Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
File: t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft (raw, json)
Hash identifier: ZNQ9wLKcz66F/XxiLo2FYu+7UCQL81uRpVl21w81I4I=
Subject key identifier: 0F:66:CC:A3:07:C2:67:7B:34:22:F3:E0:94:D6:72:BF:36:34:43:45
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Certificate issuer: /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial: 01A07328E158AC87A6C136C0C4DE733459E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
Manifest number: 1A40
Signing time: Sat 05 Sep 2026 20:00:54 +0000
Manifest this update: Sat 05 Sep 2026 20:00:54 +0000
Manifest next update: Sun 06 Sep 2026 20:00:54 +0000
Files and hashes: 1: 3PZtOtEP32pxmagHDWpHuXtCCRc.roa (hash: bpJEOxuRCU5ZgS5FbAAwutvMDXKwEbHigoSaJaf1e2M=)
2: TZEmLmroEs6IRm7BIRkKTFCJTnA.roa (hash: QhC3msm1fXEe5FbZInDyO6caWrevlSV8+0GhYVm+mSE=)
3: iE0cS-gjGQ2wH2CEFbUXZzlClEs.roa (hash: zt5rLB2IKmjF4fOUcKb7lO1SdJgaIMds/uhpaf0hUX0=)
4: t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl (hash: mo3Nx8pyk1Gtf/87BumzqroB10a/efPuAWlMRnUvW+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 19:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:73:28:e1:58:ac:87:a6:c1:36:c0:c4:de:73:34:59:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Validity
Not Before: Sep 5 20:00:54 2026 GMT
Not After : Sep 6 20:00:54 2026 GMT
Subject: CN=0f66cca307c2677b3422f3e094d672bf36344345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ab:8c:4e:c2:ca:d0:a3:5b:9b:e7:7a:f1:74:
88:0a:2c:c4:ad:da:00:01:20:53:a5:0e:65:41:b0:
ae:0c:ee:92:db:11:18:0e:a5:fa:08:ed:00:ae:fc:
22:b8:3f:cf:f2:d9:23:59:9b:32:9c:05:02:5d:e0:
6c:e1:c6:a4:6a:3c:d5:ce:ac:1a:1a:87:1a:5a:2b:
82:a9:2d:c2:30:04:d2:72:7b:7e:f5:1f:ee:bb:74:
20:ec:10:df:67:ef:fc:9d:6e:c4:25:ae:db:7a:de:
e8:58:dd:0b:c2:db:a0:bd:ae:92:fc:c4:8b:8c:8b:
f0:85:1e:19:eb:7d:91:0a:ed:ba:db:f0:36:94:cc:
50:2d:90:33:30:89:86:86:cb:52:53:d1:f1:08:2c:
66:c3:97:66:4f:68:d4:69:46:ab:79:3d:cf:8c:d0:
a8:d6:bb:af:3f:d7:34:d7:59:ba:3b:79:ae:27:5e:
6c:22:06:64:ef:cc:50:75:b5:24:1a:e1:80:37:e2:
f1:7f:e9:30:d2:55:cb:27:40:c1:bf:6e:ef:76:0c:
9a:9a:48:8e:44:1f:6d:b0:af:4a:b1:11:b1:cf:7c:
c7:ff:bf:f2:d6:95:fd:27:ea:f8:95:09:3a:86:a0:
45:02:2e:7d:5b:c4:66:eb:31:c9:8b:bf:c9:8b:d7:
3d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:66:CC:A3:07:C2:67:7B:34:22:F3:E0:94:D6:72:BF:36:34:43:45
X509v3 Authority Key Identifier:
keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:51:97:6e:a4:d1:4f:93:4f:7b:9b:0b:04:04:c1:2b:75:43:
1d:58:f2:85:63:1a:b2:c1:50:9b:be:60:5d:c5:91:59:8c:0a:
32:fb:fd:7a:be:2f:5d:9f:f3:e5:4b:09:3a:b4:27:3a:0d:af:
50:39:37:15:6b:93:3a:3e:1a:3c:f1:63:a8:e2:8c:52:63:af:
fb:ab:6b:28:0e:20:29:fe:c2:98:84:9b:4d:6e:8d:13:b3:89:
c5:70:ec:7d:b8:e0:06:19:54:91:5b:de:43:07:39:3e:b1:de:
64:85:47:e2:b7:ae:d4:6e:4b:54:96:59:ed:a2:de:cb:7e:af:
88:76:18:9c:55:76:77:18:ca:f9:c9:d6:54:b1:37:d8:57:44:
bd:9d:16:29:8d:df:e5:f9:40:32:a5:3a:4b:0f:77:8c:06:ad:
b8:89:f8:05:7c:ba:6f:de:f3:8a:91:cf:86:4b:c2:62:d7:88:
49:a9:b0:9d:9b:b9:6b:ef:7c:d2:65:2c:bd:c7:77:f1:40:a8:
c0:cc:1e:a7:d7:13:73:75:9a:e8:6c:28:64:26:f5:f7:b9:de:
81:7e:24:e3:ad:df:ff:84:ae:89:cf:7e:54:9e:3d:e3:5c:bb:
8c:65:e0:14:27:9f:ab:a8:66:db:e2:4f:9e:ad:37:79:a7:28:
65:69:06:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBzKOFYrIemwTbAxN5zNFnnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3NWEwNTY2ZDBiNjNhMWY4NjJkODM0NThlNGYyZWE2ZmQ4
ZjdkMjEwHhcNMjYwOTA1MjAwMDU0WhcNMjYwOTA2MjAwMDU0WjAzMTEwLwYDVQQD
EygwZjY2Y2NhMzA3YzI2NzdiMzQyMmYzZTA5NGQ2NzJiZjM2MzQ0MzQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArquMTsLK0KNbm+d68XSICizErdoA
ASBTpQ5lQbCuDO6S2xEYDqX6CO0ArvwiuD/P8tkjWZsynAUCXeBs4cakajzVzqwa
GocaWiuCqS3CMATScnt+9R/uu3Qg7BDfZ+/8nW7EJa7bet7oWN0Lwtugva6S/MSL
jIvwhR4Z632RCu262/A2lMxQLZAzMImGhstSU9HxCCxmw5dmT2jUaUareT3PjNCo
1ruvP9c011m6O3muJ15sIgZk78xQdbUkGuGAN+Lxf+kw0lXLJ0DBv27vdgyamkiO
RB9tsK9KsRGxz3zH/7/y1pX9J+r4lQk6hqBFAi59W8Rm6zHJi7/Ji9c9twIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA9mzKMHwmd7NCLz4JTWcr82NENFMB8GA1UdIwQY
MBaAFLdaBWbQtjofhi2DRY5PLqb9j30hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDFvRlp0QzJPaC1HTFlORmprOHVwdjJQZlNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8xMDM1NzAtMWNmNi00MmFjLTgxZDQt
ODNmNjAxYzNmYjU5LzEvdDFvRlp0QzJPaC1HTFlORmprOHVwdjJQZlNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi8xMDM1NzAtMWNmNi00MmFjLTgxZDQtODNmNjAxYzNmYjU5
LzEvdDFvRlp0QzJPaC1HTFlORmprOHVwdjJQZlNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI1GXbqTR
T5NPe5sLBATBK3VDHVjyhWMassFQm75gXcWRWYwKMvv9er4vXZ/z5UsJOrQnOg2v
UDk3FWuTOj4aPPFjqOKMUmOv+6trKA4gKf7CmISbTW6NE7OJxXDsfbjgBhlUkVve
Qwc5PrHeZIVH4reu1G5LVJZZ7aLey36viHYYnFV2dxjK+cnWVLE32FdEvZ0WKY3f
5flAMqU6Sw93jAatuIn4BXy6b97zipHPhkvCYteISamwnZu5a+980mUsvcd38UCo
wMwep9cTc3Wa6GwoZCb197negX4k463f/4Suic9+VJ4941y7jGXgFCefq6hm2+JP
nq03eacoZWkGaw==
-----END CERTIFICATE-----
Generated at Sun Sep 6 02:07:43 2026 by rpki-client