Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
File: t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft (raw, json)
Hash identifier: 9kVnfObhnzMpa2vNKcy2Bp5IPkg/Bk423DM3kPwtalg=
Subject key identifier: DA:CE:CD:A3:AA:65:35:C9:83:78:3A:F1:B7:AB:44:2B:39:28:1C:00
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Certificate issuer: /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial: 019FF7FE7D6B50E3E105B74CE05B7E6FFC98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
Manifest number: 1A00
Signing time: Wed 12 Aug 2026 22:01:18 +0000
Manifest this update: Wed 12 Aug 2026 22:01:18 +0000
Manifest next update: Thu 13 Aug 2026 22:01:18 +0000
Files and hashes: 1: 2MSpCLbIJT_dNS85cUQH7P6hQQQ.roa (hash: LqxKJfwKg1vJNoy6niHI6Ay0t/ibwSsUhqanJ+kZvVg=)
2: TZEmLmroEs6IRm7BIRkKTFCJTnA.roa (hash: QhC3msm1fXEe5FbZInDyO6caWrevlSV8+0GhYVm+mSE=)
3: XKyWf4Y6NjYLpXjJG8NNu1YgV8I.roa (hash: Wg/rYioLK0eT7zXUczkOHExRo3EIegYLBIdXxr8Hp88=)
4: t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl (hash: gM8lM+jBHg+mu7Y62A4KGv43t+7dNdQy4+BXnJ7WQK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 22:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f7:fe:7d:6b:50:e3:e1:05:b7:4c:e0:5b:7e:6f:fc:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Validity
Not Before: Aug 12 22:01:18 2026 GMT
Not After : Aug 13 22:01:18 2026 GMT
Subject: CN=dacecda3aa6535c983783af1b7ab442b39281c00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4a:5f:dc:b3:48:20:97:3c:86:cc:f2:d6:e1:
e6:87:7f:c3:1a:5a:e1:62:a0:66:31:33:09:55:53:
1d:3a:7c:0f:41:1b:84:a7:3e:c6:3e:4d:f6:32:3b:
92:e3:6f:54:21:8f:bf:51:53:ef:93:04:ed:f3:89:
83:93:ad:bf:eb:a5:01:99:7f:89:de:56:2c:79:fe:
8d:34:52:f5:46:07:b9:0e:4d:50:fe:f6:4f:72:8b:
cf:2e:b9:19:23:0e:c4:d1:45:a5:eb:a0:e8:3f:6f:
78:31:bc:24:34:6c:02:34:ac:8b:f3:a9:61:31:f9:
e9:90:1e:7c:96:89:5c:3c:81:ed:5b:f5:0c:6a:7e:
5c:3a:4f:58:24:d7:f5:6b:7b:0c:a8:a2:07:80:0a:
ed:b1:c6:e3:55:6e:c6:27:3c:15:58:c6:7b:2a:82:
df:f5:52:9c:c6:42:86:d2:b0:4b:73:27:57:8e:56:
3b:86:22:6c:9f:7f:d9:7e:97:44:a7:77:1c:07:ae:
3f:f3:42:fa:ff:d3:4b:ae:b4:f9:35:84:51:b1:aa:
05:25:1c:1b:be:c3:34:c3:3f:a7:7e:b6:76:2c:ce:
0f:ba:1a:6a:18:21:e1:0a:87:3a:ad:e4:2d:56:d2:
f0:94:0f:31:15:3f:a9:21:ff:7c:8c:05:b4:af:d6:
75:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:CE:CD:A3:AA:65:35:C9:83:78:3A:F1:B7:AB:44:2B:39:28:1C:00
X509v3 Authority Key Identifier:
keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:af:cb:17:4a:ae:7d:be:c3:b7:4a:55:42:92:fb:d0:fe:d1:
79:3e:8b:c5:2a:05:15:d3:3f:96:1d:b0:17:95:94:b0:17:bc:
e8:38:5d:8d:b8:71:fd:25:74:e6:5e:87:ef:08:3c:3f:bf:ca:
08:bb:8f:c5:b6:56:d8:3e:e1:46:2a:da:fa:aa:fb:60:36:1b:
92:a3:0c:80:bf:b6:0f:5f:c1:32:bf:73:8e:57:2e:cd:52:4c:
9a:5c:5b:d1:d2:9a:02:f2:d7:78:63:8a:fb:44:ef:4e:65:25:
1e:8f:01:72:00:9d:bf:55:2c:07:bc:0c:be:7e:1c:88:69:46:
d8:ad:70:65:dc:44:ed:ba:c7:d4:d9:05:14:8d:ae:8e:fa:f5:
e4:cd:65:05:15:cb:cf:c6:e1:2c:51:ff:3e:8f:bb:9e:5f:d0:
44:91:76:2f:e5:80:8c:65:62:08:25:83:d9:9e:c5:25:39:8e:
78:83:f2:2b:6d:90:cc:1b:50:44:a7:b3:8d:8f:e1:d4:6e:04:
9c:78:fe:fa:85:67:7a:b8:74:a4:0c:12:81:a4:bb:07:13:94:
8d:88:0f:f3:af:01:e7:35:23:96:b2:4f:4a:19:d6:fb:83:b7:
07:a9:ef:00:b9:c1:f1:4c:81:ef:96:09:19:46:7a:82:ee:4a:
0d:6d:17:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 05:35:51 2026 by rpki-client