Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
File: t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft (raw, json)
Hash identifier: G7IUBdwWw/kOxnrbS9krLDSJkuj/IrlFdMudSdhZ6Ac=
Subject key identifier: 11:1A:49:A5:99:2A:0A:20:52:B8:33:CB:C2:94:6D:84:AA:91:82:90
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Certificate issuer: /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial: 01A0D1921B4D2FBD30883E248CAF9F6B7B48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
Manifest number: 1A72
Signing time: Thu 24 Sep 2026 04:00:08 +0000
Manifest this update: Thu 24 Sep 2026 04:00:08 +0000
Manifest next update: Fri 25 Sep 2026 04:00:08 +0000
Files and hashes: 1: PRNpmNoXJBIoF9gh578wEhtMpdQ.roa (hash: g9ylBrvDhSOD9y5ykNiZEjQPUeqbZ/uKUmYrg55Kn+I=)
2: iE0cS-gjGQ2wH2CEFbUXZzlClEs.roa (hash: zt5rLB2IKmjF4fOUcKb7lO1SdJgaIMds/uhpaf0hUX0=)
3: t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl (hash: qhTtvNXzL8cNYqa/5/XPROfbW1VINPtIhh9wlmDG1BQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:92:1b:4d:2f:bd:30:88:3e:24:8c:af:9f:6b:7b:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Validity
Not Before: Sep 24 04:00:08 2026 GMT
Not After : Sep 25 04:00:08 2026 GMT
Subject: CN=111a49a5992a0a2052b833cbc2946d84aa918290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6c:fa:cd:38:1c:cb:70:1e:5f:10:69:f9:18:
44:26:41:43:b8:50:99:a0:92:2a:bb:62:4e:d2:31:
6d:d3:5f:be:6f:5c:bd:a0:9b:35:12:fa:93:33:9c:
4f:e7:be:56:d1:fa:90:ae:fe:d9:eb:b8:a6:89:16:
7c:7f:78:05:fc:8e:c3:45:35:eb:15:28:0c:7a:00:
61:4a:64:ed:c9:52:47:d4:e5:1a:3b:80:36:a2:53:
85:ed:85:77:f6:6b:b4:f4:24:e3:be:97:19:19:a1:
7d:46:8b:4a:dc:db:70:2e:94:0c:81:b0:b4:bd:1e:
4d:9d:01:75:26:64:f6:e9:e7:93:5c:27:e4:8a:90:
04:2d:50:61:dc:ec:de:21:fb:b7:d8:46:86:2d:3e:
ba:49:2d:24:bb:8b:16:86:6b:e6:f5:58:25:c9:2c:
de:56:72:8e:48:bc:b6:97:e0:3b:2f:dc:c4:df:00:
61:0c:bc:c2:1d:98:43:4a:8d:a1:88:84:5e:b0:6c:
d9:26:75:20:19:88:8b:63:68:53:01:c6:60:68:6f:
de:b9:5f:cb:8b:f7:2d:62:1f:89:d2:8a:85:57:c4:
6b:01:9b:cb:9e:9b:16:6b:31:ab:8a:76:f4:2d:c6:
3b:c5:d0:bd:16:4f:2e:2b:2e:3e:af:3d:df:a2:2d:
2e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:1A:49:A5:99:2A:0A:20:52:B8:33:CB:C2:94:6D:84:AA:91:82:90
X509v3 Authority Key Identifier:
keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:a0:1d:b2:38:a7:e1:96:5a:1f:1a:ba:ad:06:92:7c:47:4b:
11:12:d4:d8:08:d5:a0:ef:a3:ea:98:6d:d4:12:9d:8c:e0:84:
07:44:a9:42:19:e2:70:50:f2:b1:8e:63:b3:57:5f:b4:29:fd:
2a:7f:c9:37:35:51:8b:86:74:ea:c9:f5:d6:2d:15:34:e4:ba:
ae:04:db:fd:df:fd:39:e0:1f:24:6f:83:b1:77:9e:c2:b4:97:
7d:d1:26:72:2e:ac:90:95:86:96:2e:d8:f4:cf:81:9d:30:33:
87:e1:a7:fc:d6:c6:0f:07:11:63:1a:ad:af:a3:30:e2:6e:01:
14:60:65:c6:38:59:b0:5f:5f:9c:89:c1:fd:9f:dd:e8:0f:51:
7f:c4:ec:1b:b6:8b:62:8f:b5:9d:63:25:54:3d:52:de:05:bd:
e7:62:76:2b:eb:9d:9f:3e:ee:d6:df:ce:8c:c3:62:bc:54:61:
e0:24:0c:07:6a:87:de:30:33:dc:d9:3c:86:ef:d6:ab:be:67:
ac:3f:ed:84:86:5d:39:93:34:8a:41:34:49:1f:7c:c9:17:bd:
28:49:da:c7:e7:f0:5a:87:bc:cb:d6:0f:c0:ee:af:b7:a6:c2:
7b:44:bc:0f:40:ee:83:7a:91:6e:a1:01:cd:24:1d:6f:e6:28:
ca:d6:19:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:49:51 2026 by rpki-client