Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
File: t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft (raw, json)
Hash identifier: K/AomFBvVTCWBxwhrBSN03yAOvWCl3AYfNvupPvk6e4=
Subject key identifier: C8:C2:DB:E9:BE:74:6D:D9:27:24:9C:36:D6:44:37:E3:32:AC:C6:44
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Certificate issuer: /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial: 01A042E19FD40C30D71E5540BF5A8593FDCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
Manifest number: 1A27
Signing time: Thu 27 Aug 2026 11:01:17 +0000
Manifest this update: Thu 27 Aug 2026 11:01:17 +0000
Manifest next update: Fri 28 Aug 2026 11:01:17 +0000
Files and hashes: 1: 3PZtOtEP32pxmagHDWpHuXtCCRc.roa (hash: bpJEOxuRCU5ZgS5FbAAwutvMDXKwEbHigoSaJaf1e2M=)
2: TZEmLmroEs6IRm7BIRkKTFCJTnA.roa (hash: QhC3msm1fXEe5FbZInDyO6caWrevlSV8+0GhYVm+mSE=)
3: iE0cS-gjGQ2wH2CEFbUXZzlClEs.roa (hash: zt5rLB2IKmjF4fOUcKb7lO1SdJgaIMds/uhpaf0hUX0=)
4: t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl (hash: nD8GGy8VGuheloRkqkeG61pulQWzxqMycDSkuMHz9Nw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Aug 2026 11:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:42:e1:9f:d4:0c:30:d7:1e:55:40:bf:5a:85:93:fd:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Validity
Not Before: Aug 27 11:01:17 2026 GMT
Not After : Aug 28 11:01:17 2026 GMT
Subject: CN=c8c2dbe9be746dd927249c36d64437e332acc644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:fb:1d:2a:15:07:27:db:2b:99:6d:fe:c9:4f:
02:63:05:cc:75:49:c1:5b:b9:d4:4d:4c:c4:48:b5:
12:cb:24:a2:1b:d0:d0:17:83:95:97:13:44:7e:11:
f8:62:a5:2a:61:0a:9f:8d:26:fa:b9:0a:9b:3e:45:
d0:79:22:90:f9:e0:af:5b:f8:73:cb:cf:bb:80:8a:
f5:37:c3:28:4f:53:6c:6a:4a:8d:ba:64:a1:f5:9d:
6d:78:5c:56:24:17:39:76:97:7c:94:ed:bc:f4:e2:
36:e8:05:93:50:7e:27:c1:96:bd:e7:d2:ec:86:11:
63:aa:ce:d9:59:09:dc:9e:5f:dc:f4:b0:09:0f:87:
01:98:95:ab:79:e0:a6:63:61:89:01:c7:54:34:b6:
ac:df:1e:09:3a:96:ec:81:3d:8f:44:f7:e1:df:db:
04:bb:22:33:f6:fa:cf:66:e1:42:6e:b1:06:fd:a4:
5d:5e:09:10:4b:d8:36:04:a3:38:12:7d:16:9c:40:
e9:65:69:81:c5:07:cd:d8:96:b7:51:d3:33:af:bb:
77:1d:d7:b6:aa:a0:bf:6e:2c:ea:f7:21:3b:ce:e4:
a4:ac:df:4e:53:67:3c:af:57:b5:e5:ec:24:4a:cd:
97:a1:5d:d6:c7:a0:37:19:ca:5f:36:d7:0d:42:ea:
ae:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:C2:DB:E9:BE:74:6D:D9:27:24:9C:36:D6:44:37:E3:32:AC:C6:44
X509v3 Authority Key Identifier:
keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:9e:35:f6:0e:48:5c:78:a4:5e:ab:70:5c:aa:70:b6:dc:c8:
9c:2c:53:ce:fb:7f:a7:6e:83:a5:cc:90:d5:6b:9e:d5:b3:f6:
d1:b2:b5:fd:ff:f3:52:cb:2c:71:48:e9:67:7d:b7:5c:8a:13:
9f:a3:ee:c9:c1:6d:2c:9e:1e:8d:e7:5c:8c:af:46:6e:9b:44:
7e:a8:94:e6:d6:26:10:b7:b3:94:2a:11:47:ab:e5:72:e3:b8:
d5:e8:ce:a4:31:34:f4:b8:cb:ae:ae:79:b8:2c:74:66:4a:a2:
d8:9c:2a:54:bf:1b:97:b5:65:a7:85:b9:11:a9:27:75:7f:d4:
8e:95:3b:d0:e0:08:1a:61:4f:a8:3f:d3:ed:d3:de:1e:0d:5b:
1b:64:f2:a4:7e:52:52:6d:2b:4e:f2:41:95:03:09:96:c1:8d:
04:73:67:06:58:c9:24:9e:41:58:4c:d2:41:ce:ba:9b:f7:91:
b7:6f:a0:7c:60:20:20:a1:c4:2a:e2:97:ed:fe:c6:e1:40:a2:
e1:6f:61:a5:a0:b6:2c:dc:a7:9d:0c:d5:27:13:92:45:b8:d0:
ee:76:56:50:c1:a8:a6:59:33:44:ca:5f:22:f3:91:22:34:18:
9b:9a:79:aa:97:d8:77:63:d2:77:8e:09:41:e7:05:16:a0:ec:
e7:d8:df:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 19:54:50 2026 by rpki-client