Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
File: t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft (raw, json)
Hash identifier: 2HqKxFLFWPuJcP2uDtF9izpfqaj9mtMYPRk9uDloHvo=
Subject key identifier: 22:85:11:A4:27:73:8E:BC:B1:C1:FF:EF:AB:AE:7A:A0:5C:6D:74:2D
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Certificate issuer: /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial: 01A0A3393789474FA2A5AF8FA2C811A344CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
Manifest number: 1A5A
Signing time: Tue 15 Sep 2026 04:00:30 +0000
Manifest this update: Tue 15 Sep 2026 04:00:30 +0000
Manifest next update: Wed 16 Sep 2026 04:00:30 +0000
Files and hashes: 1: PRNpmNoXJBIoF9gh578wEhtMpdQ.roa (hash: g9ylBrvDhSOD9y5ykNiZEjQPUeqbZ/uKUmYrg55Kn+I=)
2: iE0cS-gjGQ2wH2CEFbUXZzlClEs.roa (hash: zt5rLB2IKmjF4fOUcKb7lO1SdJgaIMds/uhpaf0hUX0=)
3: t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl (hash: +9A9DNJUO88PziLc394aN92UIwSzPYtsejG/T9QhBGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 04:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a3:39:37:89:47:4f:a2:a5:af:8f:a2:c8:11:a3:44:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Validity
Not Before: Sep 15 04:00:30 2026 GMT
Not After : Sep 16 04:00:30 2026 GMT
Subject: CN=228511a427738ebcb1c1ffefabae7aa05c6d742d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:70:ee:28:f4:7c:df:ed:d7:f1:0a:9b:c2:a3:
d1:22:ca:87:e4:4a:cc:f2:28:a3:59:09:a8:ad:68:
19:be:2c:e0:d0:98:91:92:0f:1d:f5:d2:db:13:60:
64:08:fe:ad:1f:3d:f8:c0:68:48:2e:30:a0:bc:a2:
22:b3:f4:71:ca:2e:0a:4f:51:e2:50:34:a7:e3:2a:
84:34:08:61:3f:b8:79:cf:d9:dd:7d:57:1f:e2:b7:
32:b7:9f:e1:57:96:cd:d5:10:ce:57:47:ae:a7:b0:
32:39:d0:d2:72:09:69:c0:83:e1:31:8f:15:39:c8:
ed:7e:db:80:78:3f:a7:0e:4d:36:06:e1:a4:a4:2a:
70:82:c0:4c:9b:fb:0c:e5:02:1b:2a:f8:98:f7:c0:
a0:60:a2:37:30:b1:70:b2:7d:6f:32:3d:88:dc:68:
88:6e:3d:cd:9d:3b:b0:3e:77:fd:2d:cf:b3:4c:74:
f9:7d:47:1a:eb:1b:ac:b5:3d:ef:86:4f:e1:09:cb:
04:cf:62:f1:50:63:96:cb:65:1f:45:01:e1:23:1c:
72:a7:a4:77:7b:16:cd:35:4a:6d:09:13:85:9a:dc:
0f:83:35:7b:9d:bd:01:2d:f4:43:55:86:15:7c:90:
f5:f8:45:50:51:25:33:9a:29:b1:aa:aa:ae:98:cc:
13:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:85:11:A4:27:73:8E:BC:B1:C1:FF:EF:AB:AE:7A:A0:5C:6D:74:2D
X509v3 Authority Key Identifier:
keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:bf:34:f0:aa:27:c7:64:8c:a7:f8:e5:96:74:97:41:33:68:
6b:48:1d:27:74:62:f1:08:e0:b5:d6:6e:d9:58:df:1d:1b:6d:
89:4a:e5:88:fb:77:0e:15:8c:a1:9c:55:84:ab:9b:e5:9b:8b:
2c:a5:0f:e5:21:86:d3:34:b3:4a:d2:9b:91:37:c5:7f:36:46:
64:2d:be:fb:3a:3c:5b:89:1a:45:8a:fc:73:3d:bf:6c:69:e0:
fa:7d:5f:e2:4e:e3:80:d5:7e:8b:3a:de:58:0e:35:d0:2b:1a:
f2:85:17:b2:bd:b0:99:de:bb:a5:db:35:28:41:81:d4:6e:55:
a2:bd:d5:8b:5f:f5:7a:13:d4:f6:47:e5:68:dc:ca:fe:71:01:
be:5e:e0:1f:3d:85:69:79:3e:46:20:47:aa:3e:ff:65:1d:cb:
86:f2:c2:a6:b3:ce:26:52:21:7d:51:95:71:bd:92:0c:f5:9d:
74:a0:7e:50:a3:dc:8f:11:79:64:79:07:68:9d:d8:c5:65:f2:
f5:cc:b6:28:3f:85:02:25:5c:15:69:6d:9d:a5:fd:02:6b:7c:
7e:66:76:07:70:37:5b:21:7e:fa:c3:cf:6b:ab:48:c2:16:bc:
d5:51:92:2d:2a:e2:91:f8:38:31:7c:b9:fc:50:27:04:fd:80:
57:b2:c8:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 13:27:48 2026 by rpki-client