Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
File: t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft (raw, json)
Hash identifier: j8melx++j3873Ob4fdYpEQRx+eFw3W8111qmpgO3QyE=
Subject key identifier: 44:7E:97:A5:E5:A9:76:12:69:11:13:5B:85:6C:9C:28:9E:D5:95:30
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Certificate issuer: /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial: 01A0D75F96B35D598F0CF5BFC5233D1D4B76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
Manifest number: 1A75
Signing time: Fri 25 Sep 2026 07:02:40 +0000
Manifest this update: Fri 25 Sep 2026 07:02:40 +0000
Manifest next update: Sat 26 Sep 2026 07:02:40 +0000
Files and hashes: 1: PRNpmNoXJBIoF9gh578wEhtMpdQ.roa (hash: g9ylBrvDhSOD9y5ykNiZEjQPUeqbZ/uKUmYrg55Kn+I=)
2: iE0cS-gjGQ2wH2CEFbUXZzlClEs.roa (hash: zt5rLB2IKmjF4fOUcKb7lO1SdJgaIMds/uhpaf0hUX0=)
3: t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl (hash: j+M6gFZvP7Lx/gcoqVojyqjpYwr9Pi3/Ier4BhLyIp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 07:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:5f:96:b3:5d:59:8f:0c:f5:bf:c5:23:3d:1d:4b:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Validity
Not Before: Sep 25 07:02:40 2026 GMT
Not After : Sep 26 07:02:40 2026 GMT
Subject: CN=447e97a5e5a976126911135b856c9c289ed59530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bb:f8:45:06:78:42:c1:02:4f:5b:0f:73:f2:
d4:4b:1b:a4:fc:dc:90:5b:5c:70:7a:8c:73:72:eb:
c8:91:83:ec:e8:f5:ed:47:a2:1f:84:0f:7f:39:91:
57:d4:77:c3:5f:97:37:4a:fa:59:fc:1a:28:2c:f8:
83:1e:04:d8:c6:f3:65:e2:c2:05:22:f0:aa:97:65:
08:1c:d4:3c:f8:59:7c:42:ec:17:65:a8:e2:6e:3a:
e3:9b:9c:92:07:7f:be:f9:1a:bb:c9:67:73:ff:7c:
eb:b2:6e:27:42:6f:f6:48:05:c6:16:da:ae:05:08:
64:29:0c:81:fe:4a:4e:f5:f3:24:46:c9:04:d6:19:
ca:bf:d0:e6:29:5b:ae:9f:58:46:ee:dc:63:0f:54:
e0:f3:47:6d:da:9d:fc:5d:1d:a6:aa:fc:f2:12:cc:
b7:99:59:86:19:e9:ae:b0:16:4c:50:a7:28:9b:1f:
af:58:cb:6b:7d:bd:a3:53:bb:eb:f0:5f:db:4d:05:
5f:2f:fb:6d:08:77:26:77:88:ca:69:89:31:3a:ad:
bc:e6:89:96:09:44:d3:10:a5:41:14:f4:2e:e7:6b:
78:9c:39:78:f5:fa:5f:37:a4:bd:43:da:f0:fb:72:
61:20:ff:da:c0:fd:8e:69:5d:38:ac:18:36:35:33:
be:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:7E:97:A5:E5:A9:76:12:69:11:13:5B:85:6C:9C:28:9E:D5:95:30
X509v3 Authority Key Identifier:
keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:05:0c:44:47:b6:3d:0b:9e:ca:ba:da:76:0f:28:0e:4d:f8:
57:cf:d7:5f:88:dc:2b:d6:1b:0b:9d:7c:d3:07:39:97:fa:01:
f6:56:77:8e:ba:ba:1f:43:3c:38:f4:86:b1:ea:4c:bf:77:9d:
ce:8a:b9:a7:94:35:7b:24:49:9e:58:be:f6:51:e0:74:33:9a:
c3:56:a6:80:4e:8b:c7:cf:a2:3c:33:98:28:ac:e6:63:8e:71:
60:e3:56:62:9d:cd:68:58:18:db:05:cc:4d:72:3f:85:67:5c:
08:8f:c4:0d:9e:ce:75:4d:9c:49:ca:31:3d:ef:60:e2:0b:68:
19:af:b8:7e:a8:4d:cc:85:d2:09:06:13:b9:63:63:a2:bd:f7:
77:71:ea:53:bc:ba:f3:7a:54:4c:0f:7b:b5:a0:2c:9e:89:17:
b1:a6:46:37:ce:0d:bf:44:76:15:da:7b:d5:19:39:1f:2e:7b:
d2:5b:d7:11:fe:83:ef:32:09:0b:b1:b2:50:fa:5c:68:32:05:
ca:26:c6:e8:94:02:c9:5e:1f:4d:1c:eb:d8:68:62:ff:30:82:
37:1d:72:7a:24:1a:76:ef:99:4b:a2:e0:ab:ef:aa:af:42:9e:
e7:0c:62:c1:36:20:97:80:6f:b0:09:f9:14:1a:82:5a:55:79:
b1:4e:0f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:45:10 2026 by rpki-client