Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
File: t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft (raw, json)
Hash identifier: jY3PoVDF4d9h/tugvGWMQeeMuxgsg8QdhZ0PYRmqh5E=
Subject key identifier: 96:AB:81:30:CD:65:40:EE:6D:46:51:F3:C1:17:EE:BE:F5:9E:DB:72
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Certificate issuer: /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial: 01A0A90466B6B6F5B9264875B3A6E8F23CC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
Manifest number: 1A5D
Signing time: Wed 16 Sep 2026 07:00:32 +0000
Manifest this update: Wed 16 Sep 2026 07:00:32 +0000
Manifest next update: Thu 17 Sep 2026 07:00:32 +0000
Files and hashes: 1: PRNpmNoXJBIoF9gh578wEhtMpdQ.roa (hash: g9ylBrvDhSOD9y5ykNiZEjQPUeqbZ/uKUmYrg55Kn+I=)
2: iE0cS-gjGQ2wH2CEFbUXZzlClEs.roa (hash: zt5rLB2IKmjF4fOUcKb7lO1SdJgaIMds/uhpaf0hUX0=)
3: t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl (hash: KKgkrAuVa3m2fuPlDLQQMdsPzu9fkrlpAoBdCu6WtD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Sep 2026 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a9:04:66:b6:b6:f5:b9:26:48:75:b3:a6:e8:f2:3c:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Validity
Not Before: Sep 16 07:00:32 2026 GMT
Not After : Sep 17 07:00:32 2026 GMT
Subject: CN=96ab8130cd6540ee6d4651f3c117eebef59edb72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7a:93:97:90:cc:5e:fe:45:47:b1:5d:26:15:
e4:82:2b:98:4c:4d:94:e4:28:0c:4a:62:d4:34:3e:
ba:94:fe:23:f5:5a:d5:02:b0:38:cb:8b:f4:4d:4f:
c8:e3:e3:a8:69:87:65:f9:d4:39:8a:2f:26:10:dc:
25:10:41:e4:1f:f0:1c:cf:f2:1f:41:1c:53:8a:61:
0d:b2:a1:f4:53:31:53:cc:0c:5c:a2:55:c5:b0:58:
a4:6a:01:d1:2b:ff:fd:f7:33:fc:0f:cd:0b:3e:1d:
2a:a7:86:9d:26:7f:b3:15:da:d5:e3:fd:ad:73:9b:
3c:06:cb:4b:fc:01:f4:d6:c9:f2:58:b5:84:f6:b7:
27:3a:45:9f:c0:1e:81:73:11:e1:c1:c5:0b:b1:e4:
07:33:10:1a:89:dc:6d:7a:11:b1:64:b9:fb:df:6f:
4b:ad:f5:31:5e:46:95:91:06:23:66:7b:66:26:8a:
a9:bb:e2:cf:22:6c:f7:c9:4f:09:9c:5f:16:e1:e9:
8c:dc:f8:2a:7f:2b:7b:af:fe:70:12:46:89:c9:ed:
97:cb:a8:9b:06:e3:ce:fb:56:0c:7a:6d:94:a9:7f:
55:9c:78:48:92:c2:a6:60:d9:be:ef:4a:c5:6e:18:
7b:8b:56:58:2c:fc:d4:5c:64:c9:00:fa:6a:cd:92:
6f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:AB:81:30:CD:65:40:EE:6D:46:51:F3:C1:17:EE:BE:F5:9E:DB:72
X509v3 Authority Key Identifier:
keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:16:3c:0d:3c:1e:5f:08:88:17:d8:a8:7d:4f:c4:0c:85:ba:
0a:f3:e3:a9:81:c7:3a:2b:0d:e7:7b:22:62:c9:42:14:4a:02:
18:b3:45:c9:b4:9e:3e:3b:ea:eb:75:31:49:b0:6d:1f:85:12:
e9:ad:71:5e:71:64:25:d8:de:e3:18:6a:9d:09:57:02:5f:1d:
42:e4:c5:5b:77:65:c6:3f:e8:60:81:95:c8:67:56:19:71:20:
b3:df:eb:3b:18:ed:d4:73:12:36:ef:67:ee:73:d1:6c:d5:0d:
62:45:11:86:a5:84:ba:8d:a4:3b:db:97:2d:80:87:69:96:56:
37:46:e3:93:71:6a:1a:4a:00:9c:04:f0:94:55:55:8c:50:44:
56:f5:f5:25:b9:2b:67:11:20:31:ea:52:ec:c6:30:21:6b:12:
24:da:81:3b:bb:1b:93:dd:d6:94:6c:f1:24:01:7c:e4:ea:18:
2f:f9:23:f4:bc:ee:65:ab:66:ef:2a:eb:b2:82:a9:0d:0a:fb:
30:c6:5b:5a:45:7e:ac:a1:8f:63:61:20:7a:9f:d0:a6:70:cf:
0b:15:a1:0d:a0:a1:fc:d9:ca:d5:9a:4a:19:d4:75:25:a3:33:
b4:b9:a5:71:6a:99:4c:fd:e3:28:9c:10:37:3a:78:a9:61:b4:
0d:ad:37:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 16 11:54:53 2026 by rpki-client