Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
File: t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft (raw, json)
Hash identifier: me1tBIPPlVuqTqi9tZ123gtk83N8H2iyxA4ls5Ofklc=
Subject key identifier: 8E:7C:31:06:79:73:46:FC:99:77:BA:FA:27:7E:5A:32:44:91:79:ED
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Certificate issuer: /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial: 019F7E53D422B060E9DE91D2391FCECBFEA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
Manifest number: 19C1
Signing time: Mon 20 Jul 2026 07:00:50 +0000
Manifest this update: Mon 20 Jul 2026 07:00:50 +0000
Manifest next update: Tue 21 Jul 2026 07:00:50 +0000
Files and hashes: 1: 2MSpCLbIJT_dNS85cUQH7P6hQQQ.roa (hash: LqxKJfwKg1vJNoy6niHI6Ay0t/ibwSsUhqanJ+kZvVg=)
2: TZEmLmroEs6IRm7BIRkKTFCJTnA.roa (hash: QhC3msm1fXEe5FbZInDyO6caWrevlSV8+0GhYVm+mSE=)
3: XKyWf4Y6NjYLpXjJG8NNu1YgV8I.roa (hash: Wg/rYioLK0eT7zXUczkOHExRo3EIegYLBIdXxr8Hp88=)
4: t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl (hash: uTFTtP/yIIkHSWR7zRkoGqUfDV8GUESn7wvhFekE+rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 07:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7e:53:d4:22:b0:60:e9:de:91:d2:39:1f:ce:cb:fe:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Validity
Not Before: Jul 20 07:00:50 2026 GMT
Not After : Jul 21 07:00:50 2026 GMT
Subject: CN=8e7c3106797346fc9977bafa277e5a32449179ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e7:7d:b9:ba:52:32:bb:e1:bd:39:78:9f:6e:
1c:60:72:dd:cf:e0:12:36:3c:0f:1a:37:c2:19:32:
59:f3:1f:d1:86:d2:61:8f:c9:ce:d2:e5:fe:e3:3b:
9c:98:78:3d:1d:d1:d9:cd:39:00:89:f2:68:f8:96:
07:27:cc:db:2f:87:43:2a:49:d3:3c:e5:21:b0:3a:
40:a5:da:d8:89:30:f8:2f:51:31:18:c8:59:04:fb:
b1:d2:96:b7:2a:a7:cc:29:95:8f:f7:6e:cc:2e:81:
f2:4f:b3:c8:88:b9:18:b3:3c:c7:08:b3:56:46:98:
99:3c:1f:e8:78:5d:cc:3c:31:5d:57:1f:5c:3c:67:
bd:1b:0f:66:96:b1:7b:80:da:ab:ae:36:9a:fa:fb:
5f:1b:b3:79:3d:25:4c:d3:2a:88:1e:6d:60:8d:6c:
de:04:bd:fc:97:75:9b:f1:0a:41:1c:c2:be:c8:da:
4c:e5:b2:bd:2c:15:ad:62:95:dd:91:72:9c:d2:72:
c0:eb:b8:1a:13:e3:4c:c7:fd:b7:a7:72:64:a6:00:
c0:fc:39:b5:ac:70:6e:76:82:d6:b3:e3:e7:9b:83:
da:1e:6d:d8:93:74:8b:4b:c3:12:4c:9e:d1:d6:30:
83:ea:8a:93:1d:56:50:3d:c2:a4:cb:d1:65:f7:7c:
90:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:7C:31:06:79:73:46:FC:99:77:BA:FA:27:7E:5A:32:44:91:79:ED
X509v3 Authority Key Identifier:
keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:4f:0f:b8:9b:13:1f:3c:55:db:f6:2f:f4:f7:e2:9d:06:af:
57:f4:e5:62:06:5b:8e:32:92:c8:4b:f3:48:86:a6:9a:60:04:
94:ed:ba:94:7a:2e:a0:7c:f1:14:e9:55:91:91:c6:26:5b:ea:
1c:a9:93:2d:13:68:b0:0d:ac:a5:1d:d5:4d:a3:84:00:4c:a3:
44:90:de:a9:ff:84:45:7a:5e:21:22:eb:9e:27:af:42:09:c1:
5b:03:f8:61:a5:05:92:84:86:6b:7e:f8:59:69:b2:a5:82:4b:
e4:3c:1e:b3:b6:1d:d0:d8:b1:36:a7:91:45:1c:29:7b:79:32:
9b:7c:73:30:86:52:15:45:94:f7:64:e3:24:8d:ee:9e:87:25:
bb:e9:1b:87:20:2b:02:e1:8e:e4:b1:5e:6e:05:11:4e:d0:1e:
db:36:b1:a7:48:a2:47:c6:45:a7:f7:ca:fc:76:e1:ca:1c:e9:
12:52:79:08:bf:ee:07:81:26:54:e2:28:b3:26:77:ca:ad:44:
c6:b6:25:e6:71:0b:3b:04:32:9c:3b:4c:b1:ac:99:f4:08:15:
55:47:ad:8f:b9:9c:92:cf:e3:d2:1b:b1:07:65:68:ab:6d:11:
a3:1f:23:8b:63:05:26:13:e7:a8:6b:08:02:e2:be:54:2f:af:
9b:19:8c:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ9+U9QisGDp3pHSOR/Oy/6lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3NWEwNTY2ZDBiNjNhMWY4NjJkODM0NThlNGYyZWE2ZmQ4
ZjdkMjEwHhcNMjYwNzIwMDcwMDUwWhcNMjYwNzIxMDcwMDUwWjAzMTEwLwYDVQQD
Eyg4ZTdjMzEwNjc5NzM0NmZjOTk3N2JhZmEyNzdlNWEzMjQ0OTE3OWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+d9ubpSMrvhvTl4n24cYHLdz+AS
NjwPGjfCGTJZ8x/RhtJhj8nO0uX+4zucmHg9HdHZzTkAifJo+JYHJ8zbL4dDKknT
POUhsDpApdrYiTD4L1ExGMhZBPux0pa3KqfMKZWP927MLoHyT7PIiLkYszzHCLNW
RpiZPB/oeF3MPDFdVx9cPGe9Gw9mlrF7gNqrrjaa+vtfG7N5PSVM0yqIHm1gjWze
BL38l3Wb8QpBHMK+yNpM5bK9LBWtYpXdkXKc0nLA67gaE+NMx/23p3JkpgDA/Dm1
rHBudoLWs+Pnm4PaHm3Yk3SLS8MSTJ7R1jCD6oqTHVZQPcKky9Fl93yQswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI58MQZ5c0b8mXe6+id+WjJEkXntMB8GA1UdIwQY
MBaAFLdaBWbQtjofhi2DRY5PLqb9j30hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDFvRlp0QzJPaC1HTFlORmprOHVwdjJQZlNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8xMDM1NzAtMWNmNi00MmFjLTgxZDQt
ODNmNjAxYzNmYjU5LzEvdDFvRlp0QzJPaC1HTFlORmprOHVwdjJQZlNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi8xMDM1NzAtMWNmNi00MmFjLTgxZDQtODNmNjAxYzNmYjU5
LzEvdDFvRlp0QzJPaC1HTFlORmprOHVwdjJQZlNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ08PuJsT
HzxV2/Yv9PfinQavV/TlYgZbjjKSyEvzSIammmAElO26lHouoHzxFOlVkZHGJlvq
HKmTLRNosA2spR3VTaOEAEyjRJDeqf+ERXpeISLrnievQgnBWwP4YaUFkoSGa374
WWmypYJL5Dwes7Yd0NixNqeRRRwpe3kym3xzMIZSFUWU92TjJI3unoclu+kbhyAr
AuGO5LFebgURTtAe2zaxp0iiR8ZFp/fK/HbhyhzpElJ5CL/uB4EmVOIosyZ3yq1E
xrYl5nELOwQynDtMsayZ9AgVVUetj7mcks/j0huxB2Voq20Rox8ji2MFJhPnqGsI
AuK+VC+vmxmMCg==
-----END CERTIFICATE-----
Generated at Mon Jul 20 14:01:12 2026 by rpki-client