Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
File: t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft (raw, json)
Hash identifier: kQVipgRyQKFtBS5s3XHZangVWs7dWAGoX02/s3dkpLI=
Subject key identifier: 57:97:3D:CF:E6:5A:17:B2:99:FD:CE:92:54:29:6B:85:B1:2D:C2:BD
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Certificate issuer: /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial: 01A103C8FABB2F34500CA929D4F1BFA4A9E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
Manifest number: 1A8C
Signing time: Sat 03 Oct 2026 22:01:05 +0000
Manifest this update: Sat 03 Oct 2026 22:01:05 +0000
Manifest next update: Sun 04 Oct 2026 22:01:05 +0000
Files and hashes: 1: PRNpmNoXJBIoF9gh578wEhtMpdQ.roa (hash: g9ylBrvDhSOD9y5ykNiZEjQPUeqbZ/uKUmYrg55Kn+I=)
2: iE0cS-gjGQ2wH2CEFbUXZzlClEs.roa (hash: zt5rLB2IKmjF4fOUcKb7lO1SdJgaIMds/uhpaf0hUX0=)
3: t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl (hash: Y4AfXNm+cVuUIdpdrHtJ0z3pmBhyimBt4Igjk+KJEaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:03:c8:fa:bb:2f:34:50:0c:a9:29:d4:f1:bf:a4:a9:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Validity
Not Before: Oct 3 22:01:05 2026 GMT
Not After : Oct 4 22:01:05 2026 GMT
Subject: CN=57973dcfe65a17b299fdce9254296b85b12dc2bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:cc:15:1e:4f:b3:08:97:be:eb:14:c8:af:86:
56:54:47:a4:60:3d:98:b5:8b:2c:f6:2b:85:f3:a6:
29:c3:27:a8:82:fd:f5:46:8f:c5:b9:67:fc:ae:bb:
f4:f9:89:f2:7e:50:60:27:f4:65:61:c7:82:03:30:
13:09:f8:53:66:ae:95:b4:b4:58:6c:aa:f5:f1:e4:
fc:25:ce:ef:e6:b1:35:90:6d:c4:38:d0:94:06:d9:
1c:ac:cc:e1:c4:0b:ed:f4:2b:8f:1a:00:e9:94:16:
34:39:2f:f9:1d:03:46:97:b9:b5:0a:95:dc:71:ee:
c0:7a:dd:e4:9e:05:cd:98:1b:6d:97:c6:45:58:f1:
23:f2:a7:78:a4:4a:fe:e0:af:e3:47:56:b8:4d:e8:
e8:96:7d:f8:a4:66:93:f2:c9:3f:39:e3:ea:eb:59:
21:49:36:e1:8a:12:36:b9:e2:c7:13:23:3e:de:89:
5f:a4:1c:2b:81:87:6b:68:fe:a4:99:91:8d:f0:fc:
5f:cf:df:c6:ed:39:2f:a6:5d:9f:56:5e:b1:3a:2f:
fd:a4:90:0c:e9:dc:49:a6:b3:f5:cd:a8:c8:e1:d3:
ef:8a:a3:e7:7c:1c:d5:44:d7:dd:bd:d9:7b:fb:26:
9e:5f:89:61:b3:40:29:8d:48:d7:56:8c:25:1d:27:
30:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:97:3D:CF:E6:5A:17:B2:99:FD:CE:92:54:29:6B:85:B1:2D:C2:BD
X509v3 Authority Key Identifier:
keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:c8:0e:c7:3f:53:ed:d1:e0:fa:f5:b1:7b:f8:60:8f:25:d7:
5a:5d:13:f9:fa:0d:57:76:0f:01:22:74:00:98:0d:f9:dc:58:
2a:f4:4c:7a:9b:67:6e:8b:6e:19:92:92:60:68:38:50:28:d5:
58:9a:a9:4c:73:5e:56:3f:52:33:32:3a:01:86:b9:83:96:c6:
77:ee:8b:97:7d:64:d4:8e:0d:38:fe:a3:cd:f3:7c:1c:9a:a1:
b4:2e:29:14:50:a2:35:f0:4a:c2:ad:10:08:f3:d2:dc:77:1a:
10:21:f9:c0:0f:6e:74:c1:40:3e:be:19:ca:08:b1:59:cd:ec:
81:29:8d:fd:89:78:43:e5:9e:ac:cf:ef:3e:97:65:be:1e:a7:
9b:d5:93:bb:7c:f4:61:02:a7:b2:f1:1d:52:9f:f7:fd:67:43:
9c:6c:be:96:01:f0:cb:ab:38:9c:86:bd:c5:8c:91:4c:09:0e:
d4:ce:f4:67:a4:a9:b5:9e:c5:11:4b:0e:55:7a:25:42:eb:5a:
77:f0:84:5a:cf:a8:cf:c6:12:05:0f:c6:f2:f6:91:02:f5:82:
89:ed:4a:85:89:53:05:53:57:9a:56:4b:e5:38:4d:30:b3:fd:
b9:00:3e:90:21:ad:b2:90:55:9a:64:ba:6c:2b:37:89:90:3e:
30:4d:cd:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 05:36:22 2026 by rpki-client