Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
File: t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft (raw, json)
Hash identifier: lOONS4fJ479SOhR/8gQOmW3DjUMcpaxJ6oH4Z+hHKAA=
Subject key identifier: FF:B3:B5:8A:DA:00:CF:93:32:24:66:20:AD:73:B0:E8:02:4B:D7:B4
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Certificate issuer: /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial: 01A10F5EAFDF5BD2FF7BC40351FBF256C6DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
Manifest number: 1A92
Signing time: Tue 06 Oct 2026 04:00:25 +0000
Manifest this update: Tue 06 Oct 2026 04:00:25 +0000
Manifest next update: Wed 07 Oct 2026 04:00:25 +0000
Files and hashes: 1: PRNpmNoXJBIoF9gh578wEhtMpdQ.roa (hash: g9ylBrvDhSOD9y5ykNiZEjQPUeqbZ/uKUmYrg55Kn+I=)
2: iE0cS-gjGQ2wH2CEFbUXZzlClEs.roa (hash: zt5rLB2IKmjF4fOUcKb7lO1SdJgaIMds/uhpaf0hUX0=)
3: t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl (hash: pN2P2QwsZkTFZUeBgfieN03DIr8VmncFI949zhqqhys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0f:5e:af:df:5b:d2:ff:7b:c4:03:51:fb:f2:56:c6:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Validity
Not Before: Oct 6 04:00:25 2026 GMT
Not After : Oct 7 04:00:25 2026 GMT
Subject: CN=ffb3b58ada00cf9332246620ad73b0e8024bd7b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:6f:60:4b:74:f8:55:57:3f:52:d9:fc:02:f4:
43:12:62:28:01:ab:69:b8:b5:0f:9e:ae:6b:4d:b8:
35:6a:80:b4:98:f5:43:5b:05:8b:06:ce:46:56:f6:
d9:74:34:07:c6:2b:7a:b6:95:b7:d5:52:ac:26:e4:
d9:ec:a2:9b:34:d7:d1:1b:df:5a:73:97:54:d3:29:
9f:be:ca:76:13:2f:8f:b7:d1:c1:7b:99:45:f8:5a:
54:54:83:0b:b3:a0:96:1e:67:12:36:2d:df:e0:ff:
c0:6f:8b:4d:16:4a:f0:25:0e:1d:3c:c1:65:9b:4f:
54:b5:97:26:4f:2a:c1:5b:d2:5c:02:6f:98:c4:f8:
3f:76:59:1e:d0:eb:bc:b6:d0:7f:b8:2d:f5:7e:c7:
31:07:db:e8:1d:dc:5a:4a:e1:92:ec:1a:74:ff:16:
26:8a:3b:99:f1:e4:47:cf:63:c5:92:67:13:ea:91:
9d:2c:e2:44:74:a7:0b:67:8b:b4:7a:a6:2b:5c:ba:
67:d3:a7:d8:a5:c8:14:b4:9f:65:8a:ac:39:fd:f3:
f8:2a:54:2b:b4:bf:e4:58:b7:23:ac:ad:d7:f5:53:
e3:da:ec:d0:55:e2:78:ba:ea:06:55:ed:7b:6a:c9:
54:b8:46:3d:7d:10:ac:89:dc:ac:74:23:ea:43:7c:
ed:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:B3:B5:8A:DA:00:CF:93:32:24:66:20:AD:73:B0:E8:02:4B:D7:B4
X509v3 Authority Key Identifier:
keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:15:67:46:32:83:4a:32:22:f3:f9:15:ad:2b:6d:75:83:a5:
a2:3b:5a:3d:30:96:a5:d0:b3:ab:e7:c5:e4:00:8a:b4:6f:6b:
ba:92:2f:82:b4:34:29:c0:eb:f2:a7:89:e1:4b:fe:63:71:f8:
64:11:96:90:5f:f8:b5:bc:ff:13:84:94:e0:b6:83:da:25:97:
12:f4:c7:09:a0:95:15:1d:4e:40:a8:47:69:1b:df:f7:73:f5:
d3:b0:a1:79:75:46:04:20:8f:b3:81:78:e6:db:b5:f7:6c:a3:
bc:45:78:d9:88:ba:14:1b:19:92:bc:30:c6:2b:bc:8d:7c:1f:
65:ed:96:b0:2e:39:73:0e:4c:04:7b:0b:18:6f:a1:7b:f4:47:
15:91:29:04:2b:c2:ef:28:02:af:80:5d:d3:bd:8c:ed:c2:e7:
87:ed:9e:2c:73:d9:4a:8e:29:41:1e:4a:af:44:33:8c:a1:aa:
f8:76:ea:a0:45:6e:89:95:92:c5:42:6c:27:9b:dc:0f:aa:60:
3d:3b:64:cf:ae:5b:39:4f:85:5b:4d:c7:2a:0d:fe:cb:55:01:
43:c0:06:2a:fb:1b:fd:a8:e4:3e:74:cb:b5:62:5f:21:77:9d:
31:7c:b1:ce:43:94:b6:44:43:88:ba:b8:b1:c0:02:c7:0c:40:
20:48:fa:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 15:35:37 2026 by rpki-client