Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
File: t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft (raw, json)
Hash identifier: mtZMbDDWhT1RuinO5Qf8xSUKF7BQpQEiHk21djbpDXI=
Subject key identifier: 1C:AC:63:E2:40:FA:D5:D2:8A:C1:95:79:61:1D:0B:01:1A:05:A7:7C
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Certificate issuer: /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial: 01A018D2D71F0432D0739AE8B3331D7764F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
Manifest number: 1A11
Signing time: Wed 19 Aug 2026 07:01:05 +0000
Manifest this update: Wed 19 Aug 2026 07:01:05 +0000
Manifest next update: Thu 20 Aug 2026 07:01:05 +0000
Files and hashes: 1: 2MSpCLbIJT_dNS85cUQH7P6hQQQ.roa (hash: LqxKJfwKg1vJNoy6niHI6Ay0t/ibwSsUhqanJ+kZvVg=)
2: TZEmLmroEs6IRm7BIRkKTFCJTnA.roa (hash: QhC3msm1fXEe5FbZInDyO6caWrevlSV8+0GhYVm+mSE=)
3: XKyWf4Y6NjYLpXjJG8NNu1YgV8I.roa (hash: Wg/rYioLK0eT7zXUczkOHExRo3EIegYLBIdXxr8Hp88=)
4: t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl (hash: 8r4BUOVAx6EGtISxX7AHCfVHgobSxM8Or5Owb8GHJt4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Aug 2026 07:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:18:d2:d7:1f:04:32:d0:73:9a:e8:b3:33:1d:77:64:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Validity
Not Before: Aug 19 07:01:05 2026 GMT
Not After : Aug 20 07:01:05 2026 GMT
Subject: CN=1cac63e240fad5d28ac19579611d0b011a05a77c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:db:0f:fe:9d:ec:db:40:1d:88:9f:78:50:9c:
be:03:6d:e0:23:f6:a9:0b:66:14:bc:19:21:11:7a:
61:33:36:12:8f:5d:0e:9e:cc:11:a9:55:80:60:f3:
3e:b1:e8:1a:e7:36:de:ba:53:c1:be:aa:50:7f:28:
d8:4c:7d:f3:41:b8:22:7a:38:40:6b:ba:42:6c:ff:
2b:5b:7c:c3:e5:84:ab:8e:c4:2e:ad:d2:0b:19:be:
25:f3:52:4f:e3:a3:3f:4b:ba:46:ba:39:0f:e5:9f:
cb:db:60:6e:df:ba:b8:51:4c:fd:ef:15:c0:d3:24:
b1:58:eb:38:de:cb:3a:14:15:b3:8b:15:01:cf:9a:
35:1d:17:b8:ad:9c:2c:64:29:24:80:d0:fc:7e:c1:
3d:aa:7f:37:df:48:76:87:07:e2:03:c7:f5:84:d3:
55:ae:23:51:3b:12:65:1a:1c:67:92:ee:ac:e9:cc:
92:2b:75:e6:74:45:e7:fb:eb:67:9f:85:f3:f0:68:
f9:81:d8:96:47:bb:cc:56:85:f9:38:4b:74:43:13:
b2:45:e0:f9:5d:6f:b3:d7:ff:ac:b2:fa:d9:7b:ce:
e4:42:63:0e:7e:c8:81:79:9d:bc:ff:ca:cc:a0:9b:
06:88:2a:48:d1:fd:50:60:fb:47:71:29:16:5d:e5:
4e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:AC:63:E2:40:FA:D5:D2:8A:C1:95:79:61:1D:0B:01:1A:05:A7:7C
X509v3 Authority Key Identifier:
keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:06:c8:0a:b5:95:6b:b2:34:19:a0:da:25:37:c7:1e:e6:5e:
f1:be:f4:3b:2d:29:41:c6:82:fa:fe:b1:39:ae:82:2f:b0:ae:
5c:5e:f5:8f:cb:b8:4d:6a:4b:de:b6:09:eb:96:86:d9:16:04:
d4:84:52:62:ad:9f:9d:23:3e:73:49:13:e0:c7:c0:df:68:85:
bd:80:c7:fd:b3:22:6e:b2:5f:5f:3f:8d:28:6f:15:a4:9c:42:
3d:d3:2d:1f:2d:f0:20:bc:5e:6c:49:4f:03:bb:8b:ea:9f:9a:
56:49:60:81:9f:f0:0c:40:b5:67:31:08:dd:84:93:3d:ec:dd:
36:b9:00:62:80:1a:ac:4f:9a:2d:b4:74:c7:71:64:9f:7b:df:
74:af:60:65:30:5e:02:4a:10:a2:ef:1f:7d:0a:d4:f7:6c:e1:
46:13:00:49:d8:bb:42:74:fc:c1:8a:cb:ed:74:4c:3a:3c:1d:
7f:a2:81:88:1a:6d:5f:d5:d6:08:95:8b:b1:00:6c:67:3c:f4:
69:e5:23:7c:38:46:d6:90:18:78:e5:eb:aa:10:e3:6e:4c:7e:
84:9a:c6:17:ff:f5:08:41:2b:a9:52:71:d8:7f:52:6a:75:a3:
cd:c4:01:dd:b7:60:93:c7:34:70:fc:36:ab:40:4d:d4:10:96:
18:57:e7:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:26:09 2026 by rpki-client