Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
File: t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft (raw, json)
Hash identifier: Yu9QLncO0bBemXI3JJZdoOoAX01zPM6vF/e4CXWGiRM=
Subject key identifier: F8:81:C3:4C:16:31:55:FD:1E:5B:03:38:51:10:90:4F:80:65:28:07
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Certificate issuer: /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial: 019FACAC9D656BD0893D64057E19CEF1235E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
Manifest number: 19D9
Signing time: Wed 29 Jul 2026 07:00:21 +0000
Manifest this update: Wed 29 Jul 2026 07:00:21 +0000
Manifest next update: Thu 30 Jul 2026 07:00:21 +0000
Files and hashes: 1: 2MSpCLbIJT_dNS85cUQH7P6hQQQ.roa (hash: LqxKJfwKg1vJNoy6niHI6Ay0t/ibwSsUhqanJ+kZvVg=)
2: TZEmLmroEs6IRm7BIRkKTFCJTnA.roa (hash: QhC3msm1fXEe5FbZInDyO6caWrevlSV8+0GhYVm+mSE=)
3: XKyWf4Y6NjYLpXjJG8NNu1YgV8I.roa (hash: Wg/rYioLK0eT7zXUczkOHExRo3EIegYLBIdXxr8Hp88=)
4: t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl (hash: WSUt6jLUJxmp9tyAs8g/DTSdxOlQekZorQufDp7BnCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:ac:9d:65:6b:d0:89:3d:64:05:7e:19:ce:f1:23:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Validity
Not Before: Jul 29 07:00:21 2026 GMT
Not After : Jul 30 07:00:21 2026 GMT
Subject: CN=f881c34c163155fd1e5b03385110904f80652807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:77:c1:d5:20:85:34:96:11:d3:f6:37:3e:b0:
23:4c:ba:5f:59:d4:52:78:01:c7:51:65:d9:0a:f3:
5a:a0:fb:30:62:41:62:09:ee:62:99:f5:c4:16:bc:
34:e6:2e:2b:0e:3e:f4:a1:6c:e2:9f:0d:45:f9:10:
6a:f7:99:e3:e3:94:3d:19:7f:69:91:28:93:f9:ed:
e1:e3:24:81:55:76:eb:59:ad:47:fa:77:a6:69:db:
03:67:2e:53:ee:b0:b9:2b:89:60:77:86:94:71:21:
6e:ec:71:9f:b1:84:8a:1b:6b:77:44:f8:25:c0:a4:
97:4f:48:16:78:1e:e5:5f:72:74:36:08:4a:b7:ee:
dc:26:99:26:f8:d0:f5:94:2e:db:9e:f1:f8:b6:60:
cc:7a:f8:9c:e2:bb:4f:74:3c:be:de:5c:f1:10:40:
d2:ee:96:29:18:89:8a:9d:bd:d9:65:b7:60:56:d6:
2d:1a:d8:59:ef:75:85:4e:c8:53:07:ae:b1:ee:e4:
37:33:10:32:4d:c0:2d:cd:8c:4f:54:ad:b0:24:6e:
09:4e:4a:31:a0:48:41:aa:c7:98:ff:f9:fd:74:00:
33:c3:7e:6f:1a:c2:22:03:8a:a6:c6:6b:42:11:ac:
43:68:90:7d:b2:8a:af:23:c5:e0:01:3a:65:d7:55:
4a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:81:C3:4C:16:31:55:FD:1E:5B:03:38:51:10:90:4F:80:65:28:07
X509v3 Authority Key Identifier:
keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:b8:f8:25:a8:f2:16:82:46:aa:aa:16:5c:f3:3e:af:a3:7a:
68:6b:69:6b:5a:1d:77:b5:18:21:c3:39:1d:bc:17:68:cb:75:
f1:fb:03:48:0b:ed:64:a5:40:20:64:20:99:7a:75:b4:c5:76:
67:38:37:5b:3f:71:7f:9f:17:49:7f:0f:86:d7:aa:52:5f:ea:
f8:5e:c4:b0:2f:a9:11:0e:cc:98:b0:7d:83:c8:f4:9b:26:8e:
52:66:0d:5d:e4:96:a7:17:b9:83:39:9c:7c:e7:c9:d9:5f:1d:
cc:96:86:c5:a9:06:80:b0:a3:48:dc:0c:16:a5:ca:85:90:70:
8d:63:a8:b2:e3:d1:06:2d:9d:57:a5:2f:eb:4d:d3:d9:57:bc:
42:e1:d2:9b:f2:8d:2f:7d:07:e5:16:13:37:99:b9:10:79:f8:
f1:1c:cb:a7:9c:71:25:77:ed:ac:50:ac:36:70:7f:3e:5e:f6:
cd:02:07:2d:78:cc:ad:f8:db:0c:ea:90:fa:da:77:58:42:53:
62:6c:f9:1d:b4:14:05:c2:87:ea:6e:dc:c7:09:e3:0c:e8:58:
40:f9:eb:ce:2f:40:f0:d9:30:3b:22:4c:71:56:38:03:0a:50:
d2:3f:7a:ba:d1:60:ca:d3:81:34:c1:77:05:30:fa:a9:4c:9a:
24:c6:d5:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:27:24 2026 by rpki-client