Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
File: t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft (raw, json)
Hash identifier: x1N4pXmT99Lmtw2Qiz3S2jIeLA3Pw6ZabSAicxB6btk=
Subject key identifier: C6:76:0B:34:C1:51:3F:ED:67:81:A0:B1:C3:2C:BF:FE:29:D1:E5:EF
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Certificate issuer: /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial: 01A120C0790BFF0FE5075705D3704CBBC5E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
Manifest number: 1A9B
Signing time: Fri 09 Oct 2026 13:00:47 +0000
Manifest this update: Fri 09 Oct 2026 13:00:47 +0000
Manifest next update: Sat 10 Oct 2026 13:00:47 +0000
Files and hashes: 1: PRNpmNoXJBIoF9gh578wEhtMpdQ.roa (hash: g9ylBrvDhSOD9y5ykNiZEjQPUeqbZ/uKUmYrg55Kn+I=)
2: iE0cS-gjGQ2wH2CEFbUXZzlClEs.roa (hash: zt5rLB2IKmjF4fOUcKb7lO1SdJgaIMds/uhpaf0hUX0=)
3: t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl (hash: fWWUkAnyrikJ58VYtLJBdI9vIt0JHXhz+SBKJpnKvKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 13:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:20:c0:79:0b:ff:0f:e5:07:57:05:d3:70:4c:bb:c5:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Validity
Not Before: Oct 9 13:00:47 2026 GMT
Not After : Oct 10 13:00:47 2026 GMT
Subject: CN=c6760b34c1513fed6781a0b1c32cbffe29d1e5ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8e:df:1c:75:30:38:0f:e4:72:ae:25:2c:88:
08:b7:31:8a:d1:b8:df:a2:10:13:82:d9:8d:98:00:
37:2c:0e:39:0b:22:78:35:66:0f:2a:31:52:b5:30:
8b:30:a2:0e:9d:2b:f2:8b:ae:40:12:82:df:40:3d:
4d:3c:fb:93:6a:95:b9:6a:c6:4a:50:59:11:d3:ea:
ba:b7:d1:99:5c:60:68:1f:36:23:32:6c:e6:28:e8:
81:e4:15:b3:37:84:0a:08:0f:f4:30:12:0b:3d:c0:
30:26:8e:1b:db:f4:f3:8a:34:34:7c:6d:25:bb:b4:
3e:78:e5:23:88:59:82:e1:ae:02:83:00:b5:49:1a:
35:70:55:bb:34:b0:c9:91:7d:6c:e9:ce:be:33:e1:
44:72:e1:f3:ac:b7:85:57:0a:cc:b9:ab:64:f9:5a:
22:d7:eb:6e:54:26:2b:79:8d:6b:0a:cd:12:e0:14:
5a:74:50:c1:3b:22:a8:52:b4:22:09:01:ff:5a:5c:
2c:ba:bb:1b:9e:1a:69:42:6d:0c:c3:fd:35:99:6f:
d1:6a:f1:95:f5:19:aa:7e:25:f0:e9:d2:4c:56:8a:
4e:f4:aa:db:81:1a:e9:5a:fa:d0:ce:8d:2e:f9:89:
d9:fe:79:24:4b:42:30:2c:c3:26:ea:94:e1:d3:a3:
95:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:76:0B:34:C1:51:3F:ED:67:81:A0:B1:C3:2C:BF:FE:29:D1:E5:EF
X509v3 Authority Key Identifier:
keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:7e:c1:52:8b:76:b0:4f:b8:79:bd:96:a9:aa:41:e4:f8:ee:
ea:5b:84:1c:06:84:46:eb:1e:f0:29:3b:d8:0b:c8:56:17:00:
4f:a2:1c:a2:3d:75:83:2f:2d:6d:19:d9:9f:49:d8:e4:11:09:
89:e4:6a:a0:d4:19:a0:6e:93:e9:10:99:a4:82:fa:3a:b2:6d:
7b:ac:44:82:95:bb:04:19:4f:91:89:58:04:07:94:bb:31:fb:
ad:33:1c:5c:fc:e6:aa:34:fc:49:a3:80:31:a2:6a:96:09:3e:
d3:4b:68:f5:0d:96:7d:c4:02:aa:83:c3:3f:6c:bb:e4:0b:54:
30:7f:16:ce:56:33:02:3e:7b:2a:fb:90:38:28:65:b0:f4:6c:
cf:a3:33:e2:7c:27:a2:b1:4d:ec:c8:d2:8e:e2:1f:db:26:48:
75:30:c4:f6:61:f6:3b:9f:6b:25:e8:85:d3:8b:ca:f9:74:07:
a1:0e:7f:50:74:2f:e7:00:85:2b:3e:13:a0:73:43:fa:cf:44:
5e:9e:d0:7c:ac:bc:f2:2e:a7:f8:92:cf:9e:f1:a1:75:7f:6e:
b7:e6:c9:d6:ae:69:2c:f0:a4:7a:5f:9e:b1:59:c7:4a:1b:e2:
a4:0b:3e:40:5b:79:41:a6:b1:af:a0:05:0a:29:34:69:e9:30:
d6:f1:ed:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 22:37:35 2026 by rpki-client