Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
File: t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft (raw, json)
Hash identifier: u7EsrBWtnZuCvz+zsx1Jf61uFPiQEf7z82v4syhbqcQ=
Subject key identifier: 66:CF:7E:0A:A8:8C:B9:D7:CB:BD:17:F2:EB:30:63:2B:66:40:C3:B2
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Certificate issuer: /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial: 01A0B2AC01E460CF25C763C802017D0F412A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
Manifest number: 1A62
Signing time: Fri 18 Sep 2026 04:00:12 +0000
Manifest this update: Fri 18 Sep 2026 04:00:12 +0000
Manifest next update: Sat 19 Sep 2026 04:00:12 +0000
Files and hashes: 1: PRNpmNoXJBIoF9gh578wEhtMpdQ.roa (hash: g9ylBrvDhSOD9y5ykNiZEjQPUeqbZ/uKUmYrg55Kn+I=)
2: iE0cS-gjGQ2wH2CEFbUXZzlClEs.roa (hash: zt5rLB2IKmjF4fOUcKb7lO1SdJgaIMds/uhpaf0hUX0=)
3: t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl (hash: ZCfYPStQr8jsnSAceM8on4fRgqmeQxqhYADzWr9IDAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 04:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b2:ac:01:e4:60:cf:25:c7:63:c8:02:01:7d:0f:41:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Validity
Not Before: Sep 18 04:00:12 2026 GMT
Not After : Sep 19 04:00:12 2026 GMT
Subject: CN=66cf7e0aa88cb9d7cbbd17f2eb30632b6640c3b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ec:e3:67:0f:91:0a:19:14:48:9e:af:a8:88:
c9:27:8f:ea:59:69:df:7d:89:0b:d7:0d:ad:7e:75:
c5:ff:1d:0e:f0:cd:29:0a:35:fb:12:1c:62:83:74:
77:2f:10:52:e9:d1:1c:bb:c5:37:80:78:98:7a:37:
f6:84:ad:34:63:a3:db:8b:2e:62:5d:0f:b8:bf:0b:
ef:18:4d:e4:2e:b1:39:2e:de:4b:ea:12:97:91:05:
ec:0f:99:be:8f:3f:a5:aa:d4:59:17:60:26:bb:c8:
dc:dd:d6:c4:52:46:93:be:3b:87:96:fe:52:80:85:
9d:d8:6d:e0:6b:c9:60:21:1c:8a:48:51:0a:f8:ba:
c1:0d:8b:06:66:4c:ae:11:c8:b4:de:1c:6b:55:5c:
78:e8:cf:c9:a9:2f:8d:15:25:b7:f8:ae:09:75:78:
a2:1e:24:59:d5:20:65:48:32:a9:9f:8d:ec:03:dc:
16:4b:ce:84:ce:7b:5b:75:1a:a9:b8:c9:01:01:a5:
5f:d7:ae:65:32:89:97:ba:62:17:ea:96:c3:bc:b8:
94:ff:3d:1e:17:c7:15:5f:12:fc:91:62:ef:ab:e0:
da:55:88:39:ad:3b:3a:4d:44:9f:2c:a4:a7:8c:28:
ec:5d:78:97:0a:0c:50:77:49:05:c7:80:24:1d:62:
99:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:CF:7E:0A:A8:8C:B9:D7:CB:BD:17:F2:EB:30:63:2B:66:40:C3:B2
X509v3 Authority Key Identifier:
keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:bd:84:b0:fb:fb:2f:b7:79:26:a6:89:17:31:1c:63:6a:38:
e8:89:47:f4:52:12:c2:84:5a:1b:8c:c4:d7:5f:4e:2f:28:c5:
b1:02:74:7e:0f:5c:b0:e5:67:00:5b:92:fd:0e:61:fe:91:da:
3d:cc:8d:fe:ac:6b:ec:93:8b:42:8c:2a:a2:ef:97:0c:93:11:
9e:cc:7f:10:b0:2d:a9:4b:23:25:c6:8a:18:27:a6:65:8f:8e:
86:de:89:69:28:55:81:a0:94:ef:15:2c:f7:c5:0b:19:ae:43:
54:62:b9:00:b7:f6:bc:59:e1:33:4f:2e:51:1c:5c:b6:e1:9c:
8e:d5:5a:0b:ca:0f:de:1d:b9:bf:1a:f9:e4:d1:5a:18:af:2b:
69:6d:25:6f:9a:2b:30:1f:6d:8b:e0:3e:c8:d8:e5:15:4e:9e:
4f:e7:f5:ff:87:a6:c0:60:0c:9e:9d:49:44:a1:21:dd:7b:fc:
39:7b:87:9f:85:ea:09:d7:76:1b:00:99:d7:bf:62:9c:8b:c2:
ee:0b:38:97:a7:50:89:ae:d1:1f:51:a2:e2:75:f3:5c:31:b6:
06:8b:27:5d:8d:08:0a:95:c5:c6:0b:fa:4e:8f:1c:9e:66:a3:
58:fb:55:af:6d:b5:0c:2b:27:e2:3f:e9:1b:27:b2:be:6d:81:
11:b1:54:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCyrAHkYM8lx2PIAgF9D0EqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3NWEwNTY2ZDBiNjNhMWY4NjJkODM0NThlNGYyZWE2ZmQ4
ZjdkMjEwHhcNMjYwOTE4MDQwMDEyWhcNMjYwOTE5MDQwMDEyWjAzMTEwLwYDVQQD
Eyg2NmNmN2UwYWE4OGNiOWQ3Y2JiZDE3ZjJlYjMwNjMyYjY2NDBjM2IyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0uzjZw+RChkUSJ6vqIjJJ4/qWWnf
fYkL1w2tfnXF/x0O8M0pCjX7Ehxig3R3LxBS6dEcu8U3gHiYejf2hK00Y6Pbiy5i
XQ+4vwvvGE3kLrE5Lt5L6hKXkQXsD5m+jz+lqtRZF2Amu8jc3dbEUkaTvjuHlv5S
gIWd2G3ga8lgIRyKSFEK+LrBDYsGZkyuEci03hxrVVx46M/JqS+NFSW3+K4JdXii
HiRZ1SBlSDKpn43sA9wWS86EzntbdRqpuMkBAaVf165lMomXumIX6pbDvLiU/z0e
F8cVXxL8kWLvq+DaVYg5rTs6TUSfLKSnjCjsXXiXCgxQd0kFx4AkHWKZAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGbPfgqojLnXy70X8uswYytmQMOyMB8GA1UdIwQY
MBaAFLdaBWbQtjofhi2DRY5PLqb9j30hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDFvRlp0QzJPaC1HTFlORmprOHVwdjJQZlNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8xMDM1NzAtMWNmNi00MmFjLTgxZDQt
ODNmNjAxYzNmYjU5LzEvdDFvRlp0QzJPaC1HTFlORmprOHVwdjJQZlNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi8xMDM1NzAtMWNmNi00MmFjLTgxZDQtODNmNjAxYzNmYjU5
LzEvdDFvRlp0QzJPaC1HTFlORmprOHVwdjJQZlNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH72EsPv7
L7d5JqaJFzEcY2o46IlH9FISwoRaG4zE119OLyjFsQJ0fg9csOVnAFuS/Q5h/pHa
PcyN/qxr7JOLQowqou+XDJMRnsx/ELAtqUsjJcaKGCemZY+Oht6JaShVgaCU7xUs
98ULGa5DVGK5ALf2vFnhM08uURxctuGcjtVaC8oP3h25vxr55NFaGK8raW0lb5or
MB9ti+A+yNjlFU6eT+f1/4emwGAMnp1JRKEh3Xv8OXuHn4XqCdd2GwCZ179inIvC
7gs4l6dQia7RH1Gi4nXzXDG2BosnXY0ICpXFxgv6To8cnmajWPtVr221DCsn4j/p
Gyeyvm2BEbFUlA==
-----END CERTIFICATE-----
Generated at Fri Sep 18 12:39:26 2026 by rpki-client