Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
File: t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft (raw, json)
Hash identifier: Tv3/zqZ9yj67jSD3y8H3+sBQHWPunIz+GqTUARyxCtg=
Subject key identifier: B5:38:B6:DF:F6:FD:28:70:7E:69:CC:99:2C:A6:FC:AD:94:6A:1A:6E
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Certificate issuer: /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial: 01A009603584BB765670132676B33DBA32C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
Manifest number: 1A09
Signing time: Sun 16 Aug 2026 07:01:35 +0000
Manifest this update: Sun 16 Aug 2026 07:01:35 +0000
Manifest next update: Mon 17 Aug 2026 07:01:35 +0000
Files and hashes: 1: 2MSpCLbIJT_dNS85cUQH7P6hQQQ.roa (hash: LqxKJfwKg1vJNoy6niHI6Ay0t/ibwSsUhqanJ+kZvVg=)
2: TZEmLmroEs6IRm7BIRkKTFCJTnA.roa (hash: QhC3msm1fXEe5FbZInDyO6caWrevlSV8+0GhYVm+mSE=)
3: XKyWf4Y6NjYLpXjJG8NNu1YgV8I.roa (hash: Wg/rYioLK0eT7zXUczkOHExRo3EIegYLBIdXxr8Hp88=)
4: t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl (hash: JgaIczJ7CwRyIhWI1BATYxfsDKq2LKe6iQphigoCN8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Aug 2026 06:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:09:60:35:84:bb:76:56:70:13:26:76:b3:3d:ba:32:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Validity
Not Before: Aug 16 07:01:35 2026 GMT
Not After : Aug 17 07:01:35 2026 GMT
Subject: CN=b538b6dff6fd28707e69cc992ca6fcad946a1a6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ba:cb:d6:a3:c5:38:e0:86:d0:c1:38:40:db:
db:7c:a6:ad:c6:33:91:e8:00:9f:eb:fd:cf:6b:9f:
1e:bd:17:7f:cc:0b:c3:f7:ae:78:fc:a8:ef:b5:b6:
25:4c:db:13:73:21:87:69:e1:e5:c6:14:18:70:03:
ee:55:ca:3d:69:34:3d:6c:8f:1d:52:73:e8:05:95:
49:84:46:03:ea:b1:ed:49:28:43:a4:60:62:b7:2d:
e8:55:7a:46:01:eb:10:d2:2a:a9:49:6f:31:0b:c1:
75:db:a9:ab:5c:fc:53:ee:84:54:c4:10:d1:be:15:
6b:75:ea:a7:ce:d5:ac:bc:b7:ea:4a:d5:60:84:3f:
c9:19:2f:8d:00:eb:28:f4:a1:f8:19:c9:01:e4:4c:
99:8b:db:cc:5e:d2:4c:b0:ef:77:20:2c:11:ad:19:
bc:40:27:e6:aa:79:e2:d9:a8:47:ce:37:08:dd:af:
6a:9e:86:18:2b:bb:56:74:f5:ae:bc:46:fd:1f:be:
0d:2f:64:65:fb:6f:73:3e:50:9b:1b:cf:88:c8:fe:
4f:19:47:1c:32:44:b5:82:07:6d:d9:f0:6e:ae:c4:
95:3e:4a:a4:93:ea:d2:4b:c6:da:f6:95:a1:13:47:
62:7d:4d:88:ee:61:51:0d:db:24:02:40:ec:14:cd:
b9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:38:B6:DF:F6:FD:28:70:7E:69:CC:99:2C:A6:FC:AD:94:6A:1A:6E
X509v3 Authority Key Identifier:
keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:09:4c:69:df:4e:01:3e:06:48:6a:e2:2e:7f:e0:0d:69:e6:
56:fd:9f:76:8e:65:37:d2:10:b1:05:49:1b:de:dc:ab:ca:90:
b0:51:ab:6e:68:00:4e:f5:f5:c6:79:12:00:6b:da:16:f5:8d:
53:20:23:5b:26:a2:a4:88:70:26:45:72:9e:c0:ce:b1:f2:cc:
13:ee:fb:50:f3:b4:e1:4a:6b:14:87:df:aa:b4:7d:5d:10:12:
d3:5e:9d:0c:91:00:5f:ab:5d:da:dd:52:c9:34:2f:b0:c6:7a:
b4:f2:4f:79:26:9f:f8:c3:2a:9a:d8:52:3a:c0:1e:2f:e3:80:
39:e3:f3:a8:4c:d6:4d:a8:b4:cd:d9:96:10:df:d3:06:1d:ef:
cb:46:84:ef:92:8e:c2:ef:e1:27:dd:c0:cb:3c:af:4b:9f:65:
08:38:7c:b1:f1:8b:a4:11:9b:f6:cd:de:53:2d:d9:24:cc:a2:
5e:7f:d5:dc:c6:2c:77:1c:05:ab:f0:d5:f2:f1:72:0c:21:2d:
54:5c:26:53:e5:e9:8c:d1:f5:0b:4e:47:c3:5b:89:bf:5e:7d:
0d:8c:0d:6d:38:7f:7b:ac:ad:1c:e2:2f:d8:15:70:3e:d8:2e:
c0:77:43:7f:16:01:c5:dd:54:4c:6c:d0:bb:27:17:9d:9f:8a:
48:db:72:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 16 08:16:18 2026 by rpki-client