Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
File: t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft (raw, json)
Hash identifier: LOQMiMpiA2epcJrfyJvnh2KaKz+vxTjJ+S0+ROnKK1M=
Subject key identifier: 27:88:85:18:ED:DA:A1:D0:71:D9:8F:07:1D:9E:AE:6D:C8:16:E8:BB
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Certificate issuer: /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial: 019F841E7511BD35668F70D6DFB13F86E9D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
Manifest number: 19C4
Signing time: Tue 21 Jul 2026 10:00:16 +0000
Manifest this update: Tue 21 Jul 2026 10:00:16 +0000
Manifest next update: Wed 22 Jul 2026 10:00:16 +0000
Files and hashes: 1: 2MSpCLbIJT_dNS85cUQH7P6hQQQ.roa (hash: LqxKJfwKg1vJNoy6niHI6Ay0t/ibwSsUhqanJ+kZvVg=)
2: TZEmLmroEs6IRm7BIRkKTFCJTnA.roa (hash: QhC3msm1fXEe5FbZInDyO6caWrevlSV8+0GhYVm+mSE=)
3: XKyWf4Y6NjYLpXjJG8NNu1YgV8I.roa (hash: Wg/rYioLK0eT7zXUczkOHExRo3EIegYLBIdXxr8Hp88=)
4: t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl (hash: p5UQdhOoUaZujDE52BA/SgAatedJO8urvFJXzx6OUgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 10:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:1e:75:11:bd:35:66:8f:70:d6:df:b1:3f:86:e9:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Validity
Not Before: Jul 21 10:00:16 2026 GMT
Not After : Jul 22 10:00:16 2026 GMT
Subject: CN=27888518eddaa1d071d98f071d9eae6dc816e8bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:26:26:5f:4a:7f:bd:4a:0b:8e:d3:13:c8:2e:
b6:f3:b3:35:20:09:79:54:e5:da:89:19:14:86:ff:
5b:e9:2c:b2:38:bd:b1:f2:e4:64:1d:cc:ce:aa:6d:
7e:03:7b:a8:f4:f6:d8:50:9a:c0:c1:17:b6:d0:ee:
49:5b:a1:4c:1e:86:71:35:03:10:40:1c:ae:b1:78:
ef:df:8f:f5:e8:81:6c:9f:4f:d6:b5:e1:da:61:15:
9b:f8:65:13:53:30:f5:ef:b6:d0:4e:27:d1:d6:8f:
dd:3f:6d:ac:08:3a:ec:5f:35:73:d1:1c:b3:ff:3e:
86:44:e5:3c:eb:96:fb:da:73:47:be:31:c3:f1:b0:
64:e5:5e:28:8f:0a:dc:2a:dd:d3:45:4e:1c:ee:ad:
7d:e9:b4:75:86:40:2f:01:64:3d:b4:e9:aa:d1:3c:
b4:92:3d:51:a6:96:6c:9a:8d:23:33:a2:92:57:08:
51:78:72:dd:f0:ce:f1:3f:62:e6:40:fa:2b:2e:1d:
9b:70:9d:a4:c6:0c:eb:cc:1e:64:89:eb:f7:33:27:
c4:03:4b:5a:85:86:f6:99:38:30:49:d9:95:c6:30:
3c:95:5a:bf:00:ec:f0:99:da:e4:aa:97:85:e9:f0:
cc:f3:71:82:5b:e2:d5:35:84:4f:68:be:e1:d0:b1:
91:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:88:85:18:ED:DA:A1:D0:71:D9:8F:07:1D:9E:AE:6D:C8:16:E8:BB
X509v3 Authority Key Identifier:
keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:6e:14:c4:bb:18:71:61:36:4a:67:17:6d:bd:8e:ae:fe:33:
a9:17:e7:bd:b4:ba:3e:02:d5:14:27:a0:55:17:9f:ac:00:82:
2c:72:1d:03:8b:e7:b3:55:1e:56:68:68:97:88:60:64:86:85:
e0:27:a1:00:39:de:63:57:f5:51:83:c0:d2:3a:12:9d:54:18:
b1:b0:b3:b0:99:f5:2c:1e:bc:bf:4b:22:cb:ef:4c:c0:9e:d6:
d3:53:3f:a6:5f:10:e1:c0:69:c4:ad:ba:e3:fa:26:9d:96:6c:
dc:91:d2:7a:0f:21:f3:38:f0:20:46:3b:35:bc:d1:d2:8d:aa:
1d:4a:f1:19:f9:b1:cc:ef:5c:44:b2:e6:36:49:dc:10:ca:b3:
aa:a1:b4:a9:4d:96:93:24:1f:6e:f7:a9:ab:c9:01:78:eb:61:
d3:7c:29:18:79:0e:3b:27:24:26:81:03:59:51:a2:cd:09:5d:
02:7c:42:a3:bd:5a:43:c4:0c:b7:7e:d0:cc:77:6c:65:97:05:
4e:c0:9f:0c:48:5a:b0:7b:8a:cb:1f:89:22:68:5e:a5:8b:c7:
89:21:b5:94:44:33:59:3e:ab:fe:36:64:01:4c:a8:28:87:b7:
d0:b3:cb:50:9f:7e:b4:85:d7:81:b3:85:e4:59:82:31:bb:54:
5d:7b:81:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+EHnURvTVmj3DW37E/hunTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3NWEwNTY2ZDBiNjNhMWY4NjJkODM0NThlNGYyZWE2ZmQ4
ZjdkMjEwHhcNMjYwNzIxMTAwMDE2WhcNMjYwNzIyMTAwMDE2WjAzMTEwLwYDVQQD
EygyNzg4ODUxOGVkZGFhMWQwNzFkOThmMDcxZDllYWU2ZGM4MTZlOGJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyYmX0p/vUoLjtMTyC6287M1IAl5
VOXaiRkUhv9b6SyyOL2x8uRkHczOqm1+A3uo9PbYUJrAwRe20O5JW6FMHoZxNQMQ
QByusXjv34/16IFsn0/WteHaYRWb+GUTUzD177bQTifR1o/dP22sCDrsXzVz0Ryz
/z6GROU865b72nNHvjHD8bBk5V4ojwrcKt3TRU4c7q196bR1hkAvAWQ9tOmq0Ty0
kj1RppZsmo0jM6KSVwhReHLd8M7xP2LmQPorLh2bcJ2kxgzrzB5kiev3MyfEA0ta
hYb2mTgwSdmVxjA8lVq/AOzwmdrkqpeF6fDM83GCW+LVNYRPaL7h0LGRVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCeIhRjt2qHQcdmPBx2erm3IFui7MB8GA1UdIwQY
MBaAFLdaBWbQtjofhi2DRY5PLqb9j30hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDFvRlp0QzJPaC1HTFlORmprOHVwdjJQZlNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8xMDM1NzAtMWNmNi00MmFjLTgxZDQt
ODNmNjAxYzNmYjU5LzEvdDFvRlp0QzJPaC1HTFlORmprOHVwdjJQZlNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi8xMDM1NzAtMWNmNi00MmFjLTgxZDQtODNmNjAxYzNmYjU5
LzEvdDFvRlp0QzJPaC1HTFlORmprOHVwdjJQZlNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE24UxLsY
cWE2SmcXbb2Orv4zqRfnvbS6PgLVFCegVRefrACCLHIdA4vns1UeVmhol4hgZIaF
4CehADneY1f1UYPA0joSnVQYsbCzsJn1LB68v0siy+9MwJ7W01M/pl8Q4cBpxK26
4/omnZZs3JHSeg8h8zjwIEY7NbzR0o2qHUrxGfmxzO9cRLLmNkncEMqzqqG0qU2W
kyQfbvepq8kBeOth03wpGHkOOyckJoEDWVGizQldAnxCo71aQ8QMt37QzHdsZZcF
TsCfDEhasHuKyx+JImhepYvHiSG1lEQzWT6r/jZkAUyoKIe30LPLUJ9+tIXXgbOF
5FmCMbtUXXuBmw==
-----END CERTIFICATE-----
Generated at Tue Jul 21 19:52:14 2026 by rpki-client