Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
File: t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft (raw, json)
Hash identifier: 9SuTVjp2PpxlvSIZf1PQaen/QMfN19fgECgYeIhy/Uc=
Subject key identifier: F1:76:26:98:1F:EE:7A:DE:37:6C:F9:C6:5D:75:14:22:4A:E8:8D:97
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Certificate issuer: /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial: 01A01E9D8697AF5668CA008FD4320D472AD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
Manifest number: 1A14
Signing time: Thu 20 Aug 2026 10:00:35 +0000
Manifest this update: Thu 20 Aug 2026 10:00:35 +0000
Manifest next update: Fri 21 Aug 2026 10:00:35 +0000
Files and hashes: 1: 2MSpCLbIJT_dNS85cUQH7P6hQQQ.roa (hash: LqxKJfwKg1vJNoy6niHI6Ay0t/ibwSsUhqanJ+kZvVg=)
2: TZEmLmroEs6IRm7BIRkKTFCJTnA.roa (hash: QhC3msm1fXEe5FbZInDyO6caWrevlSV8+0GhYVm+mSE=)
3: XKyWf4Y6NjYLpXjJG8NNu1YgV8I.roa (hash: Wg/rYioLK0eT7zXUczkOHExRo3EIegYLBIdXxr8Hp88=)
4: t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl (hash: y/O9Z9bZR8riRNTBbJwkeqp1bHDMIOd+Tjf0TWhA6TU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1e:9d:86:97:af:56:68:ca:00:8f:d4:32:0d:47:2a:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Validity
Not Before: Aug 20 10:00:35 2026 GMT
Not After : Aug 21 10:00:35 2026 GMT
Subject: CN=f17626981fee7ade376cf9c65d7514224ae88d97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7e:96:10:7e:0d:3e:9c:ea:5a:a9:74:0e:d6:
5d:6f:02:43:fa:01:f3:b2:56:68:86:3a:e5:08:5a:
12:2c:00:79:72:60:1a:a6:85:3a:20:8e:e3:0a:bc:
20:f4:00:c6:f5:dc:0b:3f:4c:38:e6:52:de:8d:42:
f9:b1:bb:ed:38:c5:35:de:33:90:7a:51:e9:4e:fa:
5b:4b:9b:15:46:ba:68:66:d4:c6:8c:4a:95:c2:67:
dd:a3:c0:1b:e3:4b:6a:71:a0:1d:0c:b1:47:8e:56:
2f:2f:51:51:e2:59:55:4f:84:9e:5a:61:97:05:4c:
1f:0f:d5:5d:b9:b5:e2:75:12:aa:06:a9:62:75:b9:
05:f6:ed:d0:7e:52:2b:31:b6:2c:c7:18:b7:f0:e6:
d1:44:03:d3:de:fd:d6:e5:2d:05:ef:4b:91:bc:d6:
28:40:9a:8a:05:f4:e5:ae:f0:2c:e6:d2:15:74:ee:
c4:4f:89:06:08:cc:57:03:6d:d4:d5:57:75:bb:35:
fa:d3:7c:d1:04:6c:4b:94:53:6f:45:7a:89:d4:5e:
d9:d9:db:5c:25:bd:63:03:01:16:8e:4b:b1:c7:5d:
9b:b8:d0:b6:56:57:63:b4:f9:fe:39:ef:29:ca:56:
2f:66:6b:51:bb:ac:14:3a:5a:69:77:39:07:bc:1a:
06:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:76:26:98:1F:EE:7A:DE:37:6C:F9:C6:5D:75:14:22:4A:E8:8D:97
X509v3 Authority Key Identifier:
keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:13:14:54:50:22:50:8a:3a:68:3a:e1:b0:a7:82:d9:a1:68:
c3:d3:4d:62:07:61:1c:a4:1d:87:6b:86:44:f4:d0:f3:10:0c:
0b:fd:1c:af:9b:9d:97:a4:2b:7a:d0:c4:47:a0:b9:b3:d0:08:
1b:14:38:63:25:48:b6:7b:10:f2:9a:8d:0b:cc:57:7d:ca:c6:
58:8d:79:8c:96:be:5c:02:3c:ef:f4:21:3b:c2:b8:cb:9d:9f:
ea:7d:a7:28:15:71:a8:22:b9:28:fa:81:9d:85:47:02:ea:19:
b9:b9:f1:ea:1e:d5:de:f6:54:da:44:4e:19:8d:6a:20:11:7e:
02:78:c5:6d:01:b5:c9:75:34:9c:f3:66:d9:26:1c:22:08:0d:
25:75:e7:bd:14:93:91:90:81:57:63:a7:90:8c:9d:1a:a1:46:
e4:f4:39:6b:a0:45:dc:f9:fd:83:44:66:13:1d:6c:25:53:00:
15:c4:eb:a4:9c:1c:a1:ee:55:94:85:d9:27:3b:57:2c:bc:69:
2d:06:6a:8e:a7:85:ad:59:20:3f:41:5a:14:0d:98:1c:97:16:
ce:80:cb:78:03:29:f7:57:93:e3:3f:0a:f5:d2:9c:68:23:21:
04:09:74:c3:fe:bb:95:f5:8a:c2:d7:2f:a0:9b:d3:da:eb:2e:
ea:64:e6:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 14:14:47 2026 by rpki-client