Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
File: t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft (raw, json)
Hash identifier: kIlU3cm83TPf0g2rXX1BdxmWLNWI78noYJ7tlbTffQw=
Subject key identifier: AA:37:0F:AD:9E:03:E4:E7:D4:5D:EA:C9:88:99:E2:CA:C4:8C:31:E5
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Certificate issuer: /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial: 019FDEE37414DB056C922CE7936759BD12CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
Manifest number: 19F3
Signing time: Sat 08 Aug 2026 01:01:15 +0000
Manifest this update: Sat 08 Aug 2026 01:01:15 +0000
Manifest next update: Sun 09 Aug 2026 01:01:15 +0000
Files and hashes: 1: 2MSpCLbIJT_dNS85cUQH7P6hQQQ.roa (hash: LqxKJfwKg1vJNoy6niHI6Ay0t/ibwSsUhqanJ+kZvVg=)
2: TZEmLmroEs6IRm7BIRkKTFCJTnA.roa (hash: QhC3msm1fXEe5FbZInDyO6caWrevlSV8+0GhYVm+mSE=)
3: XKyWf4Y6NjYLpXjJG8NNu1YgV8I.roa (hash: Wg/rYioLK0eT7zXUczkOHExRo3EIegYLBIdXxr8Hp88=)
4: t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl (hash: 1GKPZB6g+4uTopfkuRVKaukY8LWIbOwJnzPszn2K9Tg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Aug 2026 22:03:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:de:e3:74:14:db:05:6c:92:2c:e7:93:67:59:bd:12:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Validity
Not Before: Aug 8 01:01:15 2026 GMT
Not After : Aug 9 01:01:15 2026 GMT
Subject: CN=aa370fad9e03e4e7d45deac98899e2cac48c31e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a4:da:89:78:73:00:35:46:ad:56:6c:1f:07:
e4:ad:ed:f3:e1:d3:92:2f:76:3b:80:9f:a6:81:e9:
74:af:91:2a:c7:81:1e:fc:09:63:20:6c:71:d0:6d:
90:7c:2d:4a:ec:1d:dc:43:81:60:b8:b3:9c:ee:88:
2a:0f:30:fb:84:b1:bf:1a:b9:a3:7f:5c:1a:5f:59:
d7:97:08:e6:b9:b1:9f:56:bf:df:08:dd:04:a9:e0:
50:26:62:f9:e3:4e:e0:37:fa:25:83:a2:ae:8c:92:
5a:c9:44:ea:ba:94:43:f7:66:f3:8e:d1:ec:4b:a5:
11:4d:2f:fd:f0:53:6d:25:28:55:ae:c7:20:d3:c9:
5e:c6:22:9a:5b:9b:02:c7:f6:db:0b:5d:18:05:af:
36:b6:f9:ed:0b:79:b5:2e:de:0a:67:21:37:3b:04:
5e:e8:8a:07:d3:fd:d3:7d:11:5a:b4:2a:c1:42:d6:
ee:18:5a:55:8e:11:58:eb:f5:ac:83:e3:3d:f0:96:
c3:b0:fd:a5:2e:7e:81:0f:28:4a:1a:46:4e:20:be:
6a:9a:9b:35:37:85:c4:5a:aa:52:c7:d3:ff:3e:ac:
13:66:78:72:c4:28:96:68:bf:3d:08:48:f7:c5:1c:
02:eb:b0:f1:f8:c4:94:96:7e:e4:e4:f4:24:6d:df:
2e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:37:0F:AD:9E:03:E4:E7:D4:5D:EA:C9:88:99:E2:CA:C4:8C:31:E5
X509v3 Authority Key Identifier:
keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:74:5e:02:38:14:9f:a3:a5:23:d8:f8:db:9b:06:2b:64:ff:
9d:60:cb:63:d1:38:c6:5d:20:c2:85:ca:e5:16:0e:b2:22:e3:
14:a4:b1:5d:e9:39:d3:5b:d0:4b:5e:d4:ef:70:24:c7:f3:80:
3f:a6:55:60:82:77:f9:f1:79:0f:99:54:f5:9b:6b:7a:74:4a:
16:6d:b3:f0:84:d3:34:c1:0e:70:8e:bc:b6:42:31:14:24:e7:
56:18:0a:35:1d:e7:06:2b:41:01:a5:29:0a:28:5d:f8:0b:0e:
b1:1c:3b:4b:fc:46:6e:be:2b:fa:5b:51:31:f3:30:4a:6e:df:
9a:01:f9:4f:19:2c:fb:30:f7:08:ac:ad:e4:18:7e:fb:83:30:
a1:1a:49:9f:54:b3:2d:01:f9:cd:0b:31:71:27:3b:8e:1d:36:
df:33:93:51:cc:31:a7:89:48:32:e0:30:a6:f7:87:e7:9d:f0:
86:46:45:34:b2:3d:62:4e:1a:05:9a:65:f0:be:75:74:3b:f4:
51:71:36:17:4b:1c:ee:88:5a:ca:41:36:42:8e:16:ae:94:c6:
d4:06:a7:7a:ae:37:51:26:92:e9:21:3a:75:ec:70:0f:3d:15:
bb:e6:53:73:aa:8d:50:6f:84:2f:96:27:ba:ba:c5:a9:e2:48:
3a:ea:75:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/e43QU2wVskiznk2dZvRLPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3NWEwNTY2ZDBiNjNhMWY4NjJkODM0NThlNGYyZWE2ZmQ4
ZjdkMjEwHhcNMjYwODA4MDEwMTE1WhcNMjYwODA5MDEwMTE1WjAzMTEwLwYDVQQD
EyhhYTM3MGZhZDllMDNlNGU3ZDQ1ZGVhYzk4ODk5ZTJjYWM0OGMzMWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqTaiXhzADVGrVZsHwfkre3z4dOS
L3Y7gJ+mgel0r5Eqx4Ee/AljIGxx0G2QfC1K7B3cQ4FguLOc7ogqDzD7hLG/Grmj
f1waX1nXlwjmubGfVr/fCN0EqeBQJmL5407gN/olg6KujJJayUTqupRD92bzjtHs
S6URTS/98FNtJShVrscg08lexiKaW5sCx/bbC10YBa82tvntC3m1Lt4KZyE3OwRe
6IoH0/3TfRFatCrBQtbuGFpVjhFY6/Wsg+M98JbDsP2lLn6BDyhKGkZOIL5qmps1
N4XEWqpSx9P/PqwTZnhyxCiWaL89CEj3xRwC67Dx+MSUln7k5PQkbd8ufwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKo3D62eA+Tn1F3qyYiZ4srEjDHlMB8GA1UdIwQY
MBaAFLdaBWbQtjofhi2DRY5PLqb9j30hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDFvRlp0QzJPaC1HTFlORmprOHVwdjJQZlNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8xMDM1NzAtMWNmNi00MmFjLTgxZDQt
ODNmNjAxYzNmYjU5LzEvdDFvRlp0QzJPaC1HTFlORmprOHVwdjJQZlNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi8xMDM1NzAtMWNmNi00MmFjLTgxZDQtODNmNjAxYzNmYjU5
LzEvdDFvRlp0QzJPaC1HTFlORmprOHVwdjJQZlNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiHReAjgU
n6OlI9j425sGK2T/nWDLY9E4xl0gwoXK5RYOsiLjFKSxXek501vQS17U73Akx/OA
P6ZVYIJ3+fF5D5lU9ZtrenRKFm2z8ITTNMEOcI68tkIxFCTnVhgKNR3nBitBAaUp
Cihd+AsOsRw7S/xGbr4r+ltRMfMwSm7fmgH5Txks+zD3CKyt5Bh++4MwoRpJn1Sz
LQH5zQsxcSc7jh023zOTUcwxp4lIMuAwpveH553whkZFNLI9Yk4aBZpl8L51dDv0
UXE2F0sc7ohaykE2Qo4WrpTG1Aaneq43USaS6SE6dexwDz0Vu+ZTc6qNUG+EL5Yn
urrFqeJIOup1Fg==
-----END CERTIFICATE-----
Generated at Sat Aug 8 03:31:44 2026 by rpki-client