Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
File: t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft (raw, json)
Hash identifier: 603PqG8t8rYT/A68CgI/ZaqSmc8BqmMeBc4Az8vn4+k=
Subject key identifier: A8:D9:74:C3:ED:0A:2E:AA:E6:AE:D1:A5:56:5C:BD:D7:5F:50:B5:24
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Certificate issuer: /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial: 01A0FDFDCD7B3A8B9B073C4E8D8F78B2AA28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
Manifest number: 1A89
Signing time: Fri 02 Oct 2026 19:01:03 +0000
Manifest this update: Fri 02 Oct 2026 19:01:03 +0000
Manifest next update: Sat 03 Oct 2026 19:01:03 +0000
Files and hashes: 1: PRNpmNoXJBIoF9gh578wEhtMpdQ.roa (hash: g9ylBrvDhSOD9y5ykNiZEjQPUeqbZ/uKUmYrg55Kn+I=)
2: iE0cS-gjGQ2wH2CEFbUXZzlClEs.roa (hash: zt5rLB2IKmjF4fOUcKb7lO1SdJgaIMds/uhpaf0hUX0=)
3: t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl (hash: l6HspGPgG3EPWkusdqjfrROzCrdGvuLIBUCL5+MNxbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 17:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fd:fd:cd:7b:3a:8b:9b:07:3c:4e:8d:8f:78:b2:aa:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Validity
Not Before: Oct 2 19:01:03 2026 GMT
Not After : Oct 3 19:01:03 2026 GMT
Subject: CN=a8d974c3ed0a2eaae6aed1a5565cbdd75f50b524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:40:99:2b:2e:ed:94:9f:80:f1:c8:43:61:14:
ba:1a:a3:15:37:46:ed:22:e7:5a:fb:1e:90:50:e2:
30:90:ce:38:86:42:de:71:57:8d:09:48:b8:a7:8f:
df:0d:74:09:2c:a1:87:4b:27:c3:ed:4d:06:f2:9d:
13:65:46:68:96:6d:dd:e1:af:5a:f3:36:72:19:f4:
dd:19:38:d7:7e:96:5b:40:ca:c5:cd:5f:32:21:f1:
62:60:43:66:10:9d:54:d8:f6:09:a1:b2:0d:f5:c5:
95:b3:72:15:7e:2e:d2:c1:09:c2:34:0e:04:78:4c:
c4:2a:e5:57:92:14:63:73:d4:0b:9d:be:7c:35:ab:
4f:5d:8b:6d:6b:89:14:76:db:17:bc:2a:ef:7a:04:
2b:90:21:78:fb:7b:27:21:0b:13:07:be:08:16:de:
de:dc:4e:cd:a2:93:4a:b4:6c:68:4e:78:b5:2e:9b:
74:1f:da:14:a1:8b:e9:af:84:2f:b7:a9:e8:67:2e:
1b:61:5c:4e:0f:88:10:d4:17:fc:66:48:ae:9c:d5:
83:4a:52:95:7d:13:85:46:1f:ed:ea:84:e2:10:43:
00:16:a5:f6:ca:d7:02:40:77:39:57:6a:50:51:c6:
f1:b6:e8:55:5e:1b:b0:d0:bb:a1:7f:89:00:cb:56:
3a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D9:74:C3:ED:0A:2E:AA:E6:AE:D1:A5:56:5C:BD:D7:5F:50:B5:24
X509v3 Authority Key Identifier:
keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:b8:50:e9:42:c7:4a:4f:b3:73:a5:f9:38:39:bb:29:02:10:
cc:ec:51:ea:8f:e5:f5:a6:52:34:ac:b6:db:6b:69:42:08:4d:
a4:56:63:78:12:39:d2:55:86:1e:f4:56:dc:b3:c8:34:3c:61:
8b:5b:2c:f6:c1:4e:60:85:2f:89:5c:a3:af:f9:83:c2:35:36:
d1:12:7d:30:0a:4a:49:33:06:9e:d2:c6:d3:4e:25:7d:7a:0b:
03:60:bf:65:3a:5e:18:6f:6f:d1:f2:fe:25:57:29:ef:29:51:
7f:f1:f9:65:18:e6:d6:48:e8:a6:33:03:11:bd:f8:56:ec:96:
9f:6e:0a:69:2f:a2:a5:d4:8c:2a:87:13:02:48:90:2d:c3:61:
2c:5b:3f:32:5c:db:76:17:1b:63:ba:d2:44:43:3b:d9:eb:c4:
2d:f6:c4:83:ea:4d:9f:66:3f:28:82:92:01:8a:fa:f8:f3:f3:
ee:9f:0c:02:a2:d0:1a:f6:46:8a:8a:9d:8a:25:44:c3:f5:3f:
60:31:b6:c5:0c:87:7d:7d:01:f5:5a:43:50:b8:99:99:f2:bc:
fe:e6:6d:fc:0e:35:63:4b:74:3c:30:ee:ae:ef:7b:89:58:13:
49:a9:f3:ee:6e:d3:85:4c:09:43:d9:95:53:01:32:f6:be:ad:
ae:6c:f3:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 06:19:17 2026 by rpki-client