Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
File: t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft (raw, json)
Hash identifier: G0heBSaSDtKQUpb71o6tyZwuivylfRFGX5k3zJngL8o=
Subject key identifier: 14:DE:19:B8:D4:AA:21:A6:08:E0:BD:32:B5:EE:07:2C:E0:65:CF:2C
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Certificate issuer: /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial: 01A0F832685A9F0680707B4DBAADA12E0D62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
Manifest number: 1A86
Signing time: Thu 01 Oct 2026 16:00:48 +0000
Manifest this update: Thu 01 Oct 2026 16:00:48 +0000
Manifest next update: Fri 02 Oct 2026 16:00:48 +0000
Files and hashes: 1: PRNpmNoXJBIoF9gh578wEhtMpdQ.roa (hash: g9ylBrvDhSOD9y5ykNiZEjQPUeqbZ/uKUmYrg55Kn+I=)
2: iE0cS-gjGQ2wH2CEFbUXZzlClEs.roa (hash: zt5rLB2IKmjF4fOUcKb7lO1SdJgaIMds/uhpaf0hUX0=)
3: t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl (hash: PkQaUIahgCq/zbHKj7Oe7oS9V+nD2YX+U/Q/v68ZqMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f8:32:68:5a:9f:06:80:70:7b:4d:ba:ad:a1:2e:0d:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Validity
Not Before: Oct 1 16:00:48 2026 GMT
Not After : Oct 2 16:00:48 2026 GMT
Subject: CN=14de19b8d4aa21a608e0bd32b5ee072ce065cf2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:94:f6:0c:07:1a:84:38:f2:c2:d8:b6:4d:15:
1f:0f:db:e2:4c:1a:8b:43:73:b5:fb:36:bf:b6:6c:
2e:56:5e:83:c4:f5:2e:d2:b8:04:c3:9f:62:78:4e:
bc:32:d8:f9:9b:95:5b:d6:79:96:35:1c:9c:e9:4f:
66:73:77:39:8b:3e:c5:79:52:dc:4d:57:90:3d:2e:
d5:5d:dc:9b:a8:c9:9f:53:e5:1e:27:16:00:45:53:
44:c8:3b:11:fd:82:b6:cc:6b:be:42:7e:42:1c:de:
d1:70:6c:bf:5b:81:a3:9d:42:51:48:16:9c:ac:ac:
17:56:20:8a:f6:aa:10:93:45:c9:6d:08:20:07:b0:
1e:c4:14:3a:ce:d3:6e:5c:00:cd:1e:02:fd:28:a3:
87:da:4d:de:ca:00:e8:8d:82:f6:9f:33:25:af:b9:
f8:64:2d:8b:30:ed:ad:b4:70:6a:21:39:8b:d7:82:
17:f5:c2:88:ae:11:e8:25:08:83:3b:14:8d:fa:28:
14:83:a1:90:b8:7a:54:85:e2:bb:75:0e:a2:53:a2:
dd:d1:1d:9e:81:e4:ee:05:d3:59:c2:d5:f1:97:19:
10:ec:54:b2:f0:19:91:16:4f:d7:1d:58:1b:10:cf:
8f:2e:12:f2:3b:93:65:e2:76:9c:02:09:af:62:22:
68:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:DE:19:B8:D4:AA:21:A6:08:E0:BD:32:B5:EE:07:2C:E0:65:CF:2C
X509v3 Authority Key Identifier:
keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:22:ef:3f:e6:00:23:aa:78:cb:89:7d:84:ea:c9:49:6c:cb:
b0:a7:7d:6c:9d:5a:23:dc:d1:83:bb:a9:0c:76:82:fa:0f:c1:
1c:40:2a:ad:c3:2e:83:80:c7:27:4a:f0:ae:bc:98:bd:50:cf:
fc:7b:3b:83:97:20:2c:0b:12:b2:82:20:5d:20:5b:c8:3e:58:
6e:1a:52:f1:c1:12:92:40:45:55:fc:76:d8:65:8e:c7:ce:19:
f8:81:11:a9:13:ec:a1:38:ea:cf:c5:fe:06:79:78:cd:6f:d4:
61:03:e5:16:46:e3:a5:0b:cf:7a:f8:1d:4b:72:13:3e:32:8e:
9a:f6:03:dd:ac:63:11:dc:d9:41:4b:7d:a1:99:7c:ba:64:f1:
2c:58:9f:d4:c6:f1:d2:67:3f:81:95:f8:c1:e3:1a:bf:69:8f:
d2:38:5c:79:29:e4:b2:5c:1f:47:6f:f9:67:a9:35:13:a1:cd:
92:7a:9d:c4:12:d1:9d:5e:d2:01:b0:dd:20:13:be:db:e3:44:
59:3a:64:b3:91:b2:d4:b7:f0:8f:34:97:64:f7:a4:5f:32:dc:
14:32:09:fe:c8:7f:79:0f:cd:b2:fa:a5:f5:1b:ad:f6:44:df:
4b:61:7d:c5:d5:27:0f:7c:c1:74:5b:d1:9d:2d:15:ae:ec:68:
cd:0a:9e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 12:27:50 2026 by rpki-client