Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
File: t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft (raw, json)
Hash identifier: DkjP53LGTL+Q24w9hLO2PdEv1rrgi0vC5X5h1OBY7+Y=
Subject key identifier: E9:05:F2:40:95:E3:15:6B:5F:D0:02:55:F8:C8:F8:27:E8:52:7B:D8
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Certificate issuer: /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial: 019D99998356C17CD18D619948329EA7BDA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
Manifest number: 18C6
Signing time: Fri 17 Apr 2026 04:01:07 +0000
Manifest this update: Fri 17 Apr 2026 04:01:07 +0000
Manifest next update: Sat 18 Apr 2026 04:01:07 +0000
Files and hashes: 1: 2MSpCLbIJT_dNS85cUQH7P6hQQQ.roa (hash: LqxKJfwKg1vJNoy6niHI6Ay0t/ibwSsUhqanJ+kZvVg=)
2: TZEmLmroEs6IRm7BIRkKTFCJTnA.roa (hash: QhC3msm1fXEe5FbZInDyO6caWrevlSV8+0GhYVm+mSE=)
3: XKyWf4Y6NjYLpXjJG8NNu1YgV8I.roa (hash: Wg/rYioLK0eT7zXUczkOHExRo3EIegYLBIdXxr8Hp88=)
4: t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl (hash: 8EiG/jfD6FPaR5u+MlEwfX8rYMDwZUtheSVt0Ylwr0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:83:56:c1:7c:d1:8d:61:99:48:32:9e:a7:bd:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Validity
Not Before: Apr 17 04:01:07 2026 GMT
Not After : Apr 18 04:01:07 2026 GMT
Subject: CN=e905f24095e3156b5fd00255f8c8f827e8527bd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:95:7f:93:b9:39:3d:0a:6b:f3:e4:7e:f0:cd:
fa:2a:53:1f:29:0e:81:71:45:ac:fb:e3:be:74:f3:
11:7e:2e:c9:ad:51:0c:62:e6:76:1d:6a:47:21:97:
59:f7:f7:69:b1:90:e0:9c:ec:82:25:ad:ea:e4:21:
e1:09:fa:2e:51:9f:02:6f:d8:a1:9f:1c:28:92:a3:
ed:53:2e:6f:e8:d6:8a:75:32:00:c6:2e:d0:3e:f7:
88:4f:93:2d:3f:d9:0b:cb:cf:6a:ba:70:39:ec:65:
80:04:20:f3:89:4a:ba:02:2a:ab:77:5c:7d:99:f1:
b2:63:47:04:47:9a:56:e2:50:5c:8f:80:21:de:2f:
1b:2a:8d:5e:1e:62:e2:ff:4e:a2:bc:78:2c:ce:62:
1e:13:2f:97:75:7d:2b:fd:e8:f3:12:ef:04:36:15:
eb:36:ac:45:72:9a:31:c7:4b:1e:5d:ec:21:76:44:
59:00:f0:ed:44:62:d5:59:e3:50:43:0c:ba:a2:96:
f1:60:ba:b7:cf:6b:cf:24:5d:e1:35:5b:ba:2a:af:
9e:a0:fc:30:44:70:cf:90:88:72:02:19:39:f7:0c:
c2:c3:a2:58:d0:6d:0e:2e:51:dd:98:78:2d:a6:0e:
23:14:a8:a0:c7:d1:73:cc:5d:cc:a0:6d:e0:8d:37:
f0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:05:F2:40:95:E3:15:6B:5F:D0:02:55:F8:C8:F8:27:E8:52:7B:D8
X509v3 Authority Key Identifier:
keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:cf:61:b8:83:9a:a3:ed:82:86:3d:b0:5c:d3:cb:af:d6:c1:
1c:5f:5d:29:d7:a5:db:1b:aa:41:b8:71:3e:16:2e:99:3a:40:
34:2e:43:62:ce:5f:8c:1e:16:42:61:a0:9c:ca:a4:43:94:b6:
6f:81:2f:6d:2c:6d:79:d6:08:88:58:03:6e:19:7a:1e:4e:35:
ae:cd:b1:91:67:57:05:03:ba:2f:27:16:89:e3:a1:1a:3d:90:
29:0a:4c:d8:e6:d7:ce:99:fd:7a:62:d1:ce:86:ab:ac:7d:db:
00:bf:af:e7:af:2e:e6:6c:e6:3c:e8:9a:75:bd:a2:9a:60:55:
1f:0e:58:86:a5:25:2b:24:9b:cf:24:e4:07:50:42:01:27:4e:
4b:9d:35:bb:3e:4e:fc:3c:da:b0:c7:79:dd:c7:67:3a:50:2f:
52:e2:82:fc:cd:2a:fb:fd:c0:ba:ff:3f:d3:c3:08:e2:27:fb:
c9:50:55:67:bf:91:9f:98:3d:73:d4:0b:18:2f:de:89:cc:73:
3a:ac:df:f0:a4:50:71:40:c1:56:d2:46:49:56:08:54:02:69:
55:3d:55:5c:9f:de:a7:5c:06:6b:e7:49:af:58:e9:58:c1:21:
6b:52:11:ba:00:4c:2a:37:21:8f:5a:68:01:b8:37:0a:65:98:
d9:99:87:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:39:03 2026 by rpki-client