Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
File: t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft (raw, json)
Hash identifier: hv7WZzuUI0ebmTauPGimOFNy0NQfEM8OnkZqw3hQzCM=
Subject key identifier: 2B:3C:E2:CD:D5:CB:EF:2F:A8:6A:73:4F:28:4F:E7:05:9C:E8:07:FE
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Certificate issuer: /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial: 01A0C40D7A66CD7A9EE9A5652C213D52654F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
Manifest number: 1A6B
Signing time: Mon 21 Sep 2026 13:00:12 +0000
Manifest this update: Mon 21 Sep 2026 13:00:12 +0000
Manifest next update: Tue 22 Sep 2026 13:00:12 +0000
Files and hashes: 1: PRNpmNoXJBIoF9gh578wEhtMpdQ.roa (hash: g9ylBrvDhSOD9y5ykNiZEjQPUeqbZ/uKUmYrg55Kn+I=)
2: iE0cS-gjGQ2wH2CEFbUXZzlClEs.roa (hash: zt5rLB2IKmjF4fOUcKb7lO1SdJgaIMds/uhpaf0hUX0=)
3: t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl (hash: HSJBOSezKu1k5rmkDiDox/1U+8i/Yfjm73OBMereXYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0d:7a:66:cd:7a:9e:e9:a5:65:2c:21:3d:52:65:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Validity
Not Before: Sep 21 13:00:12 2026 GMT
Not After : Sep 22 13:00:12 2026 GMT
Subject: CN=2b3ce2cdd5cbef2fa86a734f284fe7059ce807fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2a:1d:65:e6:af:43:dd:a0:15:46:7f:48:83:
d8:52:50:c0:27:27:39:72:14:ce:90:32:1b:09:0d:
ad:32:2b:9f:fc:67:d1:cc:96:ea:5d:78:d0:be:26:
cd:43:18:ff:51:a3:45:2d:42:cd:50:33:38:ff:19:
2e:f9:03:30:56:e5:67:1c:be:fc:12:0d:b5:1c:4c:
3f:db:87:9d:2c:e8:85:d8:46:a5:3d:ae:cd:0b:f2:
ce:62:b3:bd:c5:c1:bc:da:e7:8b:b9:c8:00:50:04:
44:38:17:7f:d0:fd:ab:8c:7f:be:47:c5:ef:63:ac:
c4:3f:ed:f4:0c:eb:4b:f9:2f:71:f5:e2:42:42:00:
29:a6:02:e1:9e:b3:a5:91:5d:72:ad:a8:cf:bd:24:
8b:c3:ab:ea:32:35:a8:55:aa:3d:0f:c8:2a:4d:00:
0b:a3:5f:63:cd:30:20:5e:0a:8b:a7:2c:2d:6b:97:
43:04:86:fd:c8:58:a2:9f:a4:07:a2:74:77:ab:fe:
f2:8d:a6:3d:c2:c6:50:ed:4a:69:b7:22:35:10:bb:
31:8e:de:0b:ea:05:fc:9d:e4:17:9d:07:c0:0e:b2:
96:9a:a3:ba:61:7d:80:bd:ff:05:e0:2d:9c:1d:d7:
39:36:81:7f:7c:92:77:47:33:44:88:8d:eb:6c:52:
f4:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:3C:E2:CD:D5:CB:EF:2F:A8:6A:73:4F:28:4F:E7:05:9C:E8:07:FE
X509v3 Authority Key Identifier:
keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:ca:5c:1f:a5:61:cb:d3:dd:b7:01:c2:20:ef:b7:77:ef:98:
46:f3:e9:af:a0:05:c4:f0:14:c3:39:65:80:63:85:f3:90:47:
b6:f9:1d:f1:29:f7:bc:03:67:62:b1:58:76:41:53:1f:6d:ac:
7d:db:e5:c8:86:c9:d3:ff:da:0d:50:11:35:87:dc:fd:37:b1:
c3:ca:c6:aa:72:df:73:ef:a3:ce:d2:40:89:9a:9d:63:e0:9e:
1b:14:6a:ad:b0:d2:8b:9c:46:21:27:47:77:a2:9b:ea:3e:f2:
9e:c3:c4:fc:02:ab:30:4f:09:07:cd:ec:bd:47:5a:80:1a:6b:
4c:9d:d2:91:b7:9c:bc:59:98:a5:9f:c2:a9:a2:9f:26:9d:a8:
65:58:b4:93:6b:3c:16:19:4f:61:42:5a:33:e4:22:a2:89:d7:
c1:a2:7c:c2:ea:de:6a:58:70:b1:b3:21:53:1a:ab:1d:70:9d:
71:71:7d:00:36:bb:0e:53:f2:1b:98:4a:9f:43:1a:fc:0c:10:
1f:68:f7:e0:e2:dd:89:bf:88:36:33:78:47:de:35:c8:de:6d:
97:9d:88:06:07:35:e0:5f:34:e6:55:c0:8f:78:fe:70:f7:0b:
26:83:c1:44:0d:75:ff:23:00:80:19:9d:30:07:2a:88:49:69:
bf:44:c5:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:16:27 2026 by rpki-client