Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
File: t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft (raw, json)
Hash identifier: 5FGfH582R9uAvWI8JJMsBOkhzXqd0d51EoyU6Pl9RTw=
Subject key identifier: FB:74:B5:D0:4F:E3:9D:AA:DE:A3:4E:DC:D5:B5:C0:95:BE:C7:C2:91
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Certificate issuer: /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial: 01A1607AFA7EEA35858F570F25BDE7BC498B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
Manifest number: 1ABC
Signing time: Wed 21 Oct 2026 22:00:34 +0000
Manifest this update: Wed 21 Oct 2026 22:00:34 +0000
Manifest next update: Thu 22 Oct 2026 22:00:34 +0000
Files and hashes: 1: PRNpmNoXJBIoF9gh578wEhtMpdQ.roa (hash: g9ylBrvDhSOD9y5ykNiZEjQPUeqbZ/uKUmYrg55Kn+I=)
2: iE0cS-gjGQ2wH2CEFbUXZzlClEs.roa (hash: zt5rLB2IKmjF4fOUcKb7lO1SdJgaIMds/uhpaf0hUX0=)
3: t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl (hash: SLD+mQejRrVbzAmHiOrPZVmJQs9E2GI540Gfw6X3fAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 18:03:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:60:7a:fa:7e:ea:35:85:8f:57:0f:25:bd:e7:bc:49:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Validity
Not Before: Oct 21 22:00:34 2026 GMT
Not After : Oct 22 22:00:34 2026 GMT
Subject: CN=fb74b5d04fe39daadea34edcd5b5c095bec7c291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c4:f3:74:c6:e3:8e:28:78:3a:6d:23:6c:46:
fb:ef:0c:32:66:81:9c:2c:2f:62:fc:c3:3e:89:5f:
d7:ac:b4:b5:d6:08:22:ac:df:fc:22:60:a3:df:e7:
91:72:18:73:4d:cb:f8:b0:e9:80:4d:79:8e:79:64:
fc:fe:7d:0b:1b:24:52:3a:94:18:28:b2:7c:6a:74:
65:4e:01:e1:a9:ea:be:2a:47:63:73:e7:12:48:a9:
a0:ff:4e:55:98:e1:b7:d0:75:f0:9d:4b:97:65:dc:
9e:cf:d8:2d:0b:07:56:e2:00:b5:11:8b:62:cc:09:
63:71:36:95:2e:04:ce:38:19:33:af:f0:75:7c:f6:
65:34:28:eb:a2:d5:04:db:d7:ed:12:47:a7:18:49:
c5:20:7b:07:76:65:e6:f0:94:78:d2:2c:b9:5e:31:
7e:ca:6c:57:ab:e4:b5:b4:38:a1:b1:66:86:e9:f6:
f7:ff:a4:25:f9:75:5a:d5:bb:dc:e7:7e:d8:a6:bb:
64:7e:72:bc:7b:dd:31:9d:7a:3e:b9:20:89:23:6b:
85:32:13:de:46:74:69:b8:be:75:57:17:df:8e:2d:
65:98:9b:96:df:e3:4b:e5:c0:13:9d:c5:a9:62:99:
6a:f6:82:3c:45:ba:30:f7:ad:f9:c0:af:5a:84:98:
82:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:74:B5:D0:4F:E3:9D:AA:DE:A3:4E:DC:D5:B5:C0:95:BE:C7:C2:91
X509v3 Authority Key Identifier:
keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:81:ca:97:b6:34:f3:14:41:4f:c2:8c:6a:3d:12:03:96:ed:
91:cc:fd:98:42:dd:d9:38:f0:4f:55:ba:b7:ba:86:03:61:f0:
46:2f:17:37:a3:20:3e:38:8a:68:77:a4:d2:c3:18:42:8a:42:
52:76:6a:f0:42:10:b6:02:cc:5a:21:75:61:59:d6:78:bc:25:
b1:af:70:80:ec:67:c8:07:b6:61:d5:d2:7a:fc:10:0d:0e:96:
9b:be:d8:2c:a4:18:42:ae:5e:cb:3b:25:a4:c5:de:df:c6:f3:
6e:1c:c8:4e:26:4d:42:bc:50:23:6d:1d:33:5a:b7:8f:b7:15:
d6:3c:29:4f:6f:30:15:c3:4f:b5:f7:7e:ab:35:4d:52:ac:4b:
a2:4d:ab:21:58:ba:5e:d1:a6:63:cf:bc:f4:c6:87:0b:a9:7f:
d5:0a:bc:43:5a:47:28:49:83:e5:d8:ec:0e:72:16:50:b7:a9:
46:ee:3f:4a:ae:e5:8f:10:36:d4:40:9e:94:6b:dc:08:54:7a:
c9:e1:98:5d:f5:e2:c4:c7:e3:61:92:62:ab:6a:c8:6d:d8:24:
59:93:49:56:00:c8:35:fe:03:4a:44:33:fa:9a:bf:8e:22:38:
69:32:8d:ad:58:22:1c:fe:d1:77:c6:bc:64:c7:d9:69:96:64:
32:b6:25:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 03:26:08 2026 by rpki-client