Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
File: t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft (raw, json)
Hash identifier: zk+UPtxNKDL3LLsZInc4GVZx5nX0vtZtuuG1/jfnVCs=
Subject key identifier: D1:93:29:E2:82:16:B7:29:03:25:01:3F:3D:1D:72:BE:8F:DC:9B:52
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Certificate issuer: /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial: 01A00D3C4988F4B3646800EFF05582124F41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
Manifest number: 1A0B
Signing time: Mon 17 Aug 2026 01:00:49 +0000
Manifest this update: Mon 17 Aug 2026 01:00:49 +0000
Manifest next update: Tue 18 Aug 2026 01:00:49 +0000
Files and hashes: 1: 2MSpCLbIJT_dNS85cUQH7P6hQQQ.roa (hash: LqxKJfwKg1vJNoy6niHI6Ay0t/ibwSsUhqanJ+kZvVg=)
2: TZEmLmroEs6IRm7BIRkKTFCJTnA.roa (hash: QhC3msm1fXEe5FbZInDyO6caWrevlSV8+0GhYVm+mSE=)
3: XKyWf4Y6NjYLpXjJG8NNu1YgV8I.roa (hash: Wg/rYioLK0eT7zXUczkOHExRo3EIegYLBIdXxr8Hp88=)
4: t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl (hash: PK9KmmmrdF6bLsQ1dp1MzQEbch+nxQmpV/uekxofxA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0d:3c:49:88:f4:b3:64:68:00:ef:f0:55:82:12:4f:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Validity
Not Before: Aug 17 01:00:49 2026 GMT
Not After : Aug 18 01:00:49 2026 GMT
Subject: CN=d19329e28216b7290325013f3d1d72be8fdc9b52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a4:db:75:58:36:93:9d:8e:1a:13:24:6d:e6:
a7:2b:f3:11:7e:ef:16:24:c1:3c:ae:e3:32:ec:df:
34:e2:61:db:b1:21:ff:a2:66:27:07:a9:20:bd:fb:
7d:26:44:6a:6f:ac:c0:95:ea:1f:0e:36:43:fc:e3:
b6:57:87:f8:5b:8f:de:00:ff:41:6f:fd:6c:4f:f0:
30:6b:63:ec:ce:48:4f:f0:aa:e8:c5:22:7b:a2:88:
99:d9:43:52:c1:49:0a:63:6e:c9:a4:30:de:2b:e3:
76:3b:de:f6:ee:f2:20:93:1f:8c:2e:82:a2:5f:b7:
2b:16:8e:9d:e6:0d:d2:f4:e7:68:20:b9:49:4b:32:
ef:45:fa:96:df:6f:47:a3:45:a0:39:9c:79:08:bd:
05:35:e2:f6:d6:e4:a2:46:23:e2:8b:1b:ff:be:10:
6b:90:a5:d3:a2:87:fa:e6:fa:59:c9:5a:25:6a:76:
99:4d:de:a4:e4:16:bd:92:40:51:77:c5:cc:59:47:
02:85:67:ee:83:ec:71:93:6c:d3:01:23:ac:3c:cf:
4b:b3:df:ae:69:5e:a3:57:58:0b:71:12:a0:e4:b4:
47:d2:38:3a:48:07:72:fc:f4:86:2a:a3:0c:70:39:
ef:7f:95:ae:65:ae:15:e1:cf:be:57:d5:22:98:d4:
a6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:93:29:E2:82:16:B7:29:03:25:01:3F:3D:1D:72:BE:8F:DC:9B:52
X509v3 Authority Key Identifier:
keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:59:3f:7f:92:9f:05:84:6d:35:ad:ad:cd:a9:8c:f3:a7:5c:
f9:fa:83:c2:db:e7:01:e3:39:39:69:6a:2a:f9:d3:2d:2f:f3:
bd:4e:3a:e8:6b:bb:a4:a9:39:c5:75:97:f4:31:5b:b6:aa:0f:
34:26:1d:60:01:ed:35:3e:67:d8:7c:5d:00:5e:51:14:a7:84:
44:3f:ed:f9:f6:4c:4e:4d:15:3f:79:5c:bb:75:5d:ba:77:78:
eb:ea:8c:fb:de:bd:69:66:d5:d8:08:eb:5d:cf:8d:ec:5c:73:
a1:6e:03:55:50:08:1a:e7:b1:cc:63:b9:1b:ea:75:3e:43:72:
66:01:55:90:78:43:93:32:04:8d:a3:e9:66:91:15:7b:b1:72:
f8:1f:62:27:07:1d:36:88:17:0c:b1:b9:36:02:d9:8f:aa:26:
c4:b0:f2:f5:5a:bf:13:58:01:c7:09:1b:4a:a4:0a:8b:31:fa:
73:07:75:23:c0:5f:fe:fa:43:bb:71:8e:8d:99:a2:7d:52:68:
10:44:47:d7:48:a8:f8:0a:83:8d:b1:a0:0f:d1:f2:20:0f:4f:
18:17:0a:eb:ce:17:ef:02:05:6f:76:2a:77:0d:25:0c:1c:b8:
59:dd:07:4a:21:ad:a5:e8:9c:34:95:be:18:e1:aa:55:12:11:
5b:b5:5e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 17 10:12:33 2026 by rpki-client