Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
File: t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft (raw, json)
Hash identifier: sBFWklMnCaHb8Uja2+fbeifZEKDj4lZT8fmsHwWA5iA=
Subject key identifier: 38:B5:64:1B:F4:D4:95:E3:B5:BF:79:9B:9F:39:43:38:0A:D2:09:21
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Certificate issuer: /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial: 019EBD35730AE4B1668EF1B0EDE248CC1361
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
Manifest number: 195D
Signing time: Fri 12 Jun 2026 19:00:57 +0000
Manifest this update: Fri 12 Jun 2026 19:00:57 +0000
Manifest next update: Sat 13 Jun 2026 19:00:57 +0000
Files and hashes: 1: 2MSpCLbIJT_dNS85cUQH7P6hQQQ.roa (hash: LqxKJfwKg1vJNoy6niHI6Ay0t/ibwSsUhqanJ+kZvVg=)
2: TZEmLmroEs6IRm7BIRkKTFCJTnA.roa (hash: QhC3msm1fXEe5FbZInDyO6caWrevlSV8+0GhYVm+mSE=)
3: XKyWf4Y6NjYLpXjJG8NNu1YgV8I.roa (hash: Wg/rYioLK0eT7zXUczkOHExRo3EIegYLBIdXxr8Hp88=)
4: t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl (hash: y0K7dE0kO7ukwPL+By0uEYFchkhYZZXuNhT5GatYyRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 16:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:35:73:0a:e4:b1:66:8e:f1:b0:ed:e2:48:cc:13:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Validity
Not Before: Jun 12 19:00:57 2026 GMT
Not After : Jun 13 19:00:57 2026 GMT
Subject: CN=38b5641bf4d495e3b5bf799b9f3943380ad20921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:05:2a:c1:83:84:11:23:41:4e:b0:aa:23:36:
d3:a6:55:9c:1a:86:a2:3c:c9:49:ad:81:c2:38:d8:
fa:56:63:d4:11:a2:6e:db:25:3e:95:40:99:a1:6c:
bf:d9:9d:b9:b4:c6:24:a5:22:42:1f:7d:3e:71:ea:
d7:3b:73:eb:37:24:c0:6c:d0:96:5b:0f:52:b9:15:
51:73:31:9c:cf:37:eb:8b:fa:a7:d7:6e:81:c2:5f:
b4:8e:6a:37:94:01:9c:0f:d9:c8:72:1e:74:72:87:
5a:bf:de:72:5f:80:b2:07:73:d5:30:80:db:35:7a:
90:a1:f2:56:ae:19:96:52:e0:cb:40:43:28:15:0c:
2a:01:e9:1f:36:f0:77:19:ae:e8:8e:ad:47:9d:d2:
01:0b:fc:2e:b6:00:70:d3:90:c2:5e:e4:48:d6:68:
9f:84:3c:7b:2d:e8:fe:6e:91:99:f5:ad:a9:8b:d5:
06:90:76:4e:21:ec:5e:57:c7:10:80:ac:09:94:5a:
eb:fe:ec:7b:65:3a:72:6c:02:e1:97:a2:8e:c7:83:
a1:fe:e6:75:cc:bc:16:18:42:87:2d:bb:61:c8:ea:
1e:77:99:ab:2a:06:50:ea:2c:b1:d1:aa:35:8f:8d:
2c:e6:fc:18:25:4f:d6:5e:e8:d9:61:58:e2:53:25:
3c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:B5:64:1B:F4:D4:95:E3:B5:BF:79:9B:9F:39:43:38:0A:D2:09:21
X509v3 Authority Key Identifier:
keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:0c:ee:c0:6c:10:9d:70:6e:6e:d3:7f:2e:59:4c:85:af:e1:
be:b8:c8:7b:60:4c:0b:5f:98:76:12:f7:be:81:f3:f4:d7:1c:
aa:2b:94:aa:5a:69:62:8b:fe:a2:61:64:50:32:85:6a:14:f5:
b0:8e:bd:3d:07:24:15:f5:ef:42:c9:e9:13:ff:e9:8e:58:89:
40:40:16:f7:41:07:8d:c6:7a:89:86:ec:4b:13:62:f5:31:4a:
74:82:dc:f9:12:66:df:25:a3:b5:3b:37:b7:f7:9b:8c:0e:cb:
eb:40:ef:6d:22:11:fc:7a:39:9a:a3:f9:2d:b0:15:cf:37:d6:
a4:72:7e:d5:34:aa:5f:cc:0c:bf:20:6f:84:85:b0:72:89:e6:
29:40:e4:0d:6f:aa:8d:34:d5:89:cb:ff:71:4d:76:a3:46:c8:
96:8d:38:44:f3:05:4f:97:c4:f0:52:1a:f2:d7:bb:9c:86:8b:
7b:55:e7:93:10:8c:cf:bf:34:ac:35:1a:24:13:33:5f:ea:4c:
fb:c4:00:7e:95:46:46:db:b6:e1:ee:f3:95:d5:50:7a:2c:93:
8c:77:ce:43:2c:b5:97:50:94:04:83:76:6e:b3:0e:e5:88:a0:
a4:28:cb:b0:61:03:06:6f:71:c5:59:66:16:ab:94:84:9f:04:
d0:2b:2a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 01:42:16 2026 by rpki-client