Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
File: t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft (raw, json)
Hash identifier: v4gQiFgFKhj3wy8MJivBO8FvuDU/eq+qIq1v3GoC+cY=
Subject key identifier: 9D:E4:D1:79:79:F6:15:C7:9E:96:F7:C1:8A:9D:9E:9C:92:F3:70:EF
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Certificate issuer: /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial: 01A18908E902A9CA00F3FA1A4C77A62DD9BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
Manifest number: 1AD1
Signing time: Thu 29 Oct 2026 19:00:24 +0000
Manifest this update: Thu 29 Oct 2026 19:00:24 +0000
Manifest next update: Fri 30 Oct 2026 19:00:24 +0000
Files and hashes: 1: PRNpmNoXJBIoF9gh578wEhtMpdQ.roa (hash: g9ylBrvDhSOD9y5ykNiZEjQPUeqbZ/uKUmYrg55Kn+I=)
2: iE0cS-gjGQ2wH2CEFbUXZzlClEs.roa (hash: zt5rLB2IKmjF4fOUcKb7lO1SdJgaIMds/uhpaf0hUX0=)
3: t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl (hash: zvFB4rxJMWIKV6d1c5NUk46wt8H43A+OrxMBGbkvO7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 14:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:89:08:e9:02:a9:ca:00:f3:fa:1a:4c:77:a6:2d:d9:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Validity
Not Before: Oct 29 19:00:24 2026 GMT
Not After : Oct 30 19:00:24 2026 GMT
Subject: CN=9de4d17979f615c79e96f7c18a9d9e9c92f370ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e5:38:6b:c7:79:a4:f0:6b:95:ac:89:22:b8:
6b:53:a2:58:15:39:20:d4:29:f9:1e:ca:7a:66:fd:
ea:fa:bd:8a:14:c2:55:4c:8f:3a:1d:ed:76:f8:18:
9d:39:35:28:e1:f2:8b:e7:65:7c:21:ac:ef:3d:08:
b2:dd:07:b6:15:48:fe:e6:2c:01:0a:d3:09:24:01:
af:26:09:7d:44:c6:7e:5c:fc:06:8a:42:d5:62:26:
8c:22:14:4c:81:86:97:6a:f0:96:0e:8b:59:e2:f2:
55:15:e2:0f:9f:70:52:9b:c1:fd:56:a3:13:8d:71:
00:98:1a:01:8b:31:15:c0:a8:bf:56:83:7a:16:37:
3e:0f:3b:d7:f9:15:98:72:55:dc:fd:78:4a:93:23:
6b:be:05:40:cd:0b:52:e3:30:da:b3:a0:8e:0f:d8:
b3:96:c4:51:23:55:f6:c9:da:17:69:bc:dd:ef:fc:
16:34:db:15:19:ba:3e:1a:68:a9:f6:81:32:d4:c0:
1b:ca:9d:3b:a6:54:ad:15:cf:9b:8e:51:0d:44:05:
1d:a2:89:6a:36:9c:ae:50:e8:6c:fe:23:3d:3e:28:
69:dd:4d:83:2d:15:6f:6b:58:f2:e1:5d:3b:a6:2f:
50:d6:1a:55:4e:c2:94:32:4d:c2:10:36:82:e0:66:
71:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:E4:D1:79:79:F6:15:C7:9E:96:F7:C1:8A:9D:9E:9C:92:F3:70:EF
X509v3 Authority Key Identifier:
keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:df:42:89:da:56:34:33:bf:5b:2e:33:5f:fb:7f:34:78:5a:
4f:7d:49:da:b5:58:ec:a9:6a:cb:db:54:fd:c7:15:51:70:d5:
8e:c7:ed:79:b0:c5:21:c7:74:a0:17:ad:c8:a3:0f:1a:8a:72:
72:39:d1:b8:b8:eb:c1:21:0a:71:0e:35:e7:2e:86:51:a0:3f:
bf:41:0b:e8:6f:0a:c9:85:c1:41:cd:7c:27:d6:1f:78:58:3c:
50:20:bf:12:28:06:6b:25:f5:a1:39:1f:2e:a9:4a:c6:4a:8a:
84:1c:2f:93:fc:fa:c7:62:92:7d:e5:40:52:11:ea:17:0b:06:
dc:66:a9:3b:ae:c1:76:aa:76:be:7f:95:b9:a3:9b:b6:3e:30:
a1:93:f5:b4:d4:c5:8a:e9:46:5d:19:11:36:96:d1:8c:8e:66:
30:c2:40:bc:19:25:4d:3f:25:fd:5a:ac:2c:3a:4f:57:ae:92:
e7:be:15:eb:9b:0f:c2:f3:63:c5:bb:82:a2:85:ae:c2:e2:f8:
59:83:78:81:46:a8:5f:0e:27:d5:71:c0:8e:01:5d:f5:be:b5:
79:cf:3c:59:cb:df:da:0b:6e:c1:f9:1f:b6:ff:68:f7:a8:d2:
59:83:8e:b7:bf:16:0c:b0:aa:c9:56:ac:cb:e6:eb:61:fa:f3:
19:80:8b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 22:54:55 2026 by rpki-client