Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
File: t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft (raw, json)
Hash identifier: kU6yNsN8BLIq+5dCpLHkmbUiRCaMvowYGQjrHFZ3RmI=
Subject key identifier: 31:1E:E2:90:E9:78:FE:D2:7E:42:F1:F9:FC:09:84:06:30:89:33:AB
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Certificate issuer: /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial: 01A1A412ABAB68F5A87A793191605352629F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
Manifest number: 1ADF
Signing time: Wed 04 Nov 2026 01:00:49 +0000
Manifest this update: Wed 04 Nov 2026 01:00:49 +0000
Manifest next update: Thu 05 Nov 2026 01:00:49 +0000
Files and hashes: 1: PRNpmNoXJBIoF9gh578wEhtMpdQ.roa (hash: g9ylBrvDhSOD9y5ykNiZEjQPUeqbZ/uKUmYrg55Kn+I=)
2: iE0cS-gjGQ2wH2CEFbUXZzlClEs.roa (hash: zt5rLB2IKmjF4fOUcKb7lO1SdJgaIMds/uhpaf0hUX0=)
3: t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl (hash: H7CHl276hslfJingARxNxZhk+AjKLAERDKlr0JW9r7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 01:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a4:12:ab:ab:68:f5:a8:7a:79:31:91:60:53:52:62:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Validity
Not Before: Nov 4 01:00:49 2026 GMT
Not After : Nov 5 01:00:49 2026 GMT
Subject: CN=311ee290e978fed27e42f1f9fc098406308933ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1c:36:99:d3:ca:10:88:98:5a:70:39:49:1a:
35:df:59:bc:4f:ed:18:8b:f1:ed:24:a5:61:9e:37:
d8:9c:11:0a:88:1d:0d:aa:8d:8d:01:34:16:13:5f:
02:a0:f5:28:40:1c:8a:d8:f3:f0:e5:ac:b2:dc:98:
4c:a0:26:da:0d:34:9b:9d:ab:99:82:0d:e4:86:2c:
c5:4b:ba:7e:a9:09:ba:15:72:ce:ea:d4:36:1a:ae:
02:7a:72:5c:1e:10:3f:1e:aa:0f:a2:1f:a4:99:fd:
d5:11:3b:aa:f7:ef:5f:8f:af:0f:d4:42:4f:12:0f:
2c:09:a9:32:83:c1:cd:a8:dd:03:ea:91:5c:10:c6:
f9:d9:e7:4d:fd:a9:29:c7:ab:97:55:17:b1:8d:72:
c4:51:3c:b6:69:96:49:9c:3e:69:c1:03:2f:1f:5c:
13:d6:95:b6:6b:a3:3b:ba:d2:f2:d9:fa:90:51:05:
1a:a3:0b:77:7f:b7:f2:48:4a:1f:8b:cd:a3:33:57:
50:83:b6:de:45:28:3f:d7:6f:a3:7b:c0:ab:e5:57:
85:36:46:46:f6:f0:9a:91:21:7d:b4:17:d5:cc:83:
93:8f:78:68:0f:3f:b2:b5:c1:8f:70:30:9c:5e:21:
95:ec:ca:a0:f5:aa:d7:45:46:16:84:c6:79:70:3c:
23:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:1E:E2:90:E9:78:FE:D2:7E:42:F1:F9:FC:09:84:06:30:89:33:AB
X509v3 Authority Key Identifier:
keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:ab:58:f7:f0:e5:ff:8c:f6:87:b6:2e:e5:b5:aa:b5:99:00:
4f:34:73:fd:0b:b5:23:68:ad:6c:c2:ea:17:bd:2e:4e:19:36:
e6:e2:02:c2:b5:0c:8b:f3:97:d2:e5:1a:f3:20:0e:cf:42:3e:
d7:91:0c:e3:16:48:e2:5c:06:45:74:a3:60:a9:f4:6d:ba:28:
04:4f:48:91:fc:82:02:ab:89:c1:0b:76:95:7d:c2:ed:60:20:
a2:c5:88:3f:58:73:4b:37:bd:d9:53:78:13:05:cb:3f:b7:34:
1d:e8:8f:92:fa:e6:f2:09:e0:66:f2:6f:6a:57:bb:b6:0d:9b:
73:04:69:97:77:6f:2f:f3:c3:50:87:0f:96:29:f2:b3:4c:38:
16:a0:3a:f5:d0:e1:07:d2:da:24:e2:83:96:0a:a4:bb:04:3a:
ec:df:07:7e:20:5e:84:c5:b6:54:2d:1c:64:ee:3e:20:8a:12:
1f:22:2d:c5:4a:32:58:a8:87:d2:c1:91:b9:76:f8:21:96:d5:
d9:ca:7d:21:b7:8e:cb:19:10:0c:07:00:7d:15:7e:af:fd:02:
1d:92:e6:16:9f:92:cd:70:35:63:ba:c0:a3:f7:28:dc:2f:47:
a1:b2:66:e9:97:6c:2e:a6:46:14:2b:f1:52:65:28:6a:f4:ee:
db:91:03:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 11:18:54 2026 by rpki-client