Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
File: t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft (raw, json)
Hash identifier: XyH1fufwB3wkpxYl7p18ZAs6JtmTlcVNtvOJmQIvLMo=
Subject key identifier: 2B:4D:D0:D3:79:D6:CB:D1:4B:22:5A:E8:8D:15:E7:39:FD:0D:BD:C0
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Certificate issuer: /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial: 01A0C9D89C97341F64C0CF8A173593231D2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
Manifest number: 1A6E
Signing time: Tue 22 Sep 2026 16:00:11 +0000
Manifest this update: Tue 22 Sep 2026 16:00:11 +0000
Manifest next update: Wed 23 Sep 2026 16:00:11 +0000
Files and hashes: 1: PRNpmNoXJBIoF9gh578wEhtMpdQ.roa (hash: g9ylBrvDhSOD9y5ykNiZEjQPUeqbZ/uKUmYrg55Kn+I=)
2: iE0cS-gjGQ2wH2CEFbUXZzlClEs.roa (hash: zt5rLB2IKmjF4fOUcKb7lO1SdJgaIMds/uhpaf0hUX0=)
3: t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl (hash: ZIX1UFcCxeWSRtUaKtynjYhoTg40xaDNlH0qlT8AhE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:d8:9c:97:34:1f:64:c0:cf:8a:17:35:93:23:1d:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Validity
Not Before: Sep 22 16:00:11 2026 GMT
Not After : Sep 23 16:00:11 2026 GMT
Subject: CN=2b4dd0d379d6cbd14b225ae88d15e739fd0dbdc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1f:5a:70:35:88:cd:d4:a9:dc:bc:b2:2e:4e:
c4:9c:6a:b1:25:31:39:fb:82:f4:74:f5:f2:3d:7b:
5d:33:a4:ec:25:57:95:cd:d2:9a:49:2f:5a:cd:10:
63:e5:c5:c4:78:3b:51:1c:b1:7b:cc:88:57:a4:19:
f5:34:ef:23:f0:24:35:01:5c:f6:1d:9c:1d:57:b0:
ec:9f:d4:5f:29:c6:ec:4c:a9:64:b4:39:4f:66:51:
8b:84:be:93:8a:bf:b4:af:7d:59:af:e5:fb:5b:fc:
38:ed:7e:4e:26:0b:ce:8d:bc:cf:f8:0b:51:6e:cb:
38:a5:db:4a:09:56:50:5d:e1:ea:75:b8:3a:3e:78:
5c:b4:e8:c1:69:de:ce:96:c2:b7:97:56:c8:c4:a7:
ec:a0:36:8e:13:8a:82:7e:0d:8a:a6:cb:ca:d2:6d:
3c:18:cb:ea:4d:bd:01:a3:c3:ad:43:ca:dd:6f:63:
3f:63:27:e2:30:5e:9f:0a:ff:24:9c:91:60:01:13:
2a:5a:fa:26:23:ab:f4:c4:31:61:70:1f:65:0c:b4:
c9:e8:3d:65:64:29:14:55:0e:4d:9c:0f:8e:2d:98:
01:52:b8:4b:37:b8:66:12:6d:4b:57:9c:d1:da:3b:
91:c7:47:99:ce:b7:ff:d9:a8:2e:63:df:a9:40:b5:
3c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:4D:D0:D3:79:D6:CB:D1:4B:22:5A:E8:8D:15:E7:39:FD:0D:BD:C0
X509v3 Authority Key Identifier:
keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:fd:92:c7:af:3c:d5:3c:e5:06:26:d1:05:e3:99:fe:d1:19:
80:ce:a4:0a:44:8e:21:b0:a8:35:7f:50:5e:e1:17:8e:42:be:
6b:6e:73:33:0e:99:af:92:66:75:a5:1f:0e:f9:dd:6c:21:44:
c6:f1:c4:d8:a9:e1:ae:1d:59:01:70:d0:d2:7a:43:2e:65:2d:
e6:12:41:27:28:17:59:e7:5c:95:cd:ba:17:48:e1:6f:b0:3a:
fc:1c:21:64:dd:a9:95:81:0f:78:69:90:ff:fc:75:de:51:e0:
bf:47:31:fe:1f:af:90:13:74:e9:8f:0f:d2:7e:ef:b8:27:c7:
cb:23:9b:54:08:ad:25:2f:ec:25:a8:ec:3d:c9:9b:f3:9b:9a:
4c:72:18:fe:59:3e:c8:0e:80:15:ab:3d:d8:74:98:be:1f:97:
d0:ba:f7:35:4b:1a:f5:65:9d:e2:58:22:c8:38:82:40:8a:01:
85:0e:08:44:e4:c9:22:c6:61:fc:7e:d9:d9:8c:e2:33:b0:45:
50:25:61:50:1d:d4:b5:9e:74:71:25:d6:af:ac:8c:af:a1:dd:
80:e0:14:dd:ca:3c:49:fb:62:39:34:a9:4c:18:61:35:b6:50:
80:7e:f0:da:85:98:18:27:60:4d:d7:40:ff:8e:f8:65:48:70:
7a:bb:3d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:43:06 2026 by rpki-client