Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
File: t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft (raw, json)
Hash identifier: yjBoYU0uRnE/rxxLbwQLUPDDzY5E5YUqm/nzg53l1+w=
Subject key identifier: 2C:74:5C:7C:E1:EE:82:C5:C1:E4:6F:FB:B5:8A:A6:52:8C:87:73:A8
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Certificate issuer: /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial: 01A12A686B901150505769A27C2E4B6B6066
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
Manifest number: 1AA0
Signing time: Sun 11 Oct 2026 10:00:48 +0000
Manifest this update: Sun 11 Oct 2026 10:00:48 +0000
Manifest next update: Mon 12 Oct 2026 10:00:48 +0000
Files and hashes: 1: PRNpmNoXJBIoF9gh578wEhtMpdQ.roa (hash: g9ylBrvDhSOD9y5ykNiZEjQPUeqbZ/uKUmYrg55Kn+I=)
2: iE0cS-gjGQ2wH2CEFbUXZzlClEs.roa (hash: zt5rLB2IKmjF4fOUcKb7lO1SdJgaIMds/uhpaf0hUX0=)
3: t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl (hash: d1/ic50jcZoxJsgy3bX7a4RhD19L+VzLRSYWEwBpUEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:68:6b:90:11:50:50:57:69:a2:7c:2e:4b:6b:60:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Validity
Not Before: Oct 11 10:00:48 2026 GMT
Not After : Oct 12 10:00:48 2026 GMT
Subject: CN=2c745c7ce1ee82c5c1e46ffbb58aa6528c8773a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9f:dd:e6:cb:6b:b4:69:26:dd:28:32:eb:a1:
cf:ad:b6:ab:3a:e2:dc:72:20:7b:0c:a1:f6:df:3c:
cc:41:90:34:5e:3f:32:06:b0:05:ed:ce:be:04:9f:
f9:67:bb:30:c8:28:4a:6f:38:b8:38:16:82:f9:2f:
be:da:a9:28:06:4e:28:df:0e:9e:f1:93:0b:80:32:
57:d4:39:4b:53:02:a7:ad:7a:14:47:c5:ec:3b:a7:
0f:fe:a6:18:52:f9:01:40:8b:92:e6:3c:0e:78:b0:
7b:49:ad:18:d2:d2:d9:40:3c:95:d2:09:e6:42:4f:
8e:b9:d5:81:59:f1:f4:21:86:26:31:25:2c:b8:2f:
3c:f9:37:ce:dc:09:ed:21:ba:8f:fb:1b:2c:b2:76:
65:7f:7c:77:60:07:83:77:8f:81:f5:ec:b2:dc:36:
35:05:ca:c0:26:40:67:27:76:37:2d:b6:59:e9:4c:
a0:77:c3:e7:95:12:f6:c3:bc:9f:03:f7:c2:f4:1c:
e7:b5:9f:ae:74:58:46:4f:ed:75:4e:9b:7b:82:5f:
02:c9:51:51:24:2d:67:63:fd:97:dc:0a:f7:85:40:
e3:a6:77:07:17:6c:8f:b0:ca:61:af:e6:5a:23:46:
e6:1b:3c:13:15:b9:06:ad:8c:08:f7:4d:d5:ec:de:
b3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:74:5C:7C:E1:EE:82:C5:C1:E4:6F:FB:B5:8A:A6:52:8C:87:73:A8
X509v3 Authority Key Identifier:
keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:0b:73:15:51:0d:92:00:cd:d4:48:a0:39:02:32:88:08:4d:
76:a8:a0:09:bd:fd:7a:fc:03:80:a0:dc:a5:b2:56:77:74:f7:
ce:65:6c:1a:99:29:f6:58:fe:b8:2d:00:8d:ba:11:1a:8b:5e:
7a:ed:ec:32:96:e0:d5:29:ac:ac:1b:30:25:50:62:94:b5:cc:
4b:61:ba:b6:ea:7b:13:29:53:b6:b2:f0:72:2f:a2:25:20:df:
44:e9:e4:ef:df:6f:ea:03:35:20:48:3b:85:d5:4e:a1:03:d6:
50:88:e0:7b:64:84:a9:08:7d:74:df:92:b7:62:c3:49:72:28:
78:05:3c:03:ce:6e:b2:39:9f:d3:7f:71:8a:28:36:9d:7d:b2:
f1:d7:ee:ad:03:c3:69:da:9e:ef:10:ec:bd:69:83:a2:59:e2:
f0:bc:8f:18:5e:4d:e0:91:dc:f6:fd:6e:e1:6f:6d:a5:65:c3:
3b:6c:2f:95:e6:72:28:4d:76:85:41:1c:1a:b3:8d:a3:3c:97:
3b:e4:a5:c0:5b:b3:56:8c:df:56:8c:4b:ca:30:d6:cc:f1:1a:
62:04:1b:e5:bd:b0:57:02:15:bc:2d:fe:23:e9:f7:13:13:15:
e7:49:67:27:0c:71:72:58:63:b4:c0:6f:7a:d6:0a:5f:e1:eb:
c7:51:86:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 15:11:28 2026 by rpki-client