Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
File: t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft (raw, json)
Hash identifier: 9NeDOIqc0wLz4xiQ+pyval2iuUu20cj0natwnSQAPXs=
Subject key identifier: CE:0B:05:79:87:39:AC:11:2C:BC:31:08:5E:44:81:93:F8:10:8C:1A
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Certificate issuer: /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial: 019FAABE7B1A5884F91EB5ADAB89BE67CBE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
Manifest number: 19D8
Signing time: Tue 28 Jul 2026 22:00:37 +0000
Manifest this update: Tue 28 Jul 2026 22:00:37 +0000
Manifest next update: Wed 29 Jul 2026 22:00:37 +0000
Files and hashes: 1: 2MSpCLbIJT_dNS85cUQH7P6hQQQ.roa (hash: LqxKJfwKg1vJNoy6niHI6Ay0t/ibwSsUhqanJ+kZvVg=)
2: TZEmLmroEs6IRm7BIRkKTFCJTnA.roa (hash: QhC3msm1fXEe5FbZInDyO6caWrevlSV8+0GhYVm+mSE=)
3: XKyWf4Y6NjYLpXjJG8NNu1YgV8I.roa (hash: Wg/rYioLK0eT7zXUczkOHExRo3EIegYLBIdXxr8Hp88=)
4: t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl (hash: rUlu4RMVnEzJFhx/mmi9PHcfhxNkeyTSPPjizG9i7dM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:7b:1a:58:84:f9:1e:b5:ad:ab:89:be:67:cb:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Validity
Not Before: Jul 28 22:00:37 2026 GMT
Not After : Jul 29 22:00:37 2026 GMT
Subject: CN=ce0b05798739ac112cbc31085e448193f8108c1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:27:50:4a:0f:f9:36:e5:ad:0e:0d:fd:db:52:
82:02:a7:3b:a6:7d:02:22:ae:5c:8d:c2:aa:86:d1:
e6:4b:eb:c3:e6:d1:ab:fd:d8:d0:e4:b5:6c:1a:d3:
77:64:24:88:05:40:d3:dc:7d:05:df:69:3a:e1:08:
56:a3:47:e4:75:9a:3b:b3:7c:db:32:89:4b:35:aa:
10:77:9a:ec:c1:96:28:7a:41:e5:a9:27:b1:d6:6f:
14:ed:21:d0:14:e7:20:1c:bd:d3:c0:43:2a:73:43:
a2:c2:73:1b:62:99:2d:13:28:4f:53:80:52:82:b3:
37:f4:eb:4c:94:e9:1d:09:d4:f6:e7:03:a6:1e:c8:
ab:82:b2:3b:81:6f:6e:6d:46:dd:de:27:2c:99:ca:
5c:8f:c7:63:5f:44:56:7a:81:0f:69:ce:38:29:2e:
6b:72:1b:54:bc:c6:e7:8a:79:e4:2c:72:7d:f0:38:
a5:41:53:a2:eb:b2:73:4a:c6:d5:cb:e2:dd:05:e8:
f9:1b:a8:f4:d2:4c:97:79:9a:9a:b2:d3:90:ba:67:
18:05:c9:37:36:f8:04:a7:d2:7e:87:b3:b2:fb:12:
f5:3b:cd:e0:1e:4c:d3:62:07:2f:0f:57:ca:f3:10:
fa:a8:75:f2:00:1b:81:40:aa:02:0a:6b:f9:cd:30:
49:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:0B:05:79:87:39:AC:11:2C:BC:31:08:5E:44:81:93:F8:10:8C:1A
X509v3 Authority Key Identifier:
keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:d3:0b:65:3f:ab:42:74:a6:58:3e:e0:c9:d2:a7:bd:a0:c8:
de:b6:24:f7:f8:1a:a2:c8:1f:7f:c8:20:06:03:ff:39:c4:19:
ea:e9:cd:1e:ba:01:8b:d7:af:f7:00:57:5e:93:a3:4d:72:b5:
88:dd:c6:cc:0a:21:12:07:cc:e5:be:90:c9:f7:5b:05:15:2f:
59:9a:62:35:b9:ff:7d:fb:2c:5b:68:87:88:18:66:87:28:38:
58:a6:ae:a7:80:e3:5d:37:2a:72:74:55:70:9a:ff:8c:88:53:
a3:af:9e:6d:c9:d8:0f:fd:5b:9f:bb:8c:4d:70:9c:2b:ae:66:
80:0c:d0:ae:df:92:39:b0:5f:fc:1c:b2:d7:d6:49:d7:3a:21:
e0:94:8d:be:66:58:ca:2c:4d:a7:53:b9:c9:f2:0b:f1:28:4e:
61:77:4c:fb:24:02:ca:54:34:77:fb:f4:90:df:79:5e:7c:6e:
1f:19:24:6f:1d:59:a5:d9:bb:02:c7:fd:5a:bc:7e:88:a4:11:
cf:36:2b:1d:aa:60:eb:ef:33:51:8d:34:97:a7:07:51:75:b1:
a4:9f:30:ec:08:84:70:15:c1:6d:d1:f1:32:c7:29:ea:81:43:
fc:25:cc:99:2b:08:cf:0e:d8:ee:58:d7:86:33:fe:61:64:17:
da:95:d2:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:22:04 2026 by rpki-client