Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
File: t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft (raw, json)
Hash identifier: e0rteiM65cB2R2oCfpJ06KQ9yTS52Kb50NUUbRq6HRo=
Subject key identifier: A7:42:4F:90:EB:09:4C:21:54:CB:57:A1:9B:12:2A:5F:79:78:A3:B7
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Certificate issuer: /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial: 01A09991498A01173E5DA536A351402DF58D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
Manifest number: 1A55
Signing time: Sun 13 Sep 2026 07:00:30 +0000
Manifest this update: Sun 13 Sep 2026 07:00:30 +0000
Manifest next update: Mon 14 Sep 2026 07:00:30 +0000
Files and hashes: 1: PRNpmNoXJBIoF9gh578wEhtMpdQ.roa (hash: g9ylBrvDhSOD9y5ykNiZEjQPUeqbZ/uKUmYrg55Kn+I=)
2: iE0cS-gjGQ2wH2CEFbUXZzlClEs.roa (hash: zt5rLB2IKmjF4fOUcKb7lO1SdJgaIMds/uhpaf0hUX0=)
3: t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl (hash: aQOZ9ELlS+IQIkabuB9AQrdl3jsgP+M+2fFWtdwRQs4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Sep 2026 03:19:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:99:91:49:8a:01:17:3e:5d:a5:36:a3:51:40:2d:f5:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Validity
Not Before: Sep 13 07:00:30 2026 GMT
Not After : Sep 14 07:00:30 2026 GMT
Subject: CN=a7424f90eb094c2154cb57a19b122a5f7978a3b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5f:35:01:b9:76:e3:ac:b0:f9:30:b3:7d:cc:
ab:f2:54:b1:2a:d7:9d:05:96:83:4f:d9:ac:b5:1a:
58:3f:ef:0b:23:8b:03:bf:51:8e:61:99:fe:14:cc:
ea:e3:15:f4:be:40:62:9c:4d:e2:a9:22:56:4e:57:
bd:32:61:ad:55:83:90:75:cc:83:ee:83:a9:81:f4:
93:de:7d:fc:a1:c2:a0:de:f7:bb:33:58:dc:01:f2:
8b:0e:2d:e7:18:54:7a:d9:13:63:29:1c:cf:6c:dc:
32:4b:72:d6:3e:05:a6:d0:81:0f:61:36:ca:43:2b:
76:13:65:04:a8:02:89:a6:aa:c5:a5:f8:64:a4:f6:
0c:1d:53:8b:43:8c:0e:33:c4:96:9f:39:3b:f4:f7:
ee:d3:56:92:7e:e8:b7:79:13:1e:be:05:a9:11:90:
e0:59:49:a2:0d:84:01:d0:2f:39:3f:db:0d:e8:b0:
63:4a:32:8f:c6:b8:1c:04:b9:59:d7:d3:05:26:a2:
45:0b:58:e0:ad:6a:d4:03:80:96:2e:46:7b:de:30:
b8:a4:47:4a:9b:1a:25:5a:5e:9e:60:82:6c:4d:39:
55:e4:fe:62:16:3e:05:6c:7c:05:64:74:b4:00:17:
41:21:19:59:1b:25:8e:45:52:c0:85:a7:66:97:89:
75:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:42:4F:90:EB:09:4C:21:54:CB:57:A1:9B:12:2A:5F:79:78:A3:B7
X509v3 Authority Key Identifier:
keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:7f:a9:72:02:3d:47:3f:77:08:cf:dc:7a:9f:c7:41:c0:c1:
76:ed:91:74:80:72:ab:40:fc:0e:f3:d4:ce:7e:5a:da:7b:19:
95:23:38:39:6c:a8:9d:8e:d1:5c:73:de:bf:a0:e1:c0:99:49:
92:f2:cf:e4:ba:a4:30:b3:00:e3:c4:2a:bd:99:a9:3a:f2:85:
37:53:f2:e1:5c:af:8f:44:b6:bb:52:a0:65:fa:46:6b:04:38:
39:f3:2f:92:03:02:91:c3:5f:ff:f6:29:38:8f:74:7c:6a:3f:
86:dd:44:5c:25:37:bd:a1:a8:72:78:be:3b:d0:c7:f5:fa:22:
8b:7f:75:33:6e:a2:ba:b2:79:e7:98:ab:4b:be:7d:c4:51:06:
46:43:dd:78:fa:05:d2:5f:74:df:fe:65:b7:28:28:1a:1d:b4:
d6:e2:fe:40:dd:93:15:8d:f8:10:91:23:b4:a7:8f:62:9e:bd:
0c:cb:85:d2:24:30:33:07:03:a8:45:4a:10:81:a4:d6:23:00:
7f:94:32:c5:66:ba:f9:6f:ff:84:46:d3:07:fd:21:dd:8d:58:
e0:87:2a:6d:06:94:e6:86:87:c6:aa:55:49:da:b2:f4:3a:33:
20:30:a0:fe:85:26:49:a7:43:ae:c4:52:22:13:55:cc:0c:18:
8c:22:c2:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 09:34:20 2026 by rpki-client