Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
File: t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft (raw, json)
Hash identifier: 0pIrcq0gHJYuWRv12FEjJfGQRLmiobRueP7V7PdXNIM=
Subject key identifier: CF:40:14:7A:D4:E7:0E:50:D4:92:27:D9:95:20:96:92:57:6E:52:DA
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Certificate issuer: /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial: 01A078F4037B9213C28FE15EC1210AF6CDD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
Manifest number: 1A43
Signing time: Sun 06 Sep 2026 23:00:52 +0000
Manifest this update: Sun 06 Sep 2026 23:00:52 +0000
Manifest next update: Mon 07 Sep 2026 23:00:52 +0000
Files and hashes: 1: 3PZtOtEP32pxmagHDWpHuXtCCRc.roa (hash: bpJEOxuRCU5ZgS5FbAAwutvMDXKwEbHigoSaJaf1e2M=)
2: TZEmLmroEs6IRm7BIRkKTFCJTnA.roa (hash: QhC3msm1fXEe5FbZInDyO6caWrevlSV8+0GhYVm+mSE=)
3: iE0cS-gjGQ2wH2CEFbUXZzlClEs.roa (hash: zt5rLB2IKmjF4fOUcKb7lO1SdJgaIMds/uhpaf0hUX0=)
4: t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl (hash: jZrkgnaGMyyedlDCQSjyTXIZFfl2An9wgLmhrcaE4nA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Sep 2026 18:05:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:78:f4:03:7b:92:13:c2:8f:e1:5e:c1:21:0a:f6:cd:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Validity
Not Before: Sep 6 23:00:52 2026 GMT
Not After : Sep 7 23:00:52 2026 GMT
Subject: CN=cf40147ad4e70e50d49227d995209692576e52da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:09:37:12:41:c0:83:0b:98:f2:61:ed:c2:e2:
e3:b0:18:f8:74:16:ef:e3:f4:f4:b3:05:df:35:17:
e1:c2:28:de:7e:d9:51:93:12:54:12:79:14:c6:c9:
63:eb:0c:3c:81:7d:7d:33:e7:f8:f9:75:b7:19:5b:
50:eb:d3:1b:d1:dd:09:ec:47:0f:cb:3c:cb:97:4c:
09:b9:36:1a:34:10:fc:bd:40:64:3c:15:ad:74:e3:
b1:ef:aa:e2:78:73:b2:ea:ab:8a:2b:cd:5a:83:0c:
85:5a:f6:90:39:42:95:88:bb:bc:36:cb:84:ff:53:
3a:25:f4:01:aa:a2:58:c2:96:a5:67:7c:c4:8a:da:
38:cb:f2:d7:ea:7f:7f:bc:5f:c9:c6:2d:33:ef:eb:
d6:68:cb:d3:96:22:32:e1:9d:14:69:cd:03:88:e5:
fc:e4:53:5d:4d:c0:e8:7f:07:a6:c5:9b:1b:33:51:
7d:6b:dc:43:4f:a2:a1:ca:cd:86:25:4b:dc:06:7c:
7e:f2:3b:3c:c1:25:cb:19:7c:5a:b5:e0:67:5c:f3:
42:fd:63:6a:f2:5f:8f:0b:82:f8:1c:c3:b2:69:03:
74:e4:24:1b:91:c5:0a:90:9e:4e:dd:f6:85:bf:54:
c4:df:6d:30:29:45:30:62:6f:dd:91:81:54:29:0a:
25:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:40:14:7A:D4:E7:0E:50:D4:92:27:D9:95:20:96:92:57:6E:52:DA
X509v3 Authority Key Identifier:
keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:6d:13:e0:55:26:95:9c:ec:bc:df:2d:ba:50:c1:da:03:64:
15:34:77:34:c4:08:2a:82:5a:6a:9a:ec:79:98:7d:34:f4:16:
b2:a4:a3:1b:05:a8:78:5c:f5:97:1b:1a:95:ef:ce:91:25:8a:
8b:15:6c:27:8e:09:4a:db:6f:b5:66:03:9e:ad:45:93:07:8c:
08:53:72:6c:31:25:e2:ce:1d:bf:b9:6b:4d:6f:d0:6f:81:00:
37:0c:7e:10:5c:85:cb:4c:d6:dd:6a:b8:fc:d8:93:d5:63:48:
e9:d7:bb:e3:13:fd:6c:50:3c:b7:5e:37:37:3c:4d:74:ed:77:
bd:5b:f4:32:26:29:9d:31:45:d2:c6:4c:ba:54:da:af:10:cd:
03:c5:0c:84:ea:43:56:ab:17:64:55:b7:9d:45:0f:6c:cc:a0:
d4:aa:02:0a:62:49:7f:28:9f:17:de:49:6a:0f:0d:57:65:23:
a7:b7:52:05:4d:f5:4d:b2:a5:60:eb:58:ca:96:ba:8c:57:39:
15:7f:06:96:9b:5a:32:57:b1:aa:31:64:b0:84:7b:fa:cc:1f:
8d:81:e9:d3:b8:70:1a:43:e3:9c:f1:09:a5:70:00:2f:32:6e:
59:cd:92:0d:a6:5f:c6:5e:07:be:ba:ff:26:70:7c:4b:4f:87:
5d:b3:a6:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 7 02:40:08 2026 by rpki-client