 2026 16:38:40 +0000
Manifest this update: Mon 07 Sep 2026 16:38:40 +0000
Manifest next update: Tue 08 Sep 2026 16:38:40 +0000
Files and hashes: 1: PRNpmNoXJBIoF9gh578wEhtMpdQ.roa (hash: g9ylBrvDhSOD9y5ykNiZEjQPUeqbZ/uKUmYrg55Kn+I=)
2: iE0cS-gjGQ2wH2CEFbUXZzlClEs.roa (hash: zt5rLB2IKmjF4fOUcKb7lO1SdJgaIMds/uhpaf0hUX0=)
3: t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl (hash: pjW87Y4w831rcHDIc1Zlzm+qjOlsITMJgTw3BOFOfKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7c:bc:73:ea:cb:55:4c:9d:01:5e:1b:fd:00:9e:b9:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Validity
Not Before: Sep 7 16:38:40 2026 GMT
Not After : Sep 8 16:38:40 2026 GMT
Subject: CN=ffc78a31eb5c1c073c84c3c21c77adc507082793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:45:5a:bd:b2:61:c2:91:a2:84:c3:31:ad:1f:
58:3c:06:e3:aa:34:fb:da:99:4c:88:bf:01:c1:a8:
aa:1f:ce:ff:6d:e3:39:b8:ce:ad:f9:4d:6a:f6:4f:
5a:1e:d9:86:dd:47:8e:1b:97:35:f0:c9:88:19:c2:
de:c9:3c:6c:41:e0:fc:43:2c:03:b1:ed:26:1b:65:
6d:4d:78:62:11:28:c0:81:f2:6b:f0:73:06:04:51:
de:2f:01:7e:7e:82:89:01:f3:58:c0:a1:50:54:98:
71:11:15:dc:b8:02:af:8a:b2:2f:f1:9f:70:57:54:
ea:e6:79:a6:59:97:e8:a6:9e:81:0f:f9:80:92:90:
3d:63:ee:07:bc:e6:00:a2:09:24:e4:2b:39:a8:e0:
07:ad:bd:3c:a3:a1:c6:5c:07:57:1e:61:9f:62:d5:
7a:ca:5a:86:1a:37:14:e9:d7:7d:82:b5:2a:61:aa:
af:f3:b4:46:8c:4c:12:34:8c:24:5c:66:f1:35:7e:
0d:3c:1f:35:e5:32:ec:8e:68:a0:ca:61:55:0b:d7:
cc:35:16:62:61:25:9c:c5:37:8b:11:26:9b:40:9d:
f3:5c:2d:35:7e:fa:eb:5e:31:4c:22:8c:13:39:9f:
41:e4:3a:fc:0d:c7:f6:24:98:95:88:5a:da:e8:d1:
69:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:C7:8A:31:EB:5C:1C:07:3C:84:C3:C2:1C:77:AD:C5:07:08:27:93
X509v3 Authority Key Identifier:
keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:bb:46:91:1d:cd:d6:ba:ae:33:7d:cb:b0:7b:50:e9:ba:0b:
9c:32:7e:c9:3b:bf:d9:4f:22:ab:5a:cf:b8:3d:6f:59:d1:47:
93:be:f4:07:16:e1:22:5d:d4:31:8c:7b:be:7c:e4:27:cc:13:
0c:20:3e:cc:d9:5c:6e:e3:b8:e1:6d:ad:13:ea:0f:69:f4:81:
de:47:40:52:28:1d:8a:96:f5:5d:bb:57:76:0d:a8:28:d0:12:
c2:bf:7f:66:f2:b0:e0:b5:ff:f5:ce:8f:c2:e0:64:ec:af:f4:
df:ba:8e:98:ba:35:9e:de:49:ab:b2:b1:e2:65:8b:c8:64:16:
8f:e2:ef:c8:f8:2f:15:d8:c0:7a:35:ad:32:3b:f4:5b:82:d1:
86:c8:4a:fa:a3:4f:ba:80:76:14:28:8c:61:cc:bb:c5:f9:7c:
f7:25:33:d5:6a:24:8c:d9:07:9b:48:1c:16:36:7a:2b:21:9a:
29:7b:15:d4:72:a6:90:5f:a8:a7:de:0c:78:97:66:86:91:d7:
49:6f:6d:30:d4:6c:2a:ec:8b:e1:4c:f0:58:42:16:41:1e:64:
fe:06:0b:29:ca:76:e9:4a:c8:3d:5c:5a:58:fd:ca:63:b6:c8:
52:fd:00:4e:ad:27:5e:58:f4:50:7d:15:e2:67:85:6d:cb:cf:
55:02:55:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaB8vHPqy1VMnQFeG/0AnrltMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3NWEwNTY2ZDBiNjNhMWY4NjJkODM0NThlNGYyZWE2ZmQ4
ZjdkMjEwHhcNMjYwOTA3MTYzODQwWhcNMjYwOTA4MTYzODQwWjAzMTEwLwYDVQQD
EyhmZmM3OGEzMWViNWMxYzA3M2M4NGMzYzIxYzc3YWRjNTA3MDgyNzkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEVavbJhwpGihMMxrR9YPAbjqjT7
2plMiL8BwaiqH87/beM5uM6t+U1q9k9aHtmG3UeOG5c18MmIGcLeyTxsQeD8QywD
se0mG2VtTXhiESjAgfJr8HMGBFHeLwF+foKJAfNYwKFQVJhxERXcuAKvirIv8Z9w
V1Tq5nmmWZfopp6BD/mAkpA9Y+4HvOYAogkk5Cs5qOAHrb08o6HGXAdXHmGfYtV6
ylqGGjcU6dd9grUqYaqv87RGjEwSNIwkXGbxNX4NPB815TLsjmigymFVC9fMNRZi
YSWcxTeLESabQJ3zXC01fvrrXjFMIowTOZ9B5Dr8Dcf2JJiViFra6NFpIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP/HijHrXBwHPITDwhx3rcUHCCeTMB8GA1UdIwQY
MBaAFLdaBWbQtjofhi2DRY5PLqb9j30hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDFvRlp0QzJPaC1HTFlORmprOHVwdjJQZlNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8xMDM1NzAtMWNmNi00MmFjLTgxZDQt
ODNmNjAxYzNmYjU5LzEvdDFvRlp0QzJPaC1HTFlORmprOHVwdjJQZlNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi8xMDM1NzAtMWNmNi00MmFjLTgxZDQtODNmNjAxYzNmYjU5
LzEvdDFvRlp0QzJPaC1HTFlORmprOHVwdjJQZlNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgbtGkR3N
1rquM33LsHtQ6boLnDJ+yTu/2U8iq1rPuD1vWdFHk770BxbhIl3UMYx7vnzkJ8wT
DCA+zNlcbuO44W2tE+oPafSB3kdAUigdipb1XbtXdg2oKNASwr9/ZvKw4LX/9c6P
wuBk7K/037qOmLo1nt5Jq7Kx4mWLyGQWj+LvyPgvFdjAejWtMjv0W4LRhshK+qNP
uoB2FCiMYcy7xfl89yUz1WokjNkHm0gcFjZ6KyGaKXsV1HKmkF+op94MeJdmhpHX
SW9tMNRsKuyL4UzwWEIWQR5k/gYLKcp26UrIPVxaWP3KY7bIUv0ATq0nXlj0UH0V
4meFbcvPVQJVyg==
-----END CERTIFICATE-----
Generated at Tue Sep 8 02:23:21 2026 by rpki-client