Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
File: t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft (raw, json)
Hash identifier: Tz/ecyHNwksZ6VPBdxNW8SlGbubzX6XS62IeBSgz6Yg=
Subject key identifier: 4A:1B:27:E9:3E:24:37:3D:D6:5F:D7:66:A8:00:8D:74:BF:45:F8:0C
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Certificate issuer: /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial: 019CAC0FEC0C852DC3A316997CD8A5FE6766
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
Manifest number: 184B
Signing time: Mon 02 Mar 2026 01:00:50 +0000
Manifest this update: Mon 02 Mar 2026 01:00:50 +0000
Manifest next update: Tue 03 Mar 2026 01:00:50 +0000
Files and hashes: 1: 2MSpCLbIJT_dNS85cUQH7P6hQQQ.roa (hash: LqxKJfwKg1vJNoy6niHI6Ay0t/ibwSsUhqanJ+kZvVg=)
2: TZEmLmroEs6IRm7BIRkKTFCJTnA.roa (hash: QhC3msm1fXEe5FbZInDyO6caWrevlSV8+0GhYVm+mSE=)
3: XKyWf4Y6NjYLpXjJG8NNu1YgV8I.roa (hash: Wg/rYioLK0eT7zXUczkOHExRo3EIegYLBIdXxr8Hp88=)
4: t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl (hash: eGEcuHhLo1gyyqfQLgMDCVTYFaARWB02KZVqUTb7+tk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:ec:0c:85:2d:c3:a3:16:99:7c:d8:a5:fe:67:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Validity
Not Before: Mar 2 01:00:50 2026 GMT
Not After : Mar 3 01:00:50 2026 GMT
Subject: CN=4a1b27e93e24373dd65fd766a8008d74bf45f80c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:c7:36:6f:a6:0a:3a:4a:43:88:2b:e9:6d:34:
f0:af:19:f8:2f:24:84:4f:cb:e3:85:98:9d:f8:3d:
be:09:b5:f7:ce:b7:69:f6:e7:df:10:4f:80:7e:aa:
f1:cf:a8:9c:a8:46:a7:a7:35:52:ea:5d:79:c1:be:
6f:2a:fe:3d:92:19:21:f7:ec:86:e9:70:94:1d:14:
58:a8:18:5d:ac:25:ac:ff:bf:f9:8a:7d:84:e1:8e:
8d:93:89:ad:5e:7c:e3:62:f4:9c:7f:c1:ea:f1:92:
c1:7b:77:62:c2:a4:e0:5b:51:d9:36:9d:65:b6:09:
3a:5c:6f:8a:f2:a5:61:bf:8e:fa:e2:fb:40:14:5b:
cc:59:52:d3:af:4c:d8:47:98:4c:79:73:d9:26:66:
82:06:7f:bb:b5:fb:ae:8f:63:a3:4d:4c:cf:77:de:
68:a9:84:12:f5:62:12:be:be:3a:1e:ea:05:24:45:
d8:13:c8:f2:72:80:31:92:19:bb:8c:b0:e3:68:7e:
9c:ef:51:20:15:01:3f:55:fb:1d:3e:27:0f:16:34:
71:03:94:c6:e0:1f:34:90:6f:43:01:70:36:9c:f4:
a7:e1:11:8e:31:b3:08:9f:ee:85:d4:26:71:8e:02:
1a:0b:5d:9e:2c:ac:c0:48:a1:d6:d6:5c:67:c4:02:
1c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:1B:27:E9:3E:24:37:3D:D6:5F:D7:66:A8:00:8D:74:BF:45:F8:0C
X509v3 Authority Key Identifier:
keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:38:18:be:c5:b5:9f:f1:95:39:38:31:27:ef:db:bc:6e:0c:
67:27:9a:e9:9d:ad:f4:72:1e:7a:d7:be:2a:c7:07:69:85:f4:
3d:ae:c1:5d:b0:74:47:1b:cf:f4:d8:90:26:c5:1a:c0:2a:ba:
c7:73:eb:5f:e6:a2:4e:85:32:30:a8:cf:cf:52:3a:61:1b:88:
c5:bd:44:36:44:d7:97:e8:df:10:55:07:eb:1a:cb:b1:ca:a0:
f9:b0:45:d3:d3:51:a5:f2:87:1a:9b:f3:04:0f:01:33:0f:84:
2b:7b:99:22:f6:04:57:33:00:f8:a6:81:c0:e1:71:6f:3c:9c:
9d:3b:29:4a:fd:0b:06:da:98:f9:a9:74:c8:34:cb:ee:3f:cc:
b4:fa:b9:99:92:6a:ba:1e:88:53:78:f9:42:c8:4a:ac:dd:fd:
ad:64:2b:5f:47:a7:8e:0a:4c:78:31:9d:28:b6:0f:e6:9f:76:
41:5d:76:21:42:6c:d9:29:f6:99:0c:52:b1:c6:e9:30:60:c0:
f0:f2:02:cc:ba:56:bf:9a:d5:97:7e:cf:b5:e3:00:3c:55:78:
31:9c:a9:65:8d:f6:fd:97:aa:7a:0a:5e:a6:fa:41:1d:5f:9c:
4c:43:92:c4:17:72:ca:80:9e:02:c5:f1:c8:c3:82:f0:92:63:
a9:ca:21:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:21:15 2026 by rpki-client