Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
File: t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft (raw, json)
Hash identifier: /yrAEAfPmGeBT5FOoUg5wU2+RpgA8oLN6ZFdFBeLhqQ=
Subject key identifier: C6:5D:AD:87:44:78:02:24:C4:CC:96:95:15:8B:9B:58:02:2C:0E:77
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Certificate issuer: /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial: 019FAE9B95677DF3DC761B1D2552B1F421BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
Manifest number: 19DA
Signing time: Wed 29 Jul 2026 16:00:59 +0000
Manifest this update: Wed 29 Jul 2026 16:00:59 +0000
Manifest next update: Thu 30 Jul 2026 16:00:59 +0000
Files and hashes: 1: 2MSpCLbIJT_dNS85cUQH7P6hQQQ.roa (hash: LqxKJfwKg1vJNoy6niHI6Ay0t/ibwSsUhqanJ+kZvVg=)
2: TZEmLmroEs6IRm7BIRkKTFCJTnA.roa (hash: QhC3msm1fXEe5FbZInDyO6caWrevlSV8+0GhYVm+mSE=)
3: XKyWf4Y6NjYLpXjJG8NNu1YgV8I.roa (hash: Wg/rYioLK0eT7zXUczkOHExRo3EIegYLBIdXxr8Hp88=)
4: t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl (hash: epApYrqmLdxM3QYCwywC/bfLLkq+MhzdUnyyahe1oy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 16:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ae:9b:95:67:7d:f3:dc:76:1b:1d:25:52:b1:f4:21:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Validity
Not Before: Jul 29 16:00:59 2026 GMT
Not After : Jul 30 16:00:59 2026 GMT
Subject: CN=c65dad8744780224c4cc9695158b9b58022c0e77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e4:43:17:68:82:3c:03:3a:16:7d:f2:6b:ef:
1c:d9:be:fc:e0:4c:da:a7:80:67:24:2f:21:5d:58:
ae:fc:a6:5c:18:df:c0:b7:0a:05:94:5d:18:98:fa:
08:5e:6e:64:e3:ce:22:55:81:77:d3:09:7b:2a:11:
9a:89:3d:48:7e:3e:5f:fe:6e:ca:d9:d3:3c:ee:d5:
c8:ad:fc:8f:ab:6c:43:6f:c1:fa:5b:98:33:1e:68:
4a:5e:04:35:2c:4e:44:95:a4:82:76:a5:2c:1a:24:
1b:6c:c2:1e:77:d7:de:f7:30:9e:c4:b0:17:0b:9f:
93:e2:35:92:48:d4:06:6f:66:75:1b:c0:dd:ac:23:
39:73:65:b6:ca:27:1a:8c:a5:20:d7:bd:35:91:9d:
58:71:1c:52:36:41:6b:6d:95:89:ae:b7:01:6f:69:
63:ff:dd:ab:a8:fc:b2:c3:7d:b7:98:12:24:b9:9c:
35:74:44:90:d3:f4:07:04:0b:e6:08:de:7c:43:06:
79:96:b2:8a:fc:77:96:10:ae:35:b4:86:20:c8:5d:
69:12:6d:77:34:58:c2:3c:01:84:8a:87:8b:95:88:
43:fc:a8:0a:22:03:5d:c9:bc:8d:8c:33:6d:3d:e4:
dc:f0:ab:c9:df:17:20:22:8a:76:1c:1c:63:c3:58:
eb:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:5D:AD:87:44:78:02:24:C4:CC:96:95:15:8B:9B:58:02:2C:0E:77
X509v3 Authority Key Identifier:
keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:77:3a:81:f0:f7:f6:db:dc:e2:7f:6e:5f:2a:76:b1:c1:43:
01:79:49:13:09:29:34:e8:92:30:79:91:e8:c4:fe:17:d9:70:
bc:a4:af:7f:5f:66:de:6e:94:44:16:b8:c4:37:4d:57:02:de:
b1:a8:83:bc:10:b7:1b:dc:4a:2c:7b:6e:8e:1a:0f:06:9b:84:
2b:6d:22:e1:70:df:4b:46:8e:11:04:56:2e:05:4e:07:00:93:
8b:55:40:42:b0:3f:87:cf:d8:e0:c5:f7:c1:08:9d:4c:62:56:
dd:03:4b:cf:48:b9:ec:21:77:da:58:eb:29:83:20:fb:07:dc:
3a:99:6d:28:98:11:a9:68:83:42:56:52:8e:5f:ff:c5:09:25:
e6:21:ff:62:58:82:d1:42:60:e3:1c:97:84:50:eb:c3:f6:d9:
dd:f0:b5:c7:00:b8:1f:c4:3e:f3:00:4a:c5:09:b0:cb:86:7d:
73:5a:8f:bc:ea:cb:f3:08:67:c4:79:89:4b:0b:e1:b1:cb:2f:
6d:9e:c5:f4:7e:61:f0:04:2d:2a:ce:65:13:03:91:bb:1e:2f:
8c:f7:79:fc:34:15:50:ff:0e:42:89:df:ab:d1:05:74:fb:8c:
a7:d7:f2:1d:40:9b:b6:bd:ef:30:57:12:f7:1b:e1:6b:8d:21:
c3:df:e7:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+um5VnffPcdhsdJVKx9CG+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3NWEwNTY2ZDBiNjNhMWY4NjJkODM0NThlNGYyZWE2ZmQ4
ZjdkMjEwHhcNMjYwNzI5MTYwMDU5WhcNMjYwNzMwMTYwMDU5WjAzMTEwLwYDVQQD
EyhjNjVkYWQ4NzQ0NzgwMjI0YzRjYzk2OTUxNThiOWI1ODAyMmMwZTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuORDF2iCPAM6Fn3ya+8c2b784Eza
p4BnJC8hXViu/KZcGN/AtwoFlF0YmPoIXm5k484iVYF30wl7KhGaiT1Ifj5f/m7K
2dM87tXIrfyPq2xDb8H6W5gzHmhKXgQ1LE5ElaSCdqUsGiQbbMIed9fe9zCexLAX
C5+T4jWSSNQGb2Z1G8DdrCM5c2W2yicajKUg1701kZ1YcRxSNkFrbZWJrrcBb2lj
/92rqPyyw323mBIkuZw1dESQ0/QHBAvmCN58QwZ5lrKK/HeWEK41tIYgyF1pEm13
NFjCPAGEioeLlYhD/KgKIgNdybyNjDNtPeTc8KvJ3xcgIop2HBxjw1jrUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMZdrYdEeAIkxMyWlRWLm1gCLA53MB8GA1UdIwQY
MBaAFLdaBWbQtjofhi2DRY5PLqb9j30hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDFvRlp0QzJPaC1HTFlORmprOHVwdjJQZlNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8xMDM1NzAtMWNmNi00MmFjLTgxZDQt
ODNmNjAxYzNmYjU5LzEvdDFvRlp0QzJPaC1HTFlORmprOHVwdjJQZlNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi8xMDM1NzAtMWNmNi00MmFjLTgxZDQtODNmNjAxYzNmYjU5
LzEvdDFvRlp0QzJPaC1HTFlORmprOHVwdjJQZlNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARXc6gfD3
9tvc4n9uXyp2scFDAXlJEwkpNOiSMHmR6MT+F9lwvKSvf19m3m6URBa4xDdNVwLe
saiDvBC3G9xKLHtujhoPBpuEK20i4XDfS0aOEQRWLgVOBwCTi1VAQrA/h8/Y4MX3
wQidTGJW3QNLz0i57CF32ljrKYMg+wfcOpltKJgRqWiDQlZSjl//xQkl5iH/YliC
0UJg4xyXhFDrw/bZ3fC1xwC4H8Q+8wBKxQmwy4Z9c1qPvOrL8whnxHmJSwvhscsv
bZ7F9H5h8AQtKs5lEwORux4vjPd5/DQVUP8OQonfq9EFdPuMp9fyHUCbtr3vMFcS
9xvha40hw9/nAw==
-----END CERTIFICATE-----
Generated at Thu Jul 30 01:10:01 2026 by rpki-client