Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
File: t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft (raw, json)
Hash identifier: 8xLc1H+xYqsGX9QtCulDI6ZHmm5/Op1U0W6BF+aWQKQ=
Subject key identifier: 0F:6F:8E:BA:DB:22:4C:C7:1D:1A:B4:88:1D:F3:72:5B:13:57:C9:88
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Certificate issuer: /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial: 01A0AECF8B00A2BEB28EBCECAAFC60962991
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
Manifest number: 1A60
Signing time: Thu 17 Sep 2026 10:00:31 +0000
Manifest this update: Thu 17 Sep 2026 10:00:31 +0000
Manifest next update: Fri 18 Sep 2026 10:00:31 +0000
Files and hashes: 1: PRNpmNoXJBIoF9gh578wEhtMpdQ.roa (hash: g9ylBrvDhSOD9y5ykNiZEjQPUeqbZ/uKUmYrg55Kn+I=)
2: iE0cS-gjGQ2wH2CEFbUXZzlClEs.roa (hash: zt5rLB2IKmjF4fOUcKb7lO1SdJgaIMds/uhpaf0hUX0=)
3: t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl (hash: PdA5EumRVYyRCEGDa0ru+gUZFRVUOBAjxZ/DKXwZNno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ae:cf:8b:00:a2:be:b2:8e:bc:ec:aa:fc:60:96:29:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Validity
Not Before: Sep 17 10:00:31 2026 GMT
Not After : Sep 18 10:00:31 2026 GMT
Subject: CN=0f6f8ebadb224cc71d1ab4881df3725b1357c988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8e:15:6d:f6:df:4f:21:bf:9a:23:29:70:f5:
32:89:bd:a7:45:2e:d9:bd:cf:59:ed:0f:3e:16:5c:
c7:26:66:7b:3a:94:b8:0c:8b:76:38:e9:d8:6a:e7:
d2:f8:74:4d:0c:72:c0:60:27:69:bb:5d:9d:cd:d4:
31:96:9d:67:05:1d:2e:57:f7:27:2a:53:cf:8c:98:
26:4c:c8:19:a1:ae:f2:5d:b3:d5:36:46:bd:c8:8f:
16:80:54:84:83:3f:70:05:da:ee:ba:c1:54:68:1b:
1e:f0:5f:20:9d:c7:30:e3:07:5c:ec:0f:0d:88:bd:
94:64:7f:eb:ca:e7:07:d9:37:09:f5:f7:b1:bf:68:
c8:40:35:95:45:22:07:3f:1c:10:6b:a3:de:0a:4b:
14:6f:cd:25:1a:7f:05:c2:43:91:96:53:73:8b:cf:
49:27:2a:72:3c:7e:28:f3:2c:10:3e:05:b8:20:47:
ea:16:69:e2:4d:e7:a4:df:bd:e7:37:8a:f8:5f:fe:
4e:c8:88:6c:5b:6c:f5:8e:49:8c:fa:f8:f2:61:70:
6f:ee:0a:80:ef:bd:f9:44:2c:cf:32:d3:c7:fe:74:
5c:d8:60:dc:2f:1c:98:81:ad:71:8e:3a:dd:d1:f1:
fd:53:da:f2:e5:b6:db:6b:e1:14:61:a7:0d:7c:2d:
34:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:6F:8E:BA:DB:22:4C:C7:1D:1A:B4:88:1D:F3:72:5B:13:57:C9:88
X509v3 Authority Key Identifier:
keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:8e:3c:cb:fa:f0:84:73:c8:1a:ea:1f:18:6f:f0:07:7f:eb:
ef:e9:aa:44:09:42:d4:68:17:8d:e9:bc:ae:38:1d:53:80:52:
ec:46:ed:db:ce:5b:dc:bc:1c:e4:4b:a0:33:ab:f0:3c:b8:df:
83:54:a2:d3:3d:72:37:a5:bf:89:08:4f:7e:e6:c3:90:2f:d2:
dc:1b:0b:20:2e:04:4f:2d:33:af:72:0e:8a:ed:a3:b5:5f:58:
49:e8:0c:c8:27:0e:6a:b9:68:2e:95:7e:5f:4f:46:ec:b9:86:
22:ae:52:ef:c4:bf:cc:5a:e4:01:19:5d:3e:7a:de:8b:b4:a5:
ab:21:48:14:90:b2:60:17:91:d2:b8:8d:24:1e:00:bd:12:fc:
77:07:dc:b1:8b:e8:fa:0e:3f:41:4a:6c:cd:d9:a7:25:c8:a8:
b4:1e:3e:d8:83:a9:5b:c1:11:f6:8c:66:59:67:cc:36:e6:55:
60:9d:36:73:10:53:cf:82:af:c8:93:b1:80:6c:2a:f1:4e:3e:
88:e8:95:38:9e:66:72:78:e8:8b:80:02:3d:70:44:50:4f:d1:
2b:80:13:b4:c2:01:79:d8:b1:88:b2:fd:cf:b7:be:a7:a1:d3:
cb:c4:3a:7e:a8:45:eb:c3:82:84:6a:4b:c8:6b:35:de:d5:5b:
b7:7c:d3:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 14:44:27 2026 by rpki-client