Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
File: t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft (raw, json)
Hash identifier: pdgyDvMmRJqe2SpDUlhluoL0BZgcOI2qG7v+exi52nI=
Subject key identifier: 66:74:67:D1:05:B3:D9:88:6E:2B:BA:1A:D8:DD:61:78:32:D8:B2:F6
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Certificate issuer: /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial: 019EADC28774DD9582E9DBA28C762BAB606C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
Manifest number: 1955
Signing time: Tue 09 Jun 2026 19:01:07 +0000
Manifest this update: Tue 09 Jun 2026 19:01:07 +0000
Manifest next update: Wed 10 Jun 2026 19:01:07 +0000
Files and hashes: 1: 2MSpCLbIJT_dNS85cUQH7P6hQQQ.roa (hash: LqxKJfwKg1vJNoy6niHI6Ay0t/ibwSsUhqanJ+kZvVg=)
2: TZEmLmroEs6IRm7BIRkKTFCJTnA.roa (hash: QhC3msm1fXEe5FbZInDyO6caWrevlSV8+0GhYVm+mSE=)
3: XKyWf4Y6NjYLpXjJG8NNu1YgV8I.roa (hash: Wg/rYioLK0eT7zXUczkOHExRo3EIegYLBIdXxr8Hp88=)
4: t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl (hash: T1LTo+aqih640J9efopFCt4GJDgqW8LHv1WbtbHHVPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Jun 2026 19:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ad:c2:87:74:dd:95:82:e9:db:a2:8c:76:2b:ab:60:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Validity
Not Before: Jun 9 19:01:07 2026 GMT
Not After : Jun 10 19:01:07 2026 GMT
Subject: CN=667467d105b3d9886e2bba1ad8dd617832d8b2f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:94:e7:9c:bd:1d:18:7f:d6:f2:a6:83:25:78:
38:af:be:34:01:85:1c:2e:9b:58:24:09:fe:98:28:
ef:c6:39:0d:cb:11:79:bf:e9:55:56:54:e0:72:db:
06:83:7c:e7:fc:85:cc:ec:1c:36:11:75:3c:ad:18:
71:4e:08:d9:1e:c0:dd:f7:49:c7:c3:67:9e:05:16:
0e:fd:14:0b:88:84:e6:99:82:0b:f3:c0:c6:ad:d2:
b9:5a:b3:bc:83:19:f0:07:11:8b:5b:82:25:18:a7:
fd:af:ee:5b:80:0b:91:e5:8c:fe:04:91:16:29:8c:
79:98:79:ea:c5:6c:29:77:a5:d1:57:cb:59:14:d2:
9e:b0:86:9d:cc:dd:48:0b:18:b5:1e:f0:3d:d6:2a:
20:e9:16:1f:b7:15:38:e6:37:e6:b4:f5:a2:6d:7b:
bf:c6:fc:cd:d7:2d:17:13:1c:df:c9:e7:da:a2:0d:
69:43:4e:30:87:c0:79:89:8d:e1:35:b6:4d:4f:fa:
52:96:f8:67:0f:96:7f:78:86:71:99:fe:b2:3f:23:
ff:67:27:85:72:89:25:01:a0:91:b5:6d:e0:9c:8c:
5a:91:91:d1:3c:ae:4e:38:b6:ad:dc:22:03:34:66:
e8:f0:43:88:40:fd:c5:10:f8:f5:1a:8a:db:b3:48:
15:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:74:67:D1:05:B3:D9:88:6E:2B:BA:1A:D8:DD:61:78:32:D8:B2:F6
X509v3 Authority Key Identifier:
keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:3e:e4:ae:c0:3f:87:0e:a6:7f:eb:bd:5d:87:1c:fe:b9:92:
ff:e8:f3:bb:76:09:c6:9d:07:4f:ce:d5:ea:a3:02:ab:3a:c7:
cb:8a:63:2b:41:9a:fe:19:96:9d:d2:ea:63:ef:76:af:07:ee:
db:59:02:38:20:9d:1b:0d:57:38:e5:de:7b:5a:84:4b:bd:89:
ea:dc:98:cf:f4:b6:da:eb:2b:fa:e4:8a:71:13:72:97:a9:b7:
d8:06:dd:1d:1b:67:9f:62:eb:c4:4b:46:30:a6:d4:75:1e:04:
00:3c:e0:89:98:94:11:d9:15:92:1c:6a:19:d0:12:21:4a:66:
10:25:53:b9:36:3b:34:4b:8e:a1:68:86:48:dc:de:87:29:da:
c9:12:67:c7:df:09:4b:8f:4c:93:c4:2f:b4:be:5d:66:88:0d:
51:e0:55:a1:12:05:97:f2:e3:d1:26:48:6f:8a:9b:22:e9:89:
a6:32:a3:cd:15:69:86:b5:55:20:22:f6:a3:5a:76:08:64:85:
d7:30:c5:6d:09:9c:f3:84:9a:83:4e:10:13:4a:59:49:66:26:
f8:bc:d9:af:d4:9d:14:28:95:6a:02:25:2c:11:f6:63:c8:4b:
5d:b4:9c:62:51:88:ca:b0:dc:f0:74:03:05:85:13:d2:35:69:
51:3e:2b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 9 23:28:48 2026 by rpki-client