Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
File: t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft (raw, json)
Hash identifier: zW2pMQetJUxJF3HjBh4+8pwW5WN63P48G54pY6IN0uA=
Subject key identifier: 22:9C:44:89:0A:E6:D4:6C:47:CC:E5:FB:13:2D:7C:A7:91:FB:AA:88
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Certificate issuer: /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial: 01A1A7EFC40809308EC2F10BA42BBDF01FBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
Manifest number: 1AE1
Signing time: Wed 04 Nov 2026 19:01:10 +0000
Manifest this update: Wed 04 Nov 2026 19:01:10 +0000
Manifest next update: Thu 05 Nov 2026 19:01:10 +0000
Files and hashes: 1: PRNpmNoXJBIoF9gh578wEhtMpdQ.roa (hash: g9ylBrvDhSOD9y5ykNiZEjQPUeqbZ/uKUmYrg55Kn+I=)
2: iE0cS-gjGQ2wH2CEFbUXZzlClEs.roa (hash: zt5rLB2IKmjF4fOUcKb7lO1SdJgaIMds/uhpaf0hUX0=)
3: t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl (hash: 7svNcDUZ7BOt5FEFCbnl06NDm3Zi1U89s48TS+Eu8HA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 17:37:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a7:ef:c4:08:09:30:8e:c2:f1:0b:a4:2b:bd:f0:1f:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Validity
Not Before: Nov 4 19:01:10 2026 GMT
Not After : Nov 5 19:01:10 2026 GMT
Subject: CN=229c44890ae6d46c47cce5fb132d7ca791fbaa88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:2e:14:e1:a1:e7:ee:29:ed:84:9b:9a:91:be:
31:43:6c:5b:14:2e:e5:2c:da:74:a4:82:c6:3e:c4:
1c:66:67:d3:74:01:04:e2:80:7c:54:e3:0f:95:2c:
2b:e2:c4:73:af:c8:8d:8e:d2:b2:39:8d:8a:10:40:
47:dd:e8:4d:36:22:8f:06:24:57:ce:73:b7:3e:e3:
a6:3c:75:79:94:f4:b6:01:ca:41:1f:7a:c1:6c:f9:
af:57:07:0d:41:e8:6a:18:f2:4f:ad:c6:47:0f:04:
83:20:26:b7:39:1e:0e:4d:03:02:f9:dd:16:63:67:
eb:4e:04:06:64:3f:7e:60:11:30:90:67:a2:f5:6c:
39:9e:b8:69:a4:0f:57:fa:6e:b7:30:69:1c:70:46:
5c:11:4c:be:dd:24:fe:a7:cc:8b:fb:d4:91:7d:be:
cc:c2:de:8e:9d:a0:ff:2a:79:c7:b2:f3:46:2e:ae:
2f:94:00:ee:ce:1d:91:9a:ca:03:b4:d7:c8:6e:b0:
98:c0:1f:06:5f:45:a0:fa:35:7a:c3:05:d1:97:ab:
a2:f0:17:45:5e:6a:54:1f:c1:f4:eb:78:f6:30:85:
84:85:9c:38:4d:96:ee:13:96:83:ac:5a:34:39:4d:
c6:7a:19:60:08:9d:fd:26:e9:a3:fc:46:26:d9:1a:
91:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:9C:44:89:0A:E6:D4:6C:47:CC:E5:FB:13:2D:7C:A7:91:FB:AA:88
X509v3 Authority Key Identifier:
keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:60:76:79:86:b6:42:ef:41:c6:25:70:e3:18:dc:75:89:a9:
fc:6a:4e:84:06:c5:97:87:92:9f:9f:38:08:67:a6:de:e3:79:
b9:86:c5:ba:d0:07:a7:a7:e0:76:8d:91:65:42:d6:0b:d3:e7:
b4:5f:c2:21:3d:95:e1:1e:27:16:97:e9:e4:b3:d3:08:e0:de:
02:70:ba:71:80:1a:fc:5c:d9:57:c3:2b:a7:cb:78:19:ff:dd:
ca:3d:e1:21:c7:f8:ba:80:71:36:f8:2e:f8:b5:cf:67:d1:e3:
05:e1:34:20:94:81:9a:d8:c9:32:2d:64:ff:f7:2c:cf:d1:91:
7e:f7:30:df:9c:b5:a6:4b:3c:1c:3d:2e:f2:56:bb:9e:dd:a0:
2a:08:a4:57:f6:56:61:51:dc:2e:9b:a3:5a:9a:3e:0b:24:78:
24:b1:a5:8d:4c:15:e2:e0:5f:6e:9c:3c:d1:73:70:9e:a5:0d:
e0:91:18:3b:ef:23:59:ca:fd:01:f7:fe:da:c5:39:e6:3e:d6:
3c:bf:ba:79:6a:4e:a2:2d:fc:07:32:2e:8d:8f:df:94:4c:b9:
86:a3:35:bc:2f:9f:7a:89:d5:4b:55:6f:29:f6:18:d2:65:51:
bc:b9:c4:22:89:d7:42:4a:f1:42:dc:7a:a7:fb:b0:f7:4e:96:
82:28:ae:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 01:52:17 2026 by rpki-client