Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
File: t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft (raw, json)
Hash identifier: N6kNbaJp8fMk/vUbx/hzL/9/lJ5b5otCIVJIx7ZVDQU=
Subject key identifier: 50:83:29:B2:38:E8:F3:AF:D2:11:4E:F1:35:9B:EE:68:75:76:D3:C2
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Certificate issuer: /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial: 01A1DD26B5E2AD2740C338372B57BC00D1A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
Manifest number: 1AFF
Signing time: Sun 15 Nov 2026 03:01:04 +0000
Manifest this update: Sun 15 Nov 2026 03:01:04 +0000
Manifest next update: Mon 16 Nov 2026 03:01:04 +0000
Files and hashes: 1: Jpb-L2aLSHDF_WEc1A-SXkbLjMI.roa (hash: 2LG1cLyf6HbUm9jPYsS781lxHNJqUO267pNajZI09DI=)
2: t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl (hash: c8kxs6VCdx8mq9sKPO9CrkJCuwiGsflrfwFrLRiYyjk=)
3: u69K49f7DMy5q9VR2iEpf_NQmCE.roa (hash: DeJfEQEmW0bJCi/+2mD6GbrziH/UjWEhiPORbSnRWGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 03:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:26:b5:e2:ad:27:40:c3:38:37:2b:57:bc:00:d1:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Validity
Not Before: Nov 15 03:01:04 2026 GMT
Not After : Nov 16 03:01:04 2026 GMT
Subject: CN=508329b238e8f3afd2114ef1359bee687576d3c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:74:d9:c3:ec:25:ab:1c:c5:21:db:b0:fd:74:
a6:29:f2:41:ba:07:64:7d:2b:6b:e0:ed:62:be:39:
55:1b:3e:ce:a0:a3:8e:cc:5b:be:f8:23:26:03:8e:
9e:88:61:4d:7b:36:ce:a2:d0:b7:42:0d:fe:36:d0:
6d:ca:28:00:26:b7:68:f9:74:a0:e9:7c:1b:b3:47:
f1:23:9d:98:71:59:ed:30:03:98:b3:1e:e5:de:a8:
74:54:11:a7:ec:07:71:b1:04:d4:05:2b:dd:5a:c5:
94:54:74:11:4b:77:0f:62:3a:2c:1d:fd:e4:9c:dd:
c2:c6:43:49:bf:9b:20:a8:a6:92:34:22:6e:66:70:
b2:82:dd:de:17:e2:3d:79:45:b3:15:e2:49:ce:b2:
94:2a:f0:d8:3f:e2:0b:ac:8e:39:2a:5a:cb:17:1a:
02:57:cd:0c:49:64:0a:72:20:ff:16:fd:9d:e9:41:
3c:96:5d:09:88:39:ef:21:f9:5a:0c:e4:56:67:b8:
c2:f1:35:02:b5:c7:61:48:6d:08:e3:6f:d5:3e:e8:
06:9f:f2:b5:89:5a:fe:00:95:c8:71:c6:94:f4:59:
76:f9:4a:78:80:66:a5:a5:f5:d5:91:c7:d3:44:a2:
b6:2f:04:ab:1f:07:50:3d:79:74:a4:62:d5:d5:c0:
1f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:83:29:B2:38:E8:F3:AF:D2:11:4E:F1:35:9B:EE:68:75:76:D3:C2
X509v3 Authority Key Identifier:
keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:68:21:f5:cf:62:3e:14:44:ed:09:7a:d9:d6:64:f2:e5:8f:
b1:2b:87:dc:8c:61:82:85:54:9a:06:7d:52:14:36:f2:66:d5:
2a:ff:4e:3f:20:97:76:17:b0:77:df:86:58:90:4c:00:a1:e5:
14:55:e2:de:42:6e:1b:13:86:7f:87:cd:b2:01:42:2f:20:a3:
fc:fb:fa:bb:90:a7:c4:47:9e:80:26:79:39:f5:9f:f9:e9:d9:
2f:18:6f:13:6f:d8:02:39:e3:ad:96:c0:74:e6:ed:0b:14:26:
03:92:28:1a:57:82:ae:04:21:91:a5:62:11:ef:07:77:54:04:
e7:ef:45:1f:a4:48:c1:29:38:8c:96:a6:fe:2f:d8:ce:20:ea:
d0:d9:c0:7e:24:92:96:83:52:06:28:d2:33:f0:f0:36:ed:7a:
1e:2a:3a:07:46:c6:7b:c8:34:89:f4:b7:40:15:0a:25:c4:b5:
7b:c2:be:7e:49:a4:6d:50:8b:ee:a7:1d:0c:83:8a:52:43:a9:
3b:f1:c1:ec:bb:19:e2:ed:4b:27:22:fe:a0:59:f9:a1:28:32:
96:b7:6e:1e:5c:01:29:2b:db:62:f3:ae:2a:e9:8b:c6:2c:24:
70:44:10:64:0d:04:78:fe:ee:87:04:a0:fc:e6:22:51:38:73:
eb:06:72:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:09:28 2026 by rpki-client