Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
File: t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft (raw, json)
Hash identifier: GysWT1bPESkFZ1yXIZEClIHQIihXqyyXahKaAy0uq5g=
Subject key identifier: 32:46:A7:85:A1:93:FF:C1:9D:C9:B1:98:11:43:5F:5F:17:D4:48:37
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Certificate issuer: /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial: 01A0882FDBA71A2572B49790849514359760
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
Manifest number: 1A4C
Signing time: Wed 09 Sep 2026 22:00:32 +0000
Manifest this update: Wed 09 Sep 2026 22:00:32 +0000
Manifest next update: Thu 10 Sep 2026 22:00:32 +0000
Files and hashes: 1: PRNpmNoXJBIoF9gh578wEhtMpdQ.roa (hash: g9ylBrvDhSOD9y5ykNiZEjQPUeqbZ/uKUmYrg55Kn+I=)
2: iE0cS-gjGQ2wH2CEFbUXZzlClEs.roa (hash: zt5rLB2IKmjF4fOUcKb7lO1SdJgaIMds/uhpaf0hUX0=)
3: t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl (hash: +a+pMHafc6NU6ogn5qnfEr0XmV3N8t2+IhfgNnjIoxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 21:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:88:2f:db:a7:1a:25:72:b4:97:90:84:95:14:35:97:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Validity
Not Before: Sep 9 22:00:32 2026 GMT
Not After : Sep 10 22:00:32 2026 GMT
Subject: CN=3246a785a193ffc19dc9b19811435f5f17d44837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1d:0e:6c:fc:2b:05:19:45:ec:38:43:3a:79:
28:45:2b:26:6f:1c:34:07:d3:f5:64:43:9e:a7:d6:
ad:35:cc:5b:e4:f8:c4:a3:ec:0f:ae:5b:c0:8f:36:
3c:5f:9b:6a:b1:e2:31:14:05:2f:05:fd:a6:9d:16:
f1:c8:53:25:b1:af:23:96:ac:2f:0a:c5:d7:aa:7a:
36:8e:0e:30:a9:51:67:80:c6:a3:8d:c4:36:04:a4:
a2:04:5e:a1:b7:8f:c2:13:43:d6:d0:b2:c0:b9:06:
d8:0b:7e:bc:e3:13:f5:4a:cd:6f:34:64:d6:db:a4:
76:b4:2d:15:5b:8b:b0:2e:f2:fb:cb:fd:4b:50:ef:
80:c1:45:78:60:1b:63:0e:de:4f:e9:c0:87:75:04:
61:c3:18:6e:5b:27:39:f9:6d:cf:cd:14:b8:eb:db:
9b:ab:da:6a:66:d4:57:a1:d7:38:df:d3:fb:d0:1c:
d7:03:2e:43:8d:a8:10:26:3f:2b:35:80:9a:45:91:
5a:85:5d:ee:ee:71:f7:1f:c0:67:64:81:3a:3c:00:
c1:fd:3e:3d:43:13:54:fd:cb:ce:ad:5f:86:7f:9a:
c8:f2:13:f5:4f:23:7e:8f:73:7f:f7:5b:72:51:62:
60:1d:b3:0f:60:8f:55:cf:9e:35:b2:9b:7e:5e:38:
6c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:46:A7:85:A1:93:FF:C1:9D:C9:B1:98:11:43:5F:5F:17:D4:48:37
X509v3 Authority Key Identifier:
keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:42:7f:02:19:0e:af:eb:18:b2:ae:2b:30:5e:08:cd:2a:c8:
85:0d:4e:68:a7:7d:d1:fe:7d:3d:92:23:2a:39:cc:27:d6:6e:
ad:f4:c9:df:72:57:d7:4a:95:a3:d6:6a:c5:71:af:f8:c6:dc:
7f:a5:df:f4:7f:f2:2b:60:6c:59:5b:ff:61:cd:d1:48:14:ee:
ea:fc:db:c5:2d:29:a8:c1:2a:67:33:89:e2:30:60:f1:d4:97:
bd:05:1d:7c:ce:d2:e6:da:c1:39:c2:73:d1:56:d0:59:ae:2a:
80:3b:51:74:cd:c6:1c:c8:05:bc:61:b3:c7:d9:42:78:28:fc:
88:4b:cd:d0:e2:71:f1:d1:81:1a:15:e4:7d:de:90:b1:ff:00:
aa:7f:56:c5:f6:ef:01:43:60:11:62:c5:3f:e0:32:17:8f:c3:
7a:1a:d8:ca:02:b8:b1:ea:8b:bf:f1:ea:83:90:80:15:54:8f:
36:cf:a4:89:12:34:7b:14:97:97:2c:fd:3a:12:08:4b:d5:54:
c2:b4:55:73:dc:05:8b:71:4f:3a:ad:05:dc:97:8a:c1:91:f9:
b3:d6:fa:b6:d9:cf:c9:49:a9:08:2e:69:94:cb:cf:2d:4a:c0:
be:7d:69:bb:a8:32:aa:c2:85:f2:eb:95:6a:ad:02:3d:51:4d:
44:64:3d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 03:20:03 2026 by rpki-client