Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
File: t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft (raw, json)
Hash identifier: h0lZ8XtoF4u7Gde4yKlfwm8L7JzN4sFDP7dN1xwQE+w=
Subject key identifier: A2:38:9F:CF:F2:FE:A4:C8:5E:BC:47:31:CE:9C:38:F6:3A:AC:04:19
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Certificate issuer: /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial: 01A1510812EDA1C98861F20984C9639F8C16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
Manifest number: 1AB4
Signing time: Sun 18 Oct 2026 22:00:45 +0000
Manifest this update: Sun 18 Oct 2026 22:00:45 +0000
Manifest next update: Mon 19 Oct 2026 22:00:45 +0000
Files and hashes: 1: PRNpmNoXJBIoF9gh578wEhtMpdQ.roa (hash: g9ylBrvDhSOD9y5ykNiZEjQPUeqbZ/uKUmYrg55Kn+I=)
2: iE0cS-gjGQ2wH2CEFbUXZzlClEs.roa (hash: zt5rLB2IKmjF4fOUcKb7lO1SdJgaIMds/uhpaf0hUX0=)
3: t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl (hash: jj4MjMKX4zqQ/WRBpvb28eWsmgx4JJBEQsyk232NtEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:51:08:12:ed:a1:c9:88:61:f2:09:84:c9:63:9f:8c:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Validity
Not Before: Oct 18 22:00:45 2026 GMT
Not After : Oct 19 22:00:45 2026 GMT
Subject: CN=a2389fcff2fea4c85ebc4731ce9c38f63aac0419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ba:a2:9e:3d:5f:f9:37:5a:76:0d:71:ec:31:
62:56:70:a5:6b:2c:64:3b:20:98:dd:9b:0f:18:50:
e8:ab:78:86:a0:b2:d3:0d:15:ea:bb:15:f9:1e:6d:
63:ce:3d:54:9f:d0:95:8b:43:dc:da:df:e2:b7:22:
e5:59:51:08:55:43:91:36:8f:9a:99:9d:13:9d:bf:
85:21:21:0f:9e:67:ec:25:b8:6c:05:07:7c:54:9d:
2a:b8:ca:89:67:24:ee:41:8e:9e:70:68:3b:38:5e:
ea:19:0e:b1:b1:5d:e3:c9:6a:d1:ad:da:79:2d:cc:
b3:63:94:6b:22:05:08:d5:bb:60:3b:7d:3e:1a:b3:
27:65:68:31:b1:54:1f:4b:72:25:31:6a:d6:8a:48:
ac:fa:de:08:d1:58:78:0c:1a:fc:b2:b5:63:4d:31:
57:b9:07:fb:cf:82:a6:79:41:fb:26:f7:3f:67:65:
20:22:55:cc:bb:b1:e3:18:5c:3e:59:ed:6e:96:67:
ee:d0:3a:36:e3:a8:94:8f:68:9d:e9:32:d3:7d:2b:
da:fe:09:96:5e:a4:d4:94:e3:54:d4:89:1b:ea:b9:
06:15:bd:00:b9:8d:c9:b9:10:6b:d1:44:08:29:8a:
79:c6:dc:df:d7:fe:44:0b:fe:7f:43:f0:1e:be:33:
14:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:38:9F:CF:F2:FE:A4:C8:5E:BC:47:31:CE:9C:38:F6:3A:AC:04:19
X509v3 Authority Key Identifier:
keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:7e:e9:71:f3:59:8c:96:b8:5b:b6:a5:24:9b:79:cb:af:21:
4a:16:e3:1a:8c:97:76:b0:33:84:33:95:b0:a7:03:35:26:a3:
82:d5:0f:ea:8d:b4:16:43:d4:8c:27:8f:25:cb:7f:7d:39:75:
e7:0c:75:40:ad:aa:e4:10:1c:b2:4b:e6:bc:7d:1a:ab:4f:08:
39:45:24:c2:a3:68:60:e8:d2:69:b8:0e:b5:62:d3:f1:e1:75:
01:49:bf:76:51:67:e6:21:d5:00:68:b7:f5:00:8e:55:eb:39:
76:74:8b:94:32:e2:58:05:6a:dc:b2:30:48:17:2d:e2:00:73:
3a:a7:c3:ed:3c:37:74:6e:2f:40:1c:6a:89:af:9a:47:01:ba:
52:d4:62:98:e3:12:78:0c:f3:64:d4:b3:a5:ce:98:47:e3:36:
7c:33:d4:28:60:da:aa:79:c7:d0:70:4f:8f:8b:8e:d3:c5:80:
47:4e:ca:dd:a4:14:97:2b:32:c3:ec:f9:a9:d0:0f:31:89:ab:
aa:19:ef:c8:7d:a0:f0:36:f6:7c:0b:c1:b8:d7:c6:25:dd:df:
bb:c8:eb:81:98:b5:68:a3:cb:95:f9:89:68:ad:8c:94:21:e7:
2f:5c:e7:5d:f9:b4:1d:45:02:dc:a1:80:a1:53:9c:45:54:c6:
a1:b8:6d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 04:13:49 2026 by rpki-client