Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
File: t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft (raw, json)
Hash identifier: Gbc59WrS2YG18DYSu3LbDSPEkXnMIcFN5IbHbU3F++U=
Subject key identifier: 63:4E:22:B0:96:88:7E:12:55:8A:2F:C6:D3:FA:3F:BB:19:00:3D:F6
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Certificate issuer: /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial: 019F89E9A2B4B6C5B8AC0EC783213778A7C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
Manifest number: 19C7
Signing time: Wed 22 Jul 2026 13:00:17 +0000
Manifest this update: Wed 22 Jul 2026 13:00:17 +0000
Manifest next update: Thu 23 Jul 2026 13:00:17 +0000
Files and hashes: 1: 2MSpCLbIJT_dNS85cUQH7P6hQQQ.roa (hash: LqxKJfwKg1vJNoy6niHI6Ay0t/ibwSsUhqanJ+kZvVg=)
2: TZEmLmroEs6IRm7BIRkKTFCJTnA.roa (hash: QhC3msm1fXEe5FbZInDyO6caWrevlSV8+0GhYVm+mSE=)
3: XKyWf4Y6NjYLpXjJG8NNu1YgV8I.roa (hash: Wg/rYioLK0eT7zXUczkOHExRo3EIegYLBIdXxr8Hp88=)
4: t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl (hash: LPihP9+XL6xW+vhZX51PlaJprohft4RxVbnDqqjnDYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Jul 2026 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:89:e9:a2:b4:b6:c5:b8:ac:0e:c7:83:21:37:78:a7:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Validity
Not Before: Jul 22 13:00:17 2026 GMT
Not After : Jul 23 13:00:17 2026 GMT
Subject: CN=634e22b096887e12558a2fc6d3fa3fbb19003df6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9d:55:60:83:f0:f9:be:e8:4c:ef:51:28:13:
86:96:b0:99:c0:5f:33:de:fe:2c:56:50:81:be:3c:
c7:47:8b:48:52:d1:d0:2f:68:c6:6c:97:7a:a2:35:
77:4d:e7:0f:33:1a:41:19:04:dd:32:6b:59:37:1f:
a6:4b:42:82:dc:87:eb:b7:49:2a:8a:be:73:7d:2a:
00:b3:6e:ce:4c:0f:3e:7e:eb:cb:75:71:f8:09:33:
92:99:3d:c1:6a:ec:04:72:b4:f3:66:52:d1:cd:68:
20:59:90:03:be:0a:e8:24:bf:d9:20:d7:56:f7:3e:
a3:91:6e:39:16:b1:38:37:c9:cf:0c:bc:05:70:3f:
2b:ad:2e:96:45:d1:b3:4d:3b:59:f0:d4:39:23:ed:
b5:63:cf:34:15:c7:e5:2b:85:21:2b:f8:a0:f9:e9:
56:fc:79:cd:be:a7:cf:79:25:03:9f:c7:c3:d1:b2:
8f:3c:90:ac:d6:64:c4:01:05:ee:8f:a3:f6:61:0e:
ff:b7:33:03:9b:e5:72:66:bd:cd:c5:a7:98:36:09:
0a:99:f1:64:03:eb:06:56:4e:32:f0:2a:9c:3f:0d:
67:1d:3d:54:44:b7:bf:76:8e:8d:29:20:85:46:93:
08:63:f2:31:76:c8:d1:4a:a8:c9:1a:fd:85:b3:93:
d4:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:4E:22:B0:96:88:7E:12:55:8A:2F:C6:D3:FA:3F:BB:19:00:3D:F6
X509v3 Authority Key Identifier:
keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:50:95:a2:43:a9:26:e4:ff:bd:5d:de:f5:af:33:65:c3:8b:
c7:47:c5:41:b2:bf:e9:dd:ee:f4:ce:fe:dc:ae:24:85:12:91:
15:13:41:f3:c8:0a:69:1d:61:a2:7f:6a:be:d7:19:20:3c:17:
98:ee:28:ed:43:d3:af:b6:b2:02:27:42:6d:bd:06:39:d4:9e:
a9:8b:8e:2b:43:d2:46:fb:be:98:e8:39:39:fb:1f:25:a8:08:
25:a5:ea:6f:c5:d2:7b:f6:e8:8c:f7:01:36:50:6b:4c:b3:cd:
7a:d0:f6:48:8b:14:d9:6b:c5:b8:bb:d3:fa:2e:73:10:0a:6d:
e8:be:12:df:30:44:6c:bf:22:55:ea:56:3b:06:5f:af:48:03:
55:7a:a5:d0:50:30:c9:22:ff:76:24:ca:09:9f:4e:f6:26:f9:
a6:ee:2f:34:28:89:39:8b:4c:aa:66:7c:e6:f9:45:98:d9:cf:
50:ca:65:84:2f:c0:65:d0:06:60:5c:03:38:90:f0:ff:78:27:
82:30:46:94:f9:98:24:e5:23:ee:55:df:9a:aa:9d:29:e2:62:
10:f3:bd:cd:47:b9:9e:08:31:6f:55:0a:b5:a0:36:07:98:79:
f8:c0:20:7f:c3:90:14:1e:af:e4:ba:1b:42:79:5b:2d:89:46:
d1:43:73:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 17:35:47 2026 by rpki-client