Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
File: t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft (raw, json)
Hash identifier: Ywpz7tlD7QT4QMZvFzywa6La5FUhV4jDBqhoA+LxDoE=
Subject key identifier: EE:AC:CD:42:7F:56:6B:74:8D:B6:5B:B6:76:09:48:8C:BE:ED:67:E2
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Certificate issuer: /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial: 01A1287A066B077B3D03846E9A2488C39CF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
Manifest number: 1A9F
Signing time: Sun 11 Oct 2026 01:00:47 +0000
Manifest this update: Sun 11 Oct 2026 01:00:47 +0000
Manifest next update: Mon 12 Oct 2026 01:00:47 +0000
Files and hashes: 1: PRNpmNoXJBIoF9gh578wEhtMpdQ.roa (hash: g9ylBrvDhSOD9y5ykNiZEjQPUeqbZ/uKUmYrg55Kn+I=)
2: iE0cS-gjGQ2wH2CEFbUXZzlClEs.roa (hash: zt5rLB2IKmjF4fOUcKb7lO1SdJgaIMds/uhpaf0hUX0=)
3: t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl (hash: 2YE0tM9x1XLGE/e1uRXT9TaXY5rFAa1g5Rs5H3DrAoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:7a:06:6b:07:7b:3d:03:84:6e:9a:24:88:c3:9c:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Validity
Not Before: Oct 11 01:00:47 2026 GMT
Not After : Oct 12 01:00:47 2026 GMT
Subject: CN=eeaccd427f566b748db65bb67609488cbeed67e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ca:f7:8b:87:ab:ec:ac:6b:a7:20:2b:66:b1:
d2:50:f3:2b:49:88:fd:3c:a0:61:9e:1a:f5:e0:40:
53:c7:dc:31:86:1e:7d:44:dc:ec:dc:0a:ec:66:e2:
93:0f:3f:a3:11:71:18:e7:f9:b6:63:02:d6:50:df:
77:d3:18:08:c8:e5:a9:75:19:af:4f:e1:db:e0:a1:
4b:9d:2f:f7:ac:a6:54:b0:5e:ea:60:5f:0d:92:1a:
40:fe:59:26:9b:7f:5b:8a:09:ab:00:c6:71:38:db:
8b:03:dc:4d:83:df:88:95:2f:36:da:6f:09:76:c4:
0c:60:0e:3f:10:f7:53:9f:61:3a:e8:0f:de:c5:81:
2e:ed:c1:f5:99:b7:21:3d:65:aa:26:5b:f0:a9:0b:
79:fb:4a:d3:7b:98:f0:87:b5:d5:f1:22:9a:af:91:
f9:9d:14:1e:80:cd:09:41:b8:82:61:53:83:a2:84:
6c:b6:1d:b3:92:bb:3b:c1:8e:f8:52:63:1e:80:9a:
67:b1:2f:8d:a4:f7:36:bd:39:c4:11:aa:75:ad:a3:
b4:ef:71:4e:5d:77:a1:a1:61:23:74:e6:22:11:36:
e2:ae:2b:62:70:95:4f:71:33:08:67:d3:2c:e0:f7:
5d:ea:40:9a:36:5f:28:a5:74:d4:5f:86:cb:bc:a5:
5a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:AC:CD:42:7F:56:6B:74:8D:B6:5B:B6:76:09:48:8C:BE:ED:67:E2
X509v3 Authority Key Identifier:
keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:7f:41:21:41:49:25:75:dd:ae:30:6d:24:ee:36:4a:b1:df:
68:25:dc:df:bb:f7:a4:76:be:61:e3:20:2b:98:09:94:be:53:
e0:fa:89:30:99:9c:d5:43:f3:6c:1b:ce:be:10:9b:6a:ef:79:
c0:0b:37:05:82:ab:c8:51:a4:7c:0d:7b:81:06:a4:26:1e:1b:
17:fc:d7:29:b4:f4:04:24:22:5f:d3:8e:26:aa:34:2c:d8:65:
c8:73:12:c1:f7:a5:80:9c:51:72:6f:07:40:c5:37:e5:44:7a:
1a:1f:43:2b:ba:45:42:9c:d5:cd:87:3d:1f:2d:a8:49:00:5e:
51:2e:ee:2b:39:c0:1e:1c:de:7b:16:2e:6c:ae:17:b5:10:9a:
37:cf:b9:16:52:3d:64:55:8b:61:6b:4b:1c:1e:ac:4f:77:b3:
3a:70:d5:e5:46:36:67:e0:e1:63:70:12:f3:dc:05:19:01:cf:
d5:e4:96:45:4c:e9:25:5a:19:02:68:68:e9:fb:c4:ce:07:0f:
e6:d7:d5:8d:16:1b:6c:49:50:1f:4d:45:87:09:8d:4d:12:65:
bd:c1:5a:7e:bb:72:e9:6f:84:de:40:51:35:c4:b3:ac:54:e6:
82:7a:8f:c8:99:7f:1d:69:5b:d4:7e:d3:93:41:f3:d8:27:97:
58:88:9e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:51:51 2026 by rpki-client