Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
File: t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft (raw, json)
Hash identifier: 1VjDhkICXZoQNaQulPoSkjKZuHZRwhJEfTETrq7oAtI=
Subject key identifier: 58:A9:A3:21:05:4B:77:D8:FF:CB:35:22:DB:F7:C7:4D:CE:1D:70:92
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Certificate issuer: /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial: 01A0DD2935667415F97E53B618E5A626EF3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
Manifest number: 1A78
Signing time: Sat 26 Sep 2026 10:01:00 +0000
Manifest this update: Sat 26 Sep 2026 10:01:00 +0000
Manifest next update: Sun 27 Sep 2026 10:01:00 +0000
Files and hashes: 1: PRNpmNoXJBIoF9gh578wEhtMpdQ.roa (hash: g9ylBrvDhSOD9y5ykNiZEjQPUeqbZ/uKUmYrg55Kn+I=)
2: iE0cS-gjGQ2wH2CEFbUXZzlClEs.roa (hash: zt5rLB2IKmjF4fOUcKb7lO1SdJgaIMds/uhpaf0hUX0=)
3: t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl (hash: OZIg8dfISQhqNlP71Rqr0DUA7DUYf44vVsj69+V2dE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:29:35:66:74:15:f9:7e:53:b6:18:e5:a6:26:ef:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Validity
Not Before: Sep 26 10:01:00 2026 GMT
Not After : Sep 27 10:01:00 2026 GMT
Subject: CN=58a9a321054b77d8ffcb3522dbf7c74dce1d7092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:15:12:4a:15:9b:88:fd:e9:af:d4:2c:d7:7d:
87:4b:af:20:5d:55:1d:6c:76:b2:16:eb:de:02:32:
1e:6f:32:a1:86:2a:72:c1:27:d2:b4:c0:47:42:48:
8f:f6:0b:36:dd:d2:4b:ef:d2:b2:cb:ba:df:88:6f:
fb:79:15:50:c3:f7:7a:93:88:b0:58:2f:45:36:db:
e8:e6:95:91:1f:ab:da:c4:ab:ec:99:e8:62:ee:24:
db:37:18:40:e2:c1:25:2d:0f:4a:16:d9:af:e9:1a:
93:ad:cc:b4:6c:4f:c4:35:e3:1a:ad:7c:c5:e9:b4:
62:40:f2:ce:14:c5:e2:00:25:e2:08:30:a9:a2:0f:
f7:b8:13:9f:7c:d0:06:c2:be:9e:a8:10:20:06:34:
d9:ce:77:b2:59:4d:75:e7:d3:dd:e2:bf:a5:60:72:
c7:11:81:d6:af:28:51:6e:e8:ff:62:b7:08:76:bc:
7e:ce:48:64:76:ec:d4:7a:1e:33:c8:49:4e:60:7a:
ed:76:34:ac:61:ef:5c:c9:59:29:0e:a9:72:cb:8c:
bf:24:16:b6:1c:07:99:07:2e:4b:b5:83:cb:6c:c6:
8f:e1:b3:fd:13:6f:b0:d1:cd:62:ba:c7:84:6e:e3:
49:77:ee:a1:54:68:e6:d7:bf:df:6a:00:a1:bd:0d:
07:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:A9:A3:21:05:4B:77:D8:FF:CB:35:22:DB:F7:C7:4D:CE:1D:70:92
X509v3 Authority Key Identifier:
keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:38:6f:db:15:da:99:36:ce:ac:eb:14:4a:8a:25:7f:50:5f:
b7:da:00:33:7e:4c:9a:39:ec:f2:3f:08:91:80:16:76:2e:8d:
9a:2c:b5:9d:4b:5d:4c:1f:2c:3d:96:69:e6:91:68:13:09:71:
3d:c7:19:f7:e0:9f:8c:8a:32:c6:dd:da:9f:70:08:d6:61:3d:
5c:ec:d9:ef:f7:fb:43:2b:ff:15:d7:5e:04:14:f6:e5:4c:09:
8c:71:99:7f:5e:4c:5e:bf:af:13:93:b4:29:30:d0:56:4a:2d:
91:5c:ee:26:88:c4:0e:68:99:1a:4d:35:23:1a:06:75:42:93:
a2:a7:fd:f9:a3:2c:7b:2c:e3:9f:a0:d1:f9:d1:76:82:16:f7:
01:0f:9a:ef:24:e2:83:20:f3:83:66:33:9c:52:f2:ac:00:1d:
16:48:75:9b:53:2e:72:68:59:62:10:c7:2c:17:81:f1:96:10:
35:09:bd:87:7c:ef:2f:8a:a7:26:91:41:c1:b0:96:82:b8:a2:
b6:1b:6d:c7:be:5d:34:8c:ad:60:68:73:50:e0:ae:24:03:c7:
1c:35:71:c4:d5:75:2d:95:32:2f:63:f5:1b:42:08:ab:47:c6:
f6:cc:ec:37:e3:dc:f3:f0:d6:3d:a0:7f:54:11:f2:85:12:80:
72:18:46:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:42:56 2026 by rpki-client