Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
File: t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft (raw, json)
Hash identifier: u4XPzH8AJ2RliFyfXWVfx4/kQrpgj62WSgAngF4UpjQ=
Subject key identifier: D5:8B:06:65:1A:01:FB:12:3D:B1:FC:56:71:A1:CF:6E:5E:02:7A:D9
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Certificate issuer: /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial: 01A0581EEE327E5281B5567E6E27B718CFAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
Manifest number: 1A32
Signing time: Mon 31 Aug 2026 14:00:17 +0000
Manifest this update: Mon 31 Aug 2026 14:00:17 +0000
Manifest next update: Tue 01 Sep 2026 14:00:17 +0000
Files and hashes: 1: 3PZtOtEP32pxmagHDWpHuXtCCRc.roa (hash: bpJEOxuRCU5ZgS5FbAAwutvMDXKwEbHigoSaJaf1e2M=)
2: TZEmLmroEs6IRm7BIRkKTFCJTnA.roa (hash: QhC3msm1fXEe5FbZInDyO6caWrevlSV8+0GhYVm+mSE=)
3: iE0cS-gjGQ2wH2CEFbUXZzlClEs.roa (hash: zt5rLB2IKmjF4fOUcKb7lO1SdJgaIMds/uhpaf0hUX0=)
4: t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl (hash: 7mn76lrx0g3Wy4+Iwc97+6Sgq5c/oVbxcpJ/HgxlERw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 14:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:58:1e:ee:32:7e:52:81:b5:56:7e:6e:27:b7:18:cf:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Validity
Not Before: Aug 31 14:00:17 2026 GMT
Not After : Sep 1 14:00:17 2026 GMT
Subject: CN=d58b06651a01fb123db1fc5671a1cf6e5e027ad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b2:10:76:ea:bf:f6:ba:84:c9:a2:f9:33:64:
1f:19:72:d8:37:3d:c9:18:97:68:86:13:6e:4d:83:
04:d7:79:8f:5e:84:32:1a:41:0d:9c:6b:26:aa:f2:
80:27:35:04:f3:f6:0c:d0:31:54:7b:73:fe:2f:2b:
09:9d:8b:6a:9b:cb:c8:14:e6:db:11:6c:eb:6d:b0:
e0:01:56:76:da:1d:a4:c2:17:f1:5c:dd:42:61:5c:
cc:10:42:16:e6:68:12:b1:78:db:32:c9:30:b1:9d:
d1:fb:8a:97:a4:e0:03:23:67:5d:be:6d:7b:f2:45:
00:1a:3d:1c:cc:a5:8c:cb:5a:61:67:a3:3b:fc:c3:
7d:24:3c:00:67:98:c0:05:92:49:64:ff:bf:68:71:
16:bd:b1:28:e2:e4:e7:1a:5a:72:23:1d:9a:64:10:
3e:7a:dd:aa:83:96:be:11:75:80:57:e8:79:37:d0:
d5:2e:52:88:6b:ef:48:43:33:17:5d:94:b4:74:33:
10:9b:e5:e9:e1:7a:8b:a6:05:45:c5:e2:8a:3d:65:
73:8f:74:5b:43:10:60:59:9e:88:07:34:af:60:0d:
3a:d2:c9:e9:d8:cf:ff:f2:56:e2:65:72:33:3f:ce:
53:a1:48:8e:00:89:45:03:26:40:0d:b5:7a:2b:d1:
06:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:8B:06:65:1A:01:FB:12:3D:B1:FC:56:71:A1:CF:6E:5E:02:7A:D9
X509v3 Authority Key Identifier:
keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:06:cd:2f:7e:34:fd:e4:bf:83:2d:63:a3:f2:5f:d9:0e:92:
c4:be:9e:49:65:62:bc:09:06:8a:d5:1b:9d:a8:6b:9e:98:f9:
2e:98:8c:f7:a8:5b:f6:1b:7d:51:03:7f:39:1f:ad:2e:1b:a8:
78:bf:5e:83:b9:fa:ec:e8:7c:00:b9:3f:c7:5c:50:cb:ce:74:
8d:39:f0:2d:30:eb:7a:01:08:32:0b:07:d4:24:12:69:d8:40:
39:2e:f1:4a:e2:18:77:a1:68:5c:75:1e:63:d4:a0:a0:88:f2:
5e:e3:75:3d:10:93:cb:7b:86:13:76:8e:67:cf:47:d6:d9:57:
7b:ad:dd:9a:06:b7:f8:e7:ad:b4:ff:14:be:fa:08:46:33:33:
70:26:b1:14:5c:37:fc:94:b5:b8:be:f7:45:7f:be:64:54:e5:
c9:3b:9b:f6:71:5d:a2:d3:4f:ba:30:83:cd:d0:9a:59:34:9b:
f0:cb:be:29:41:1d:54:dd:2d:a2:41:22:ae:c6:65:fe:7d:0c:
63:8c:90:0c:c9:8a:07:dd:ff:67:39:8a:b4:43:20:51:15:77:
7d:9f:2b:a6:68:27:3d:29:70:73:64:75:ce:d0:77:f0:22:2c:
5b:9b:74:4e:53:b9:55:ae:61:dc:ba:47:ee:67:2b:d5:55:d3:
54:f3:3a:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBYHu4yflKBtVZ+bie3GM+tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3NWEwNTY2ZDBiNjNhMWY4NjJkODM0NThlNGYyZWE2ZmQ4
ZjdkMjEwHhcNMjYwODMxMTQwMDE3WhcNMjYwOTAxMTQwMDE3WjAzMTEwLwYDVQQD
EyhkNThiMDY2NTFhMDFmYjEyM2RiMWZjNTY3MWExY2Y2ZTVlMDI3YWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2LIQduq/9rqEyaL5M2QfGXLYNz3J
GJdohhNuTYME13mPXoQyGkENnGsmqvKAJzUE8/YM0DFUe3P+LysJnYtqm8vIFObb
EWzrbbDgAVZ22h2kwhfxXN1CYVzMEEIW5mgSsXjbMskwsZ3R+4qXpOADI2ddvm17
8kUAGj0czKWMy1phZ6M7/MN9JDwAZ5jABZJJZP+/aHEWvbEo4uTnGlpyIx2aZBA+
et2qg5a+EXWAV+h5N9DVLlKIa+9IQzMXXZS0dDMQm+Xp4XqLpgVFxeKKPWVzj3Rb
QxBgWZ6IBzSvYA060snp2M//8lbiZXIzP85ToUiOAIlFAyZADbV6K9EGzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNWLBmUaAfsSPbH8VnGhz25eAnrZMB8GA1UdIwQY
MBaAFLdaBWbQtjofhi2DRY5PLqb9j30hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDFvRlp0QzJPaC1HTFlORmprOHVwdjJQZlNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8xMDM1NzAtMWNmNi00MmFjLTgxZDQt
ODNmNjAxYzNmYjU5LzEvdDFvRlp0QzJPaC1HTFlORmprOHVwdjJQZlNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi8xMDM1NzAtMWNmNi00MmFjLTgxZDQtODNmNjAxYzNmYjU5
LzEvdDFvRlp0QzJPaC1HTFlORmprOHVwdjJQZlNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYwbNL340
/eS/gy1jo/Jf2Q6SxL6eSWVivAkGitUbnahrnpj5LpiM96hb9ht9UQN/OR+tLhuo
eL9eg7n67Oh8ALk/x1xQy850jTnwLTDregEIMgsH1CQSadhAOS7xSuIYd6FoXHUe
Y9SgoIjyXuN1PRCTy3uGE3aOZ89H1tlXe63dmga3+OettP8UvvoIRjMzcCaxFFw3
/JS1uL73RX++ZFTlyTub9nFdotNPujCDzdCaWTSb8Mu+KUEdVN0tokEirsZl/n0M
Y4yQDMmKB93/ZzmKtEMgURV3fZ8rpmgnPSlwc2R1ztB38CIsW5t0TlO5Va5h3LpH
7mcr1VXTVPM6wQ==
-----END CERTIFICATE-----
Generated at Mon Aug 31 21:48:24 2026 by rpki-client