Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
File: t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft (raw, json)
Hash identifier: EEGeQ8DgOa4Cav1crEitFOz4Y8bdLfaH7tJPMtrGSB4=
Subject key identifier: 21:B7:67:09:2C:07:77:10:BA:6E:3C:B3:37:33:4E:DF:FA:23:60:67
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Certificate issuer: /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial: 01A0BE424CC52282AE3AC221C6954C06DF63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
Manifest number: 1A68
Signing time: Sun 20 Sep 2026 10:00:10 +0000
Manifest this update: Sun 20 Sep 2026 10:00:10 +0000
Manifest next update: Mon 21 Sep 2026 10:00:10 +0000
Files and hashes: 1: PRNpmNoXJBIoF9gh578wEhtMpdQ.roa (hash: g9ylBrvDhSOD9y5ykNiZEjQPUeqbZ/uKUmYrg55Kn+I=)
2: iE0cS-gjGQ2wH2CEFbUXZzlClEs.roa (hash: zt5rLB2IKmjF4fOUcKb7lO1SdJgaIMds/uhpaf0hUX0=)
3: t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl (hash: SurRn5KWxIdQNki4M6ar45Vh+6fFvpExNMaog/7xnsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:42:4c:c5:22:82:ae:3a:c2:21:c6:95:4c:06:df:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Validity
Not Before: Sep 20 10:00:10 2026 GMT
Not After : Sep 21 10:00:10 2026 GMT
Subject: CN=21b767092c077710ba6e3cb337334edffa236067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:55:d4:0a:63:56:8f:fc:69:7c:3c:b6:1d:38:
7b:93:7f:b9:3d:6a:35:33:22:ca:50:a1:06:74:09:
17:08:20:59:20:e7:ff:cc:53:90:23:db:3d:6d:bb:
0a:0d:0a:99:95:18:d6:02:95:8d:74:49:4c:3c:0c:
34:aa:56:ed:a0:3c:fd:9e:b0:ee:0f:93:5c:63:66:
16:0b:1b:e6:16:5b:88:4d:f1:f5:dc:ef:91:1f:95:
9f:3c:81:4a:53:5e:59:96:a9:33:5e:ca:4d:51:bd:
7f:08:5b:28:08:44:ef:ce:3d:96:1b:a3:17:49:30:
ac:50:6c:fc:11:5e:6e:33:08:1d:29:05:56:28:bb:
2b:aa:b6:6b:7f:6c:fb:52:7b:38:3d:df:13:04:54:
b0:d8:c0:71:bf:7c:ba:1f:7c:0c:96:7d:79:ad:e3:
84:3c:2f:7d:11:3a:a4:28:be:ad:18:fd:c0:bc:90:
45:14:38:71:2b:09:a6:f8:f5:1e:22:b8:ea:8a:b8:
7a:25:b8:96:d0:66:45:bf:e8:21:5f:14:ed:08:60:
dd:22:1e:8c:b6:53:64:32:31:b9:97:85:7c:aa:8e:
52:18:20:53:63:4d:f8:15:cd:c4:e2:7d:7a:40:83:
c1:88:74:16:9a:5a:38:57:1c:8b:77:06:ac:67:3e:
6f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B7:67:09:2C:07:77:10:BA:6E:3C:B3:37:33:4E:DF:FA:23:60:67
X509v3 Authority Key Identifier:
keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:b6:f9:14:af:63:21:e5:d1:56:ba:89:a2:c0:32:55:43:d9:
83:fa:35:df:4e:c7:fc:82:8e:55:3b:68:0d:6f:6a:a1:17:60:
bb:c1:1b:44:89:5c:ff:8d:85:d1:25:68:2a:60:c5:d9:01:47:
c6:d9:1b:91:c9:32:c3:55:0b:59:e4:5a:a3:7c:9d:dc:db:5e:
ba:c5:cf:7f:7d:2c:3e:d2:95:ee:38:d2:05:b4:a8:86:ff:e1:
15:89:70:89:88:d9:a1:a4:27:09:c1:25:bc:ea:7c:ab:82:da:
89:75:d1:28:05:f5:29:f3:a9:ac:4e:0b:e3:bc:d6:72:d3:05:
1d:83:fa:f0:03:78:d9:23:e4:db:b7:ea:0c:a1:81:1a:62:0f:
c1:36:80:72:18:4d:21:37:fc:27:3e:0b:2a:24:2b:ef:99:9f:
7d:b3:d1:e5:f6:3b:05:ae:66:e6:04:00:80:68:dc:ce:c2:05:
90:83:3f:02:2e:08:d0:26:63:59:c7:1d:2c:3e:84:06:8e:ed:
03:65:8f:ed:65:c4:b8:b1:cb:ce:35:55:5f:45:fc:33:70:70:
a4:ed:59:52:9c:3d:c8:70:1b:b0:84:0c:ae:4e:cc:3b:3f:05:
6c:8a:cc:58:34:06:6e:56:79:06:bb:ea:82:64:48:cb:ad:b7:
4a:f4:ef:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC+QkzFIoKuOsIhxpVMBt9jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3NWEwNTY2ZDBiNjNhMWY4NjJkODM0NThlNGYyZWE2ZmQ4
ZjdkMjEwHhcNMjYwOTIwMTAwMDEwWhcNMjYwOTIxMTAwMDEwWjAzMTEwLwYDVQQD
EygyMWI3NjcwOTJjMDc3NzEwYmE2ZTNjYjMzNzMzNGVkZmZhMjM2MDY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlXUCmNWj/xpfDy2HTh7k3+5PWo1
MyLKUKEGdAkXCCBZIOf/zFOQI9s9bbsKDQqZlRjWApWNdElMPAw0qlbtoDz9nrDu
D5NcY2YWCxvmFluITfH13O+RH5WfPIFKU15ZlqkzXspNUb1/CFsoCETvzj2WG6MX
STCsUGz8EV5uMwgdKQVWKLsrqrZrf2z7Uns4Pd8TBFSw2MBxv3y6H3wMln15reOE
PC99ETqkKL6tGP3AvJBFFDhxKwmm+PUeIrjqirh6JbiW0GZFv+ghXxTtCGDdIh6M
tlNkMjG5l4V8qo5SGCBTY034Fc3E4n16QIPBiHQWmlo4VxyLdwasZz5vyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCG3ZwksB3cQum48szczTt/6I2BnMB8GA1UdIwQY
MBaAFLdaBWbQtjofhi2DRY5PLqb9j30hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDFvRlp0QzJPaC1HTFlORmprOHVwdjJQZlNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8xMDM1NzAtMWNmNi00MmFjLTgxZDQt
ODNmNjAxYzNmYjU5LzEvdDFvRlp0QzJPaC1HTFlORmprOHVwdjJQZlNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi8xMDM1NzAtMWNmNi00MmFjLTgxZDQtODNmNjAxYzNmYjU5
LzEvdDFvRlp0QzJPaC1HTFlORmprOHVwdjJQZlNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMrb5FK9j
IeXRVrqJosAyVUPZg/o1307H/IKOVTtoDW9qoRdgu8EbRIlc/42F0SVoKmDF2QFH
xtkbkckyw1ULWeRao3yd3NteusXPf30sPtKV7jjSBbSohv/hFYlwiYjZoaQnCcEl
vOp8q4LaiXXRKAX1KfOprE4L47zWctMFHYP68AN42SPk27fqDKGBGmIPwTaAchhN
ITf8Jz4LKiQr75mffbPR5fY7Ba5m5gQAgGjczsIFkIM/Ai4I0CZjWccdLD6EBo7t
A2WP7WXEuLHLzjVVX0X8M3BwpO1ZUpw9yHAbsIQMrk7MOz8FbIrMWDQGblZ5Brvq
gmRIy623SvTviQ==
-----END CERTIFICATE-----
Generated at Sun Sep 20 21:26:55 2026 by rpki-client