Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
File: t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft (raw, json)
Hash identifier: v4qnXriGWAaEW2qsvyBrwjMmsg92m33Rn+iNplBqJ2E=
Subject key identifier: C8:50:57:4C:29:22:56:D1:D3:BE:AA:AE:BE:49:E8:39:74:BF:60:C8
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Certificate issuer: /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial: 01A1949F68C65389B70347CF3D6549781F80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
Manifest number: 1AD7
Signing time: Sun 01 Nov 2026 01:00:37 +0000
Manifest this update: Sun 01 Nov 2026 01:00:37 +0000
Manifest next update: Mon 02 Nov 2026 01:00:37 +0000
Files and hashes: 1: PRNpmNoXJBIoF9gh578wEhtMpdQ.roa (hash: g9ylBrvDhSOD9y5ykNiZEjQPUeqbZ/uKUmYrg55Kn+I=)
2: iE0cS-gjGQ2wH2CEFbUXZzlClEs.roa (hash: zt5rLB2IKmjF4fOUcKb7lO1SdJgaIMds/uhpaf0hUX0=)
3: t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl (hash: hR7xK1v46c1q9tKnGM2GqVGSkzXl4YeYpSDlqmwzzR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:94:9f:68:c6:53:89:b7:03:47:cf:3d:65:49:78:1f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Validity
Not Before: Nov 1 01:00:37 2026 GMT
Not After : Nov 2 01:00:37 2026 GMT
Subject: CN=c850574c292256d1d3beaaaebe49e83974bf60c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c2:7b:a9:01:bf:1d:6a:85:cd:cd:ba:72:c9:
dc:7f:a4:ae:c3:61:7d:1b:42:cb:1c:03:2e:f3:72:
31:a4:56:14:58:8e:7c:af:fa:e3:1b:fd:66:5d:23:
98:4f:15:11:4d:a4:7e:50:9a:88:ee:ad:8f:70:36:
32:50:6e:de:50:9c:bc:98:60:ba:f9:9b:dc:27:3c:
cc:ea:1b:f8:6d:ef:40:15:e2:3a:4d:56:eb:f1:de:
af:b6:9e:e8:7f:1d:81:a5:89:bc:fa:aa:8e:e8:9a:
ae:32:fe:af:a7:b4:4b:4d:4f:db:7d:67:1e:b1:0f:
3a:39:f2:a6:f4:df:ec:8d:a8:56:dc:db:84:88:f4:
70:ad:a7:87:3c:29:66:2f:29:4f:ca:83:c5:f5:c2:
64:16:09:6e:99:ed:d7:32:fb:3c:76:5b:4a:e4:10:
ad:bf:c0:d0:9c:c9:b8:04:e7:68:04:1a:cf:15:91:
cf:cc:97:f3:1d:64:4f:72:5c:02:12:be:0d:72:4a:
a0:f7:6d:30:b5:3d:80:7f:7a:06:7d:0a:94:17:3e:
82:0f:13:89:43:3c:69:52:cf:49:50:9e:32:98:59:
77:66:6d:5a:0e:09:fc:6b:15:d3:4e:1f:d8:28:58:
8e:95:31:18:eb:de:0b:98:86:9e:81:6c:1c:1a:a6:
4b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:50:57:4C:29:22:56:D1:D3:BE:AA:AE:BE:49:E8:39:74:BF:60:C8
X509v3 Authority Key Identifier:
keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:4d:c9:6c:1d:bf:82:cf:83:11:69:d9:6f:83:36:d0:fb:7c:
7b:9b:87:e0:a0:46:29:07:a4:7f:1d:e4:cb:9b:bb:25:e7:16:
35:ed:de:04:cd:25:eb:c4:a8:eb:60:b5:54:05:cf:91:73:55:
4d:8e:c2:3c:b4:ce:33:96:84:fd:63:ff:10:f8:92:d2:0d:98:
3d:05:58:e8:a8:2a:17:20:6e:34:13:71:13:13:3c:a9:dd:1b:
2c:e7:a2:9d:f0:3d:ce:c9:5a:76:7c:f0:50:2b:74:30:51:c6:
fe:c2:2f:25:ab:80:7d:47:05:fa:2c:3a:33:9b:21:7e:a9:eb:
ad:70:f7:85:37:fb:70:ea:ee:7b:de:24:c3:b3:05:21:fd:63:
c8:40:03:c0:23:02:08:6d:4f:ff:91:8c:b8:e0:be:56:91:9a:
76:cd:be:e9:d8:39:92:97:20:0e:70:65:2d:78:b8:21:7c:bb:
80:db:9e:a7:fe:65:65:f7:2e:62:71:77:c7:18:8a:f7:f8:46:
23:bf:b3:c4:f3:88:9f:b8:25:06:09:1f:11:5d:7a:4d:d1:8c:
0d:2a:92:e2:3e:27:59:a6:cb:2e:15:b3:2a:93:83:a8:a3:48:
97:67:9e:91:7e:59:ae:28:db:49:5f:ad:d8:09:8c:66:cd:94:
d2:cf:7b:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGUn2jGU4m3A0fPPWVJeB+AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3NWEwNTY2ZDBiNjNhMWY4NjJkODM0NThlNGYyZWE2ZmQ4
ZjdkMjEwHhcNMjYxMTAxMDEwMDM3WhcNMjYxMTAyMDEwMDM3WjAzMTEwLwYDVQQD
EyhjODUwNTc0YzI5MjI1NmQxZDNiZWFhYWViZTQ5ZTgzOTc0YmY2MGM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMJ7qQG/HWqFzc26csncf6Suw2F9
G0LLHAMu83IxpFYUWI58r/rjG/1mXSOYTxURTaR+UJqI7q2PcDYyUG7eUJy8mGC6
+ZvcJzzM6hv4be9AFeI6TVbr8d6vtp7ofx2BpYm8+qqO6JquMv6vp7RLTU/bfWce
sQ86OfKm9N/sjahW3NuEiPRwraeHPClmLylPyoPF9cJkFglume3XMvs8dltK5BCt
v8DQnMm4BOdoBBrPFZHPzJfzHWRPclwCEr4Nckqg920wtT2Af3oGfQqUFz6CDxOJ
QzxpUs9JUJ4ymFl3Zm1aDgn8axXTTh/YKFiOlTEY694LmIaegWwcGqZLbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMhQV0wpIlbR076qrr5J6Dl0v2DIMB8GA1UdIwQY
MBaAFLdaBWbQtjofhi2DRY5PLqb9j30hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDFvRlp0QzJPaC1HTFlORmprOHVwdjJQZlNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8xMDM1NzAtMWNmNi00MmFjLTgxZDQt
ODNmNjAxYzNmYjU5LzEvdDFvRlp0QzJPaC1HTFlORmprOHVwdjJQZlNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi8xMDM1NzAtMWNmNi00MmFjLTgxZDQtODNmNjAxYzNmYjU5
LzEvdDFvRlp0QzJPaC1HTFlORmprOHVwdjJQZlNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKU3JbB2/
gs+DEWnZb4M20Pt8e5uH4KBGKQekfx3ky5u7JecWNe3eBM0l68So62C1VAXPkXNV
TY7CPLTOM5aE/WP/EPiS0g2YPQVY6KgqFyBuNBNxExM8qd0bLOeinfA9zsladnzw
UCt0MFHG/sIvJauAfUcF+iw6M5shfqnrrXD3hTf7cOrue94kw7MFIf1jyEADwCMC
CG1P/5GMuOC+VpGads2+6dg5kpcgDnBlLXi4IXy7gNuep/5lZfcuYnF3xxiK9/hG
I7+zxPOIn7glBgkfEV16TdGMDSqS4j4nWabLLhWzKpODqKNIl2eekX5ZrijbSV+t
2AmMZs2U0s97Nw==
-----END CERTIFICATE-----
Generated at Sun Nov 1 03:25:32 2026 by rpki-client