Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
File: t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft (raw, json)
Hash identifier: 5A8j4QW4JBxIzBXpZHay+4fOquSNwT9NyPMDcTFzMhQ=
Subject key identifier: 53:49:BC:05:CE:50:39:71:34:8F:91:A8:1A:6A:9C:B8:89:DA:EA:38
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Certificate issuer: /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial: 019FF23344C0FEE634035A7653DD622FECF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
Manifest number: 19FD
Signing time: Tue 11 Aug 2026 19:01:13 +0000
Manifest this update: Tue 11 Aug 2026 19:01:13 +0000
Manifest next update: Wed 12 Aug 2026 19:01:13 +0000
Files and hashes: 1: 2MSpCLbIJT_dNS85cUQH7P6hQQQ.roa (hash: LqxKJfwKg1vJNoy6niHI6Ay0t/ibwSsUhqanJ+kZvVg=)
2: TZEmLmroEs6IRm7BIRkKTFCJTnA.roa (hash: QhC3msm1fXEe5FbZInDyO6caWrevlSV8+0GhYVm+mSE=)
3: XKyWf4Y6NjYLpXjJG8NNu1YgV8I.roa (hash: Wg/rYioLK0eT7zXUczkOHExRo3EIegYLBIdXxr8Hp88=)
4: t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl (hash: CvZG9V291o2MJ+gN44SN9hkoYSBhCvaWEosNSLAUwmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Aug 2026 19:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f2:33:44:c0:fe:e6:34:03:5a:76:53:dd:62:2f:ec:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Validity
Not Before: Aug 11 19:01:13 2026 GMT
Not After : Aug 12 19:01:13 2026 GMT
Subject: CN=5349bc05ce503971348f91a81a6a9cb889daea38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cb:ea:24:82:fb:fe:e6:17:f4:ac:12:65:44:
19:71:bd:ca:a1:6b:6d:87:32:22:50:08:4b:2b:28:
c8:b1:05:7c:a1:31:51:b5:35:7c:0d:0b:35:89:b7:
32:d5:3c:26:5b:84:dd:00:f9:70:da:8b:cf:7e:c2:
ba:30:d4:11:66:61:b4:99:f4:04:26:50:71:6f:5e:
4c:a7:b3:94:53:6c:5d:58:db:a8:00:d6:87:7d:4e:
6a:db:fc:dd:93:58:8c:eb:84:37:15:99:19:6f:ff:
e0:2e:5f:b3:9a:c7:07:5b:84:fb:2a:f8:4c:ac:94:
5b:33:c3:ed:65:38:8e:f1:a0:4f:34:88:ae:3e:b9:
80:c1:14:b7:f3:90:55:84:01:8f:3a:fc:c6:7f:ea:
ca:ed:5a:6c:8e:77:14:6d:ca:57:e1:07:5e:9a:e4:
59:82:c1:7d:a4:1e:a1:ea:28:6b:8e:b5:2c:cd:7b:
f9:79:1d:dd:4a:12:ec:24:93:54:eb:8e:e2:89:3e:
e8:41:4b:99:6c:09:51:77:e0:e5:a6:c4:7d:19:da:
bd:38:5e:7d:20:0e:aa:cf:64:24:13:75:ca:08:b7:
4f:08:c2:42:f4:29:c8:66:56:6f:d6:4a:b4:32:66:
46:ee:5d:0f:01:be:73:c9:97:88:a2:d9:5c:cb:55:
77:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:49:BC:05:CE:50:39:71:34:8F:91:A8:1A:6A:9C:B8:89:DA:EA:38
X509v3 Authority Key Identifier:
keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:39:44:c1:d5:0d:16:ce:0c:ed:f3:0c:31:d1:b2:e3:e4:83:
e4:a3:8b:41:73:41:b2:36:c0:94:24:90:90:45:4d:a0:a1:b0:
59:98:22:3d:df:18:67:20:cd:b3:34:f0:33:5b:b3:63:ee:9d:
29:0b:fa:4a:82:e1:84:59:a9:29:5d:a0:d8:0b:17:db:3e:37:
fd:55:6e:8e:6a:84:a8:41:2e:d8:ff:9a:b0:2f:8f:38:81:0b:
fd:8b:22:ae:11:d4:25:a5:53:f2:f2:63:77:b6:6e:91:8e:5e:
c1:19:e9:3a:7d:00:80:14:88:3a:c9:46:55:f2:c3:9c:0b:89:
90:64:31:43:61:ce:9c:6e:19:08:d7:6f:89:b7:9c:2f:1d:e9:
70:3e:3a:b5:90:58:f2:15:7a:c8:cc:1b:ee:6e:f3:11:1b:37:
89:81:84:82:b8:56:7c:ff:5a:41:12:b7:04:ca:5e:d7:92:2c:
4f:2d:df:1c:42:8a:62:78:38:fe:c2:84:3f:be:f8:5c:2d:66:
e6:1c:a0:ef:4d:92:40:d5:82:df:8a:f0:2a:db:e9:c9:d4:8d:
e3:10:20:37:46:bf:24:46:15:2b:77:56:0a:89:49:d8:2e:ba:
55:e3:f2:89:2d:f5:70:e9:2c:e6:c0:3a:f5:e9:e7:a0:81:69:
50:13:07:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 04:55:53 2026 by rpki-client