Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
File: t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft (raw, json)
Hash identifier: ePjks4bNIftvgDrCc72+dOsTJdL3iqyoh7CN4Er1hhQ=
Subject key identifier: 31:52:BF:9B:85:C6:B9:E4:7F:35:B4:72:12:BD:5D:51:74:2D:93:20
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Certificate issuer: /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial: 01A17995B6A4065708E6744E1DCAFCF95AB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
Manifest number: 1AC9
Signing time: Mon 26 Oct 2026 19:00:17 +0000
Manifest this update: Mon 26 Oct 2026 19:00:17 +0000
Manifest next update: Tue 27 Oct 2026 19:00:17 +0000
Files and hashes: 1: PRNpmNoXJBIoF9gh578wEhtMpdQ.roa (hash: g9ylBrvDhSOD9y5ykNiZEjQPUeqbZ/uKUmYrg55Kn+I=)
2: iE0cS-gjGQ2wH2CEFbUXZzlClEs.roa (hash: zt5rLB2IKmjF4fOUcKb7lO1SdJgaIMds/uhpaf0hUX0=)
3: t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl (hash: gt+zuA5in8TQkPNhwh7GBe5HntdPpZA1FguBx4lBYdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:95:b6:a4:06:57:08:e6:74:4e:1d:ca:fc:f9:5a:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Validity
Not Before: Oct 26 19:00:17 2026 GMT
Not After : Oct 27 19:00:17 2026 GMT
Subject: CN=3152bf9b85c6b9e47f35b47212bd5d51742d9320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:52:7e:57:64:e1:64:d2:ea:0f:61:60:61:22:
e1:5b:61:0d:f6:62:f8:7d:f6:88:58:46:20:11:be:
ed:4b:41:46:5b:81:8b:b9:06:98:c4:cc:38:ba:ac:
4f:2b:07:a3:be:78:d3:57:6b:6c:83:75:80:7f:e4:
65:f2:5a:be:39:67:de:ff:cd:88:a4:55:6e:36:6c:
94:09:6d:e0:52:97:4f:11:ad:7a:e8:83:70:2a:5b:
4d:ab:6f:1b:7b:29:c2:66:7e:72:e1:45:88:3d:b4:
54:20:2c:77:43:31:a5:3f:94:87:12:f5:da:22:32:
b6:ff:af:48:21:47:7b:35:80:96:57:59:51:08:0c:
21:15:25:8e:6a:91:c4:59:49:de:3f:87:69:c5:81:
23:61:06:65:57:cc:e5:5d:ab:de:4b:3a:59:8c:43:
09:95:c5:bf:00:dd:de:05:00:53:92:d6:54:7c:98:
9b:5c:65:4d:27:c9:e6:23:69:fe:db:66:79:8a:77:
6c:6c:b6:c4:fe:fa:ff:c8:3f:df:60:57:c2:28:60:
59:f6:91:2e:12:92:fd:b2:9a:7a:84:41:01:d9:88:
fe:99:b5:31:c2:a6:8a:4e:f7:57:32:e2:35:70:dd:
84:81:e6:18:8f:58:3f:47:e2:33:56:b2:05:b8:f6:
3e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:52:BF:9B:85:C6:B9:E4:7F:35:B4:72:12:BD:5D:51:74:2D:93:20
X509v3 Authority Key Identifier:
keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:d8:24:f1:7b:b3:3e:c2:e4:b8:8d:7c:6e:6c:04:3c:76:c6:
d8:d9:67:b8:0e:b4:63:2a:d3:aa:31:f1:c8:2c:9e:50:cc:c9:
5e:cf:81:41:bb:e2:03:99:90:00:68:21:16:0d:4e:cc:8f:be:
67:40:78:b5:d3:38:36:5b:cc:9e:6e:36:c8:c9:6e:87:ab:49:
6d:ca:db:c5:4c:1e:e9:72:05:01:3c:88:a7:52:8b:dd:53:ac:
30:1a:88:2f:c2:c9:19:19:8d:bf:4a:5a:c0:7b:66:69:40:96:
b0:13:ed:a6:ee:23:08:f0:64:bf:59:c6:da:ed:6f:50:de:86:
df:62:8a:f4:a1:23:aa:aa:ea:83:9a:63:42:49:77:11:bb:1a:
c1:bd:1d:cf:c8:cb:f3:64:e5:36:22:c2:88:bc:43:4d:b7:e8:
9a:ed:90:07:18:4e:3b:31:d5:06:14:c5:59:b4:0c:75:f2:31:
c2:61:70:69:ca:74:7e:4e:c9:cf:7b:2a:38:c2:26:cb:69:3b:
5a:c3:5e:36:ef:20:c7:fd:9f:a5:27:1e:c0:af:41:e8:3d:8e:
1d:fe:e1:95:94:be:87:78:15:ba:00:91:22:b6:e8:b5:b3:ab:
d9:e5:aa:b8:e1:70:95:d5:07:31:0f:03:93:a4:71:16:7e:14:
71:0c:24:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 04:41:32 2026 by rpki-client