Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
File: t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft (raw, json)
Hash identifier: r05eGzpIvKsEogQFh+pfdAL+kflJE9nwrAl8Qrdi4X0=
Subject key identifier: 32:FC:5C:74:A9:1C:0A:3D:91:EE:93:41:21:D1:EA:87:41:F6:85:F9
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Certificate issuer: /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial: 01A122AF97ED4920BBF0885F33544760D141
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
Manifest number: 1A9C
Signing time: Fri 09 Oct 2026 22:01:35 +0000
Manifest this update: Fri 09 Oct 2026 22:01:35 +0000
Manifest next update: Sat 10 Oct 2026 22:01:35 +0000
Files and hashes: 1: PRNpmNoXJBIoF9gh578wEhtMpdQ.roa (hash: g9ylBrvDhSOD9y5ykNiZEjQPUeqbZ/uKUmYrg55Kn+I=)
2: iE0cS-gjGQ2wH2CEFbUXZzlClEs.roa (hash: zt5rLB2IKmjF4fOUcKb7lO1SdJgaIMds/uhpaf0hUX0=)
3: t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl (hash: geiExnZo7ByzdiuvgJlSANozPHZXjJIzuHFGUkh0NWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 22:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:22:af:97:ed:49:20:bb:f0:88:5f:33:54:47:60:d1:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Validity
Not Before: Oct 9 22:01:35 2026 GMT
Not After : Oct 10 22:01:35 2026 GMT
Subject: CN=32fc5c74a91c0a3d91ee934121d1ea8741f685f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:14:bb:07:0c:70:e0:fd:a4:b1:30:2e:1c:88:
af:b1:77:b3:dd:ca:df:9c:9d:6a:a5:b5:3d:2c:fd:
f4:7f:d2:26:e3:22:f5:60:5a:76:22:59:26:69:4c:
41:96:cd:43:2f:d7:77:49:12:55:3e:a7:d7:2e:8e:
6a:b4:d9:c6:4f:0b:ef:cd:35:69:a8:36:14:74:ef:
6c:cb:1b:71:d5:88:42:ef:ab:83:32:05:69:71:23:
03:23:73:83:7a:9d:9a:3e:0b:78:91:f7:76:3a:a8:
23:fb:bd:75:10:c2:d6:a4:7f:45:49:13:ae:8b:15:
c4:a4:74:97:7f:3c:4c:a2:44:b3:46:a0:a8:bc:0e:
aa:c8:ea:fa:a7:3b:03:43:0b:84:13:1f:26:42:65:
f5:bb:81:d4:5c:c2:af:d7:4e:de:17:09:07:02:c1:
49:1e:43:4e:f8:fe:7b:31:87:2a:f4:53:dd:33:b5:
7e:af:53:5c:58:df:35:75:71:d5:96:ed:20:05:07:
5b:70:d1:6e:9d:99:8e:18:81:22:ff:6a:e9:01:53:
ee:d4:6c:dd:d2:ae:52:3d:a7:11:5b:64:75:4d:66:
b8:ed:46:db:8a:6e:e5:86:63:31:bb:6f:a6:10:e3:
fd:10:9a:bb:25:16:fb:0b:e2:e5:94:e9:e7:17:54:
9a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:FC:5C:74:A9:1C:0A:3D:91:EE:93:41:21:D1:EA:87:41:F6:85:F9
X509v3 Authority Key Identifier:
keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:62:99:f9:6a:8d:00:be:2b:a7:c5:0f:0b:5f:7d:8f:fe:a0:
d8:30:bf:2b:d9:33:96:d4:fa:ba:49:d1:51:90:98:44:9b:81:
d7:69:9c:46:50:2e:28:89:6f:a8:65:6f:26:d5:c0:0c:d4:fd:
24:f4:5d:07:91:64:70:8f:bf:c3:cb:1d:77:eb:b3:ad:93:61:
cd:7e:a9:80:08:6e:6a:c4:d1:91:52:7a:b2:ef:a4:d7:9b:5d:
47:26:04:dc:e1:57:9b:3f:ac:94:66:10:0a:40:a0:f3:71:d9:
5f:0c:5b:55:a9:1e:44:02:ba:50:b6:1d:0c:eb:ad:9e:03:aa:
c9:43:54:fd:4e:b5:be:0b:eb:88:b3:df:5f:c5:16:6d:10:47:
90:ff:9a:13:b1:43:2c:04:c6:82:5e:31:9f:b2:ed:55:74:47:
3f:0c:7f:15:bc:4a:40:60:7c:91:9f:46:e6:c1:51:bc:d9:bf:
ce:1d:b4:e4:8b:7a:32:0a:53:74:31:c3:d4:13:e2:fb:ca:51:
97:9e:0f:d1:f9:84:44:b4:ce:d6:4e:f1:71:59:ab:86:7d:2f:
0e:86:4f:0d:9f:fd:5e:39:97:02:92:78:e6:eb:3e:54:29:9f:
78:9e:8e:b4:ef:9c:89:6f:e4:dc:40:4b:06:a7:d9:29:3c:a8:
87:8e:d5:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 08:50:55 2026 by rpki-client