Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
File: t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft (raw, json)
Hash identifier: g7J5jl59zK1UCB+dYCiORiCVF3RPpTsU44fIZc7tfVY=
Subject key identifier: 71:B4:79:55:94:C2:27:C1:CD:87:0C:E1:3B:B2:E7:69:F7:5E:C7:10
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Certificate issuer: /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial: 01A130339C55BD1F38C3DF57B1A21FE2D2A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
Manifest number: 1AA3
Signing time: Mon 12 Oct 2026 13:00:50 +0000
Manifest this update: Mon 12 Oct 2026 13:00:50 +0000
Manifest next update: Tue 13 Oct 2026 13:00:50 +0000
Files and hashes: 1: PRNpmNoXJBIoF9gh578wEhtMpdQ.roa (hash: g9ylBrvDhSOD9y5ykNiZEjQPUeqbZ/uKUmYrg55Kn+I=)
2: iE0cS-gjGQ2wH2CEFbUXZzlClEs.roa (hash: zt5rLB2IKmjF4fOUcKb7lO1SdJgaIMds/uhpaf0hUX0=)
3: t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl (hash: NGzEwzAQbasJGO5CvGA90I1pK4xlaCH2J6ZiIXdxwpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 13:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:30:33:9c:55:bd:1f:38:c3:df:57:b1:a2:1f:e2:d2:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Validity
Not Before: Oct 12 13:00:50 2026 GMT
Not After : Oct 13 13:00:50 2026 GMT
Subject: CN=71b4795594c227c1cd870ce13bb2e769f75ec710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:46:48:29:1c:00:7e:72:ba:f9:2e:85:1f:98:
c5:3d:86:2a:64:bd:2c:d5:02:5a:19:d5:cb:7e:60:
18:4f:19:d6:41:99:6d:2a:58:a3:15:c6:75:22:42:
54:07:a0:a5:3a:01:c6:c3:55:70:7b:dd:cb:56:7a:
b0:ab:10:17:b4:58:3d:90:b0:2a:a0:68:db:fe:e5:
5a:bf:e3:f2:2d:93:d9:32:38:ec:3a:0c:9e:a9:6a:
b7:b2:31:65:17:bc:b1:42:bb:62:88:13:78:00:3b:
5f:c2:93:c1:8a:3f:dc:7e:6b:54:44:35:8c:45:fd:
ac:2b:ed:5c:ef:c2:17:c2:f4:96:3b:c3:3a:69:ff:
6c:5f:da:b7:50:07:1f:f8:86:c6:c5:3a:4b:c0:fb:
8e:8b:b6:db:38:4b:ed:9b:1b:67:54:f7:ef:73:20:
9d:93:ad:60:2b:ce:cd:0b:a8:69:6d:d0:e0:63:8b:
e8:03:24:5e:ff:02:9f:9b:29:c9:fc:a4:4e:5f:b1:
e3:19:7b:ff:49:82:21:c1:ce:eb:bc:d0:7f:cc:61:
f4:54:7b:ba:18:4e:fb:ca:fe:44:80:ff:3a:39:cc:
1a:0e:67:5f:9e:26:7c:79:a1:dd:47:86:80:e2:1a:
8c:fc:66:63:ff:32:f9:6e:8f:21:80:2c:cf:cd:dd:
9c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:B4:79:55:94:C2:27:C1:CD:87:0C:E1:3B:B2:E7:69:F7:5E:C7:10
X509v3 Authority Key Identifier:
keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:96:a9:59:06:c9:14:88:00:b6:db:d4:63:67:25:5c:fb:30:
d5:83:eb:97:bf:7e:1b:12:9a:8c:05:0e:9f:40:7c:0d:04:c3:
36:b9:37:89:b7:49:2a:1b:82:4e:3d:ee:11:1d:2d:a4:f0:51:
8f:f2:3b:5c:6d:96:6c:6c:a1:66:f8:cb:af:de:96:4b:1a:d0:
24:3d:0b:b4:ab:ba:34:b8:41:f3:f0:93:b6:2e:57:7b:c4:ac:
ce:b8:dd:73:41:c0:4b:66:0b:bd:22:ec:24:6c:35:03:81:7d:
6c:62:27:b0:ea:9c:31:c4:1d:28:bf:ce:a2:7b:de:2f:59:9e:
07:2b:f5:6c:6f:fa:e1:d8:a5:5e:72:2a:70:29:c1:ee:ae:ee:
87:c8:38:d6:f7:48:92:4a:98:ca:06:97:4e:f6:9a:88:1d:66:
61:cc:15:40:24:4c:46:b1:3f:08:04:29:2c:32:12:9c:02:81:
15:87:95:74:98:b7:7b:0c:88:a2:56:d6:bf:e7:38:89:de:98:
c7:54:66:e3:56:ef:08:ca:7a:4f:64:40:c6:54:9a:9f:bc:de:
12:22:ad:7b:f9:7c:cb:5a:92:cf:6c:73:ec:24:e9:1d:0d:05:
23:76:28:fb:ce:4d:41:ed:2a:b7:d1:ec:67:e3:21:af:e8:05:
6f:8e:44:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 22:22:47 2026 by rpki-client