Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
File: t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft (raw, json)
Hash identifier: qUbmC9u7Mb/OdsGIrmAj3lr+UmsJjFtXAGWpsgOYisE=
Subject key identifier: E7:DB:D4:31:DF:95:17:C5:AE:03:8C:73:65:0F:53:BF:2E:5C:41:1D
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Certificate issuer: /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial: 01A173CAE219CE5040011992E2C6F3C38B07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
Manifest number: 1AC6
Signing time: Sun 25 Oct 2026 16:00:38 +0000
Manifest this update: Sun 25 Oct 2026 16:00:38 +0000
Manifest next update: Mon 26 Oct 2026 16:00:38 +0000
Files and hashes: 1: PRNpmNoXJBIoF9gh578wEhtMpdQ.roa (hash: g9ylBrvDhSOD9y5ykNiZEjQPUeqbZ/uKUmYrg55Kn+I=)
2: iE0cS-gjGQ2wH2CEFbUXZzlClEs.roa (hash: zt5rLB2IKmjF4fOUcKb7lO1SdJgaIMds/uhpaf0hUX0=)
3: t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl (hash: KvMRCM5LvpIpFRa7qSLoK8Dba/iKPZs5zYv2Af/YvTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:73:ca:e2:19:ce:50:40:01:19:92:e2:c6:f3:c3:8b:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Validity
Not Before: Oct 25 16:00:38 2026 GMT
Not After : Oct 26 16:00:38 2026 GMT
Subject: CN=e7dbd431df9517c5ae038c73650f53bf2e5c411d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3f:e1:63:ea:c2:47:75:fe:c1:02:36:3a:ad:
7a:ba:23:d4:19:42:c3:14:0a:99:67:a8:cd:ba:43:
13:51:92:e5:dd:8f:c2:55:c0:21:5d:7e:53:83:1c:
cb:60:c4:d4:ea:60:48:73:aa:c1:cf:e7:3d:ee:6b:
69:8e:4a:d7:de:89:6c:c5:73:b8:ba:19:39:16:be:
a0:9c:a2:5a:39:09:f9:78:7b:58:b8:9e:3d:40:21:
f1:46:c4:4b:52:f9:8f:1d:b9:df:6f:b6:96:9c:6a:
f4:45:f3:69:7a:1e:d1:d5:2c:7c:5c:8d:70:c6:e8:
9f:26:4a:64:25:78:73:ce:a3:16:80:d5:0a:ec:93:
1b:95:5a:84:f9:27:b6:5d:41:e8:e1:5e:38:2a:02:
eb:d4:9d:a9:d0:06:ac:2c:25:fc:01:5a:0e:89:c3:
77:45:2a:36:5f:bd:f7:be:7d:dd:81:45:27:36:80:
06:3c:a3:12:cd:89:5c:20:bb:c1:01:87:85:e9:80:
54:fa:af:35:65:33:ca:29:cf:45:f5:3f:73:dc:17:
08:3e:e0:5a:08:6d:a0:e1:33:50:c7:d9:69:12:54:
5d:59:2d:cc:85:6a:75:11:a3:7f:f6:db:9f:e7:df:
51:a4:07:05:c0:f8:a5:7c:cc:56:aa:27:19:80:c5:
41:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:DB:D4:31:DF:95:17:C5:AE:03:8C:73:65:0F:53:BF:2E:5C:41:1D
X509v3 Authority Key Identifier:
keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:14:c3:f8:66:29:6f:b0:8f:57:7b:b0:56:fb:1f:2a:8a:76:
5f:1b:22:83:f3:1e:ef:5b:70:2b:8a:55:4f:8e:af:83:9a:d8:
4e:12:db:36:2a:75:2a:8f:63:9f:62:f6:e8:0c:dc:9f:42:e7:
2b:0f:d5:a6:c0:37:36:90:85:03:9c:d6:ac:2d:ec:b6:9f:05:
17:f8:4e:b4:ed:fc:ca:00:b1:06:f6:1d:6d:2c:e2:fb:dd:6b:
c8:b7:81:6b:b2:35:e5:c6:f2:f7:7c:60:fc:3e:74:5b:fd:29:
57:1f:ac:f5:8f:9a:fc:17:a9:bc:4c:3f:bf:fa:2f:0c:11:81:
03:00:ce:b6:50:be:1a:ea:5b:49:3d:96:37:e4:e5:10:18:c5:
2e:ab:f4:14:68:d3:f1:a4:64:7c:f8:e2:a0:c8:30:b1:7d:14:
9c:1f:10:07:df:c6:c7:14:7f:e0:18:56:ac:93:67:c5:bf:0e:
6e:a7:04:e8:f0:3d:87:2b:a4:30:dd:01:fb:e4:e7:84:cb:ab:
13:f4:f1:76:c6:8b:13:94:84:f1:22:b8:9a:63:98:32:34:5a:
ce:c1:20:01:df:04:d8:2c:9f:4e:30:a5:a2:ec:22:d6:57:a8:
02:3f:64:a2:82:93:8f:a3:39:6b:72:cf:45:bb:47:21:c6:c4:
74:57:5d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 20:06:17 2026 by rpki-client