Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
File: t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft (raw, json)
Hash identifier: fEdIbaKQM/op+DOSiGRMYkWRCMdd0ueJdUm2xM17cvw=
Subject key identifier: C8:04:26:50:4C:F4:DD:26:85:96:71:94:02:2E:59:DA:0E:5C:83:BF
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Certificate issuer: /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial: 01A17B84146EE4DC5B41882E323E58F64F8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
Manifest number: 1ACA
Signing time: Tue 27 Oct 2026 04:00:15 +0000
Manifest this update: Tue 27 Oct 2026 04:00:15 +0000
Manifest next update: Wed 28 Oct 2026 04:00:15 +0000
Files and hashes: 1: PRNpmNoXJBIoF9gh578wEhtMpdQ.roa (hash: g9ylBrvDhSOD9y5ykNiZEjQPUeqbZ/uKUmYrg55Kn+I=)
2: iE0cS-gjGQ2wH2CEFbUXZzlClEs.roa (hash: zt5rLB2IKmjF4fOUcKb7lO1SdJgaIMds/uhpaf0hUX0=)
3: t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl (hash: olzGLatmgNaKxT785iLwqUqbaNyatwW40RhrxyT9r00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 04:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:84:14:6e:e4:dc:5b:41:88:2e:32:3e:58:f6:4f:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Validity
Not Before: Oct 27 04:00:15 2026 GMT
Not After : Oct 28 04:00:15 2026 GMT
Subject: CN=c80426504cf4dd2685967194022e59da0e5c83bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:90:12:ee:17:1d:66:f2:f1:83:72:32:26:34:
be:cb:81:6f:e9:04:49:88:d8:6c:40:b9:6a:5d:19:
c7:35:f6:a8:9e:d2:1f:4d:37:c4:5a:ce:5e:fd:b1:
06:b1:cc:97:28:e4:96:2d:63:b2:f0:af:22:45:54:
ef:7e:be:0b:8a:ca:97:8c:13:60:72:e0:08:61:5a:
ec:65:38:62:b6:60:26:72:21:f0:08:3d:1d:ee:60:
48:22:f5:18:bb:17:b3:21:34:8b:ee:3b:4d:45:58:
e9:c2:48:ae:60:a6:2e:5d:85:81:82:09:1a:63:8b:
2b:b0:03:55:50:e8:f4:7f:17:2d:25:ca:61:21:66:
fb:41:84:7d:40:da:72:d9:0a:1c:f8:99:51:8a:dc:
33:e4:30:cc:b3:5e:26:07:86:62:48:57:01:58:b5:
9f:c9:4b:b4:31:6b:98:22:f4:f3:e4:bc:ac:16:22:
6a:a0:45:9f:73:97:fc:43:6f:ef:65:1f:83:fd:c9:
39:db:37:25:45:90:d5:52:d8:e3:b0:2d:31:11:a7:
66:74:24:18:1e:2a:29:ce:ef:28:1e:2d:9a:f4:3e:
92:1e:74:99:3b:3e:e3:9e:38:49:14:18:8c:18:ed:
36:94:1e:da:fc:33:3f:3a:21:3a:7a:0c:e0:27:13:
62:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:04:26:50:4C:F4:DD:26:85:96:71:94:02:2E:59:DA:0E:5C:83:BF
X509v3 Authority Key Identifier:
keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:32:77:ab:a1:34:73:f8:80:47:f9:38:99:d2:e9:a4:08:a8:
bf:35:80:88:ed:a2:28:aa:a6:ea:f5:54:76:b0:d0:27:94:49:
3f:d1:06:48:3b:8e:41:9e:a8:65:4d:62:7d:91:49:b3:26:f6:
4d:5f:05:c1:5f:c1:7f:23:74:12:b7:9c:0e:5c:8e:de:20:44:
23:2e:69:c0:03:aa:f7:33:41:f1:58:77:20:af:99:2a:9c:ba:
fc:8f:3e:a1:e9:b8:69:af:49:48:29:f5:0c:0f:fb:5a:e9:b3:
91:d8:52:c7:f1:5e:99:03:b5:1c:f8:b3:50:35:16:d6:af:6d:
63:6c:4d:1a:d6:a8:b0:9b:91:5a:fb:0d:fe:ea:6e:5e:73:48:
68:df:17:37:41:cc:b2:cd:86:0f:52:a8:14:9b:61:83:98:5c:
0d:25:9d:ac:fa:dc:ee:ca:fb:8f:67:d1:7b:f2:76:50:fa:6a:
39:07:92:09:08:ac:25:76:18:12:36:b4:87:ef:fe:5c:2c:be:
cd:3a:d5:51:45:e3:c9:bb:bd:b5:d2:d1:6a:48:a2:e5:e9:36:
68:0a:c3:49:51:5c:6f:fd:98:41:b8:44:e8:dc:52:49:38:62:
6f:4c:bc:89:3f:2c:ca:ad:a0:e5:1d:9a:78:7e:71:e9:8b:3e:
2f:65:77:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF7hBRu5NxbQYguMj5Y9k+MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3NWEwNTY2ZDBiNjNhMWY4NjJkODM0NThlNGYyZWE2ZmQ4
ZjdkMjEwHhcNMjYxMDI3MDQwMDE1WhcNMjYxMDI4MDQwMDE1WjAzMTEwLwYDVQQD
EyhjODA0MjY1MDRjZjRkZDI2ODU5NjcxOTQwMjJlNTlkYTBlNWM4M2JmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZAS7hcdZvLxg3IyJjS+y4Fv6QRJ
iNhsQLlqXRnHNfaontIfTTfEWs5e/bEGscyXKOSWLWOy8K8iRVTvfr4LisqXjBNg
cuAIYVrsZThitmAmciHwCD0d7mBIIvUYuxezITSL7jtNRVjpwkiuYKYuXYWBggka
Y4srsANVUOj0fxctJcphIWb7QYR9QNpy2Qoc+JlRitwz5DDMs14mB4ZiSFcBWLWf
yUu0MWuYIvTz5LysFiJqoEWfc5f8Q2/vZR+D/ck52zclRZDVUtjjsC0xEadmdCQY
Hiopzu8oHi2a9D6SHnSZOz7jnjhJFBiMGO02lB7a/DM/OiE6egzgJxNiewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMgEJlBM9N0mhZZxlAIuWdoOXIO/MB8GA1UdIwQY
MBaAFLdaBWbQtjofhi2DRY5PLqb9j30hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDFvRlp0QzJPaC1HTFlORmprOHVwdjJQZlNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8xMDM1NzAtMWNmNi00MmFjLTgxZDQt
ODNmNjAxYzNmYjU5LzEvdDFvRlp0QzJPaC1HTFlORmprOHVwdjJQZlNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi8xMDM1NzAtMWNmNi00MmFjLTgxZDQtODNmNjAxYzNmYjU5
LzEvdDFvRlp0QzJPaC1HTFlORmprOHVwdjJQZlNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALjJ3q6E0
c/iAR/k4mdLppAiovzWAiO2iKKqm6vVUdrDQJ5RJP9EGSDuOQZ6oZU1ifZFJsyb2
TV8FwV/BfyN0ErecDlyO3iBEIy5pwAOq9zNB8Vh3IK+ZKpy6/I8+oem4aa9JSCn1
DA/7WumzkdhSx/FemQO1HPizUDUW1q9tY2xNGtaosJuRWvsN/upuXnNIaN8XN0HM
ss2GD1KoFJthg5hcDSWdrPrc7sr7j2fRe/J2UPpqOQeSCQisJXYYEja0h+/+XCy+
zTrVUUXjybu9tdLRakii5ek2aArDSVFcb/2YQbhE6NxSSThib0y8iT8syq2g5R2a
eH5x6Ys+L2V3jw==
-----END CERTIFICATE-----
Generated at Tue Oct 27 15:14:16 2026 by rpki-client