Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
File: t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft (raw, json)
Hash identifier: R9mTiWDs5rhqLphykKUpc3zR2qSF9yqHoFa4I1q47MI=
Subject key identifier: 99:14:BD:B0:45:01:6A:B8:79:2C:17:4E:B5:BC:39:0E:12:EF:F6:CA
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Certificate issuer: /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial: 01A13BC98591A316F5D6FA45BB44E309F0C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
Manifest number: 1AA9
Signing time: Wed 14 Oct 2026 19:00:24 +0000
Manifest this update: Wed 14 Oct 2026 19:00:24 +0000
Manifest next update: Thu 15 Oct 2026 19:00:24 +0000
Files and hashes: 1: PRNpmNoXJBIoF9gh578wEhtMpdQ.roa (hash: g9ylBrvDhSOD9y5ykNiZEjQPUeqbZ/uKUmYrg55Kn+I=)
2: iE0cS-gjGQ2wH2CEFbUXZzlClEs.roa (hash: zt5rLB2IKmjF4fOUcKb7lO1SdJgaIMds/uhpaf0hUX0=)
3: t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl (hash: NYm/X/Ef6HCB9l+sVYMGyZvA2ooTXjcDpeoQPReWiTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 14:43:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3b:c9:85:91:a3:16:f5:d6:fa:45:bb:44:e3:09:f0:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Validity
Not Before: Oct 14 19:00:24 2026 GMT
Not After : Oct 15 19:00:24 2026 GMT
Subject: CN=9914bdb045016ab8792c174eb5bc390e12eff6ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fe:9b:a2:47:f7:55:31:f7:f7:54:9a:f0:b6:
eb:6e:45:37:6d:30:5d:d7:2f:61:0c:8e:b1:7e:da:
c9:c7:d4:b1:86:97:02:7d:d3:62:da:f1:f9:12:43:
40:25:ee:0f:a8:89:f6:24:cd:8c:f9:ee:0f:1a:0d:
84:97:8c:56:d1:0d:e2:58:71:9b:ff:54:f6:64:a5:
52:34:58:07:d5:b6:d8:9f:a2:e9:08:6f:f0:72:70:
a9:57:a7:89:12:39:dd:6e:3b:d9:40:56:2f:6b:3f:
7f:aa:a7:80:a1:44:5f:8d:4d:7f:43:c0:7c:d3:b7:
0d:5f:59:f0:c5:83:dc:aa:7c:e1:29:78:61:2d:a6:
49:81:2f:c2:d7:53:30:8d:94:70:41:46:56:87:fe:
7e:79:67:ba:f1:ce:00:f6:46:af:40:8a:9f:f7:1b:
3c:f1:4f:4f:49:f8:b1:ab:6e:29:1c:0e:e3:82:18:
96:ed:88:b5:d8:cb:10:fe:43:2c:70:7c:3c:9b:78:
4e:e0:4d:e8:9c:f9:ce:70:36:6a:d9:6a:54:1e:89:
e7:17:a4:f4:3d:7f:14:7d:8e:6d:63:af:b8:f0:f5:
de:fe:80:56:e0:d6:a5:aa:b0:b4:cb:25:34:8c:d9:
53:fd:91:da:99:2b:b4:0f:c4:96:dd:47:ee:c4:92:
cf:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:14:BD:B0:45:01:6A:B8:79:2C:17:4E:B5:BC:39:0E:12:EF:F6:CA
X509v3 Authority Key Identifier:
keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:30:36:e9:58:d0:83:97:bf:95:cf:0e:1f:8e:bc:3b:d8:55:
69:c3:a8:e0:d9:bb:fc:ce:3f:90:62:e0:97:8b:5d:10:99:bc:
9f:15:09:06:8b:11:87:b6:d9:af:a2:9b:2f:55:c1:a5:1a:b3:
55:98:57:d3:40:52:ae:e2:1b:fe:51:34:ad:35:f2:a9:81:70:
18:28:fa:e5:90:1f:bf:53:08:47:a3:f5:28:8a:14:a6:7b:96:
24:be:fd:ea:c9:52:36:fe:e7:2f:f9:d4:e4:90:04:b3:61:6c:
ed:e1:5c:2c:3d:01:16:ce:e1:81:c0:2c:3b:f8:54:b9:29:1d:
14:d0:7c:c0:47:09:15:a3:d5:9c:4e:cc:94:f6:f9:55:30:a4:
08:19:22:d6:9b:53:f6:b0:39:f8:ef:7f:e7:ab:50:b6:be:78:
3d:7a:32:3e:88:4b:8b:3f:98:45:45:10:cf:67:0d:93:35:db:
08:11:ee:ae:2d:7d:41:54:e8:23:7f:a9:6e:81:1d:ca:a1:0d:
60:df:b9:10:43:ba:7b:3f:4e:ed:17:a9:09:e5:8c:dc:ce:90:
5e:0e:d7:d0:fc:cf:f0:c1:ab:a2:4c:6c:7f:3b:65:5d:5e:83:
b4:0c:4e:3a:02:f6:17:c1:31:4a:05:6e:b4:60:e2:5e:12:f3:
96:c2:19:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 21:19:03 2026 by rpki-client