Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
File: t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft (raw, json)
Hash identifier: zFzlZg6CUpudY+rGBaPLnXYF6mg75MznfjYwYmQ/Sv8=
Subject key identifier: 7F:95:78:0A:DB:02:2B:A7:6A:18:6B:7C:15:0E:97:5A:EE:DD:D7:A5
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Certificate issuer: /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial: 019F238FAB2B557321B60C43920DB20CE8A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
Manifest number: 1992
Signing time: Thu 02 Jul 2026 16:00:45 +0000
Manifest this update: Thu 02 Jul 2026 16:00:45 +0000
Manifest next update: Fri 03 Jul 2026 16:00:45 +0000
Files and hashes: 1: 2MSpCLbIJT_dNS85cUQH7P6hQQQ.roa (hash: LqxKJfwKg1vJNoy6niHI6Ay0t/ibwSsUhqanJ+kZvVg=)
2: TZEmLmroEs6IRm7BIRkKTFCJTnA.roa (hash: QhC3msm1fXEe5FbZInDyO6caWrevlSV8+0GhYVm+mSE=)
3: XKyWf4Y6NjYLpXjJG8NNu1YgV8I.roa (hash: Wg/rYioLK0eT7zXUczkOHExRo3EIegYLBIdXxr8Hp88=)
4: t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl (hash: NK2JRdwQjTwx7s8epAESwi2v+aaqReLPcI+Rs4qF0xs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 Jul 2026 16:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:8f:ab:2b:55:73:21:b6:0c:43:92:0d:b2:0c:e8:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Validity
Not Before: Jul 2 16:00:45 2026 GMT
Not After : Jul 3 16:00:45 2026 GMT
Subject: CN=7f95780adb022ba76a186b7c150e975aeeddd7a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b3:a0:f5:67:f0:1a:29:63:ef:c2:8a:c5:d3:
6e:23:0e:a4:88:d0:81:ae:c0:26:b9:b5:ae:97:07:
f1:ea:96:48:8f:9d:e6:33:73:28:1a:f8:51:97:1c:
a7:fd:46:40:8b:dd:61:4c:fb:fe:3d:33:2a:b4:73:
eb:de:31:cb:da:c8:28:e9:69:51:fc:36:7b:ea:64:
a8:94:97:ba:57:46:ab:b0:a0:d8:78:b6:72:df:1f:
62:24:65:6b:b1:14:53:40:4e:4b:fc:a8:a4:d0:96:
83:e3:45:82:7a:57:35:49:1c:26:de:67:7c:c1:81:
4b:63:e5:d1:bf:fb:6c:be:c1:41:75:8a:32:5a:c2:
5d:44:b4:bb:d1:10:e3:a2:02:24:7f:9b:51:e2:fa:
09:36:f6:8a:f4:fd:7b:13:ac:d7:f2:bc:39:42:cf:
23:43:e8:59:bf:41:1a:42:f2:32:5e:98:65:9b:36:
14:b2:26:5a:a0:a9:b6:ac:cf:8e:a5:8c:72:99:78:
3f:b0:ca:c4:91:bf:e2:a1:b7:90:ed:96:8f:78:6e:
d1:8f:12:56:32:99:5c:e6:cf:80:bb:cc:9e:6d:2b:
b9:1b:c7:6b:84:b3:f6:1f:00:46:84:7b:7e:a2:ce:
eb:c2:a4:2c:f4:2e:f8:cd:51:3e:47:b9:85:2c:e1:
26:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:95:78:0A:DB:02:2B:A7:6A:18:6B:7C:15:0E:97:5A:EE:DD:D7:A5
X509v3 Authority Key Identifier:
keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:9d:35:ec:4d:b3:b0:75:00:d6:c4:cd:95:6e:bf:d2:9c:9d:
da:ac:10:d0:8d:c8:89:b4:c9:62:b5:eb:ab:79:60:18:39:63:
f7:0b:12:a6:07:e1:04:81:09:67:40:14:79:01:f3:be:40:e6:
66:47:00:f0:49:8b:81:69:60:bc:d0:3d:42:d6:c2:12:a1:86:
2d:2b:07:1d:2c:7c:df:b0:8f:c2:22:2a:04:32:2f:4a:5b:45:
26:99:cc:f1:74:6d:83:b7:8b:56:87:11:1a:c7:3a:de:f2:a4:
0b:f5:22:dc:65:e1:03:54:7a:4c:17:31:be:51:ff:21:39:46:
ea:f4:1b:a7:e9:00:fd:d5:5c:0c:4c:1d:3c:00:d6:8f:76:08:
1b:49:f7:49:b1:29:b3:cc:66:b6:42:f7:eb:25:c8:44:3a:4a:
f5:7f:cd:50:db:e5:85:46:3e:af:d3:99:1a:19:97:fa:43:ff:
60:67:d8:73:16:67:3b:f0:33:6b:76:14:83:60:b2:ea:d2:06:
46:22:7e:7e:27:c6:2c:e1:ca:3c:18:fc:e9:34:2c:d4:f9:a7:
6d:08:ed:92:d9:8f:55:43:de:ad:35:ad:53:17:3e:f1:6c:19:
19:c8:c6:24:f5:7d:e7:1d:06:8a:81:18:89:1e:a1:5d:0c:c2:
11:99:a4:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 2 21:32:45 2026 by rpki-client