Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
File: t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft (raw, json)
Hash identifier: Bhz42cZ3Sjql7lr7Xdk/6fRhuwMqc0OpuXdZV3paRHU=
Subject key identifier: 8A:4E:43:46:A2:7B:DA:EF:80:5A:0F:8B:1F:EF:89:9D:E9:DD:9E:C5
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Certificate issuer: /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial: 019FBE0EAD8EADFA106D1A813BB3AE99126E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
Manifest number: 19E2
Signing time: Sat 01 Aug 2026 16:01:00 +0000
Manifest this update: Sat 01 Aug 2026 16:01:00 +0000
Manifest next update: Sun 02 Aug 2026 16:01:00 +0000
Files and hashes: 1: 2MSpCLbIJT_dNS85cUQH7P6hQQQ.roa (hash: LqxKJfwKg1vJNoy6niHI6Ay0t/ibwSsUhqanJ+kZvVg=)
2: TZEmLmroEs6IRm7BIRkKTFCJTnA.roa (hash: QhC3msm1fXEe5FbZInDyO6caWrevlSV8+0GhYVm+mSE=)
3: XKyWf4Y6NjYLpXjJG8NNu1YgV8I.roa (hash: Wg/rYioLK0eT7zXUczkOHExRo3EIegYLBIdXxr8Hp88=)
4: t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl (hash: /MzCBta7HRFttLmPWNKrr5v1apG/h9wQHCHW5WQfPlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Aug 2026 16:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:be:0e:ad:8e:ad:fa:10:6d:1a:81:3b:b3:ae:99:12:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Validity
Not Before: Aug 1 16:01:00 2026 GMT
Not After : Aug 2 16:01:00 2026 GMT
Subject: CN=8a4e4346a27bdaef805a0f8b1fef899de9dd9ec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:3f:f0:44:09:e0:c0:d1:a4:5b:88:cd:24:69:
ef:c6:da:46:f6:2b:c2:6c:a6:c6:70:9d:88:83:2f:
d5:67:a7:88:88:1a:7f:05:1c:c6:ac:03:72:56:44:
6a:f0:e7:47:ec:03:73:08:ee:9f:54:b4:38:13:f0:
87:83:d9:41:fd:ad:06:01:53:c1:d8:79:d2:fb:4e:
e4:ef:ed:2b:fe:d8:b3:f5:34:10:9f:27:e1:a0:83:
94:46:b9:f0:60:12:cd:5a:c5:3c:ab:a9:11:e8:40:
5c:f4:04:86:4a:18:38:2b:cf:4b:32:e0:20:8e:e2:
9f:96:47:6c:49:bb:84:41:de:f1:09:80:67:92:bb:
1c:6d:d7:4f:8b:72:0e:62:dc:06:34:47:9d:1e:5b:
ed:b4:e3:f1:31:68:7f:47:08:f2:f6:56:fb:5e:34:
b2:b0:d5:e8:bf:29:ab:fd:ac:e5:99:ec:b2:f2:a3:
7a:09:77:15:e3:7b:af:f8:41:40:f8:e9:45:1c:a2:
a0:be:5b:77:77:f8:21:ef:d1:de:88:4b:5a:67:30:
26:aa:60:00:e3:35:04:12:6f:80:5d:78:4a:45:34:
50:95:30:9b:1b:2e:88:35:84:c2:b4:33:d9:e0:42:
1c:be:0e:11:a2:30:19:fe:81:e1:a1:0a:ee:17:95:
e4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:4E:43:46:A2:7B:DA:EF:80:5A:0F:8B:1F:EF:89:9D:E9:DD:9E:C5
X509v3 Authority Key Identifier:
keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:c4:85:23:e0:d5:59:97:33:53:f1:83:d3:4b:70:8c:df:8d:
c7:26:ba:9f:4b:0e:a4:f4:63:d3:b1:df:7a:8f:4c:1e:3d:ae:
00:28:76:e8:06:29:81:c2:d0:22:86:97:6f:b7:30:87:d6:18:
c7:9e:79:5b:f1:69:3a:6d:87:f3:76:bc:c7:af:38:df:d1:42:
b0:5a:9f:03:f5:51:1f:73:1d:d5:62:43:64:8d:a6:3d:55:46:
74:62:84:8c:3e:4d:98:76:b9:2c:27:26:fe:d6:b9:b6:69:a8:
c5:8e:0c:9a:2b:2a:d4:9f:4c:ae:67:67:29:db:5d:03:aa:74:
6a:3e:fd:44:d2:6e:d0:3a:a3:b1:0e:90:9e:a5:db:b9:44:df:
ce:22:f6:c4:78:19:c1:20:4c:6d:e6:39:7a:f7:e7:af:c7:96:
62:77:f5:14:62:75:37:4c:9a:4f:4b:0d:38:18:b1:e1:34:d0:
db:85:cf:b6:86:ec:16:ae:1a:56:23:f7:63:87:31:f7:2a:26:
49:eb:5e:1f:1c:42:79:fb:94:b5:7f:bc:42:34:16:83:16:03:
85:a8:35:13:59:89:bc:2b:c0:50:b3:c7:21:e1:56:c7:b4:f7:
19:cb:7a:60:df:d1:d7:5a:7d:2e:71:c8:84:66:5d:3a:1c:2a:
97:dd:ac:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 2 01:55:45 2026 by rpki-client