Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
File: t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft (raw, json)
Hash identifier: fv/TmZD3PzUSKJ8PN7npfkn32Q0OYkh/++pNLCTdaXU=
Subject key identifier: 58:F7:70:FD:D7:6A:E5:92:91:BB:5D:08:68:6D:9A:8E:51:56:12:14
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Certificate issuer: /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial: 01A02DA33B763C24B4F12DCF2E10E48B2305
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
Manifest number: 1A1C
Signing time: Sun 23 Aug 2026 08:01:07 +0000
Manifest this update: Sun 23 Aug 2026 08:01:07 +0000
Manifest next update: Mon 24 Aug 2026 08:01:07 +0000
Files and hashes: 1: 3PZtOtEP32pxmagHDWpHuXtCCRc.roa (hash: bpJEOxuRCU5ZgS5FbAAwutvMDXKwEbHigoSaJaf1e2M=)
2: TZEmLmroEs6IRm7BIRkKTFCJTnA.roa (hash: QhC3msm1fXEe5FbZInDyO6caWrevlSV8+0GhYVm+mSE=)
3: iE0cS-gjGQ2wH2CEFbUXZzlClEs.roa (hash: zt5rLB2IKmjF4fOUcKb7lO1SdJgaIMds/uhpaf0hUX0=)
4: t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl (hash: 2L7z7NFYr7QuHXin4pE8xbq7lOhxG/tgA3294toFBPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Aug 2026 08:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:2d:a3:3b:76:3c:24:b4:f1:2d:cf:2e:10:e4:8b:23:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Validity
Not Before: Aug 23 08:01:07 2026 GMT
Not After : Aug 24 08:01:07 2026 GMT
Subject: CN=58f770fdd76ae59291bb5d08686d9a8e51561214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:58:cb:99:6a:6e:19:b7:8c:d7:33:6a:9e:42:
4f:1b:85:4d:96:2a:1e:f3:60:bd:40:16:98:3c:83:
8b:fc:c8:ae:64:d2:f7:77:49:7f:b7:06:18:6d:4e:
2a:d5:02:4f:6a:a3:e8:ba:47:71:d7:10:ce:62:26:
ba:1e:c3:19:9b:39:34:2f:98:df:74:f4:80:de:3d:
2c:6c:6f:b5:60:36:25:0a:a3:17:c6:97:b2:74:e0:
a7:ab:92:7c:75:9a:74:1b:61:cf:aa:6f:e8:98:d4:
96:3f:84:e5:3e:57:e9:40:35:43:55:e0:c0:53:bc:
e7:db:3e:a5:0d:4c:f0:db:79:15:96:97:7e:25:53:
3b:54:34:11:0e:68:19:56:39:82:47:6a:36:bd:b8:
75:a5:f6:08:c4:e1:1b:b8:c5:7c:19:8e:e7:6f:38:
61:c8:0c:61:dc:df:85:e8:f6:57:20:2d:01:6d:69:
c4:6a:09:10:7b:48:67:08:94:70:27:95:79:c4:3a:
a7:9a:e7:26:0b:38:d3:7f:60:39:ce:e9:7a:6c:2d:
7e:f4:12:17:f8:35:4d:b8:49:0b:02:b3:e1:2f:20:
dd:51:36:4f:7c:c9:15:fe:ed:b0:83:5f:5d:e9:50:
2e:69:07:e0:84:4f:55:2f:70:cc:6e:a8:2b:2c:88:
ce:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:F7:70:FD:D7:6A:E5:92:91:BB:5D:08:68:6D:9A:8E:51:56:12:14
X509v3 Authority Key Identifier:
keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:00:2e:4d:b5:74:a4:7a:48:f6:c4:e0:46:0b:0d:ba:e2:ea:
68:0a:c0:86:81:2e:e4:16:29:f7:c3:e2:56:04:dc:47:d7:ee:
d2:44:a7:0f:16:5c:97:00:a1:71:72:d2:71:24:cc:97:5f:12:
9c:54:69:08:b7:fe:5e:54:94:4e:b3:20:a7:5f:47:b3:b0:1d:
c0:71:98:ae:af:6d:90:8a:2b:29:cc:91:6e:e8:b7:25:02:61:
4e:16:54:8c:c7:10:47:9e:b2:a9:2b:c8:c1:c6:79:88:ff:f3:
c1:8d:9c:e2:3d:8d:b1:35:e8:a2:f9:47:4d:3a:65:76:af:4a:
04:18:08:cd:78:55:02:fb:8d:1e:9d:07:15:a6:ec:da:fa:87:
00:a2:06:8a:54:08:8b:6e:43:16:5d:96:8a:ea:dc:22:82:9a:
be:b0:5c:12:5a:2e:33:68:f9:f8:26:4c:b3:d9:02:5f:46:f9:
3b:bc:c2:4f:26:01:cc:9e:74:62:e4:81:f8:05:3e:fa:a5:c0:
55:e0:6f:8d:85:75:b2:41:85:73:2d:7a:80:b1:2c:37:39:5d:
6e:5c:c5:82:7f:11:a2:93:84:61:40:49:e9:69:f5:6d:7d:c3:
e2:28:80:57:c3:ae:62:1f:3f:d1:e2:45:ae:48:78:62:c2:6a:
74:a0:03:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 18:13:55 2026 by rpki-client