Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
File: t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft (raw, json)
Hash identifier: GPgazrlFHmjAMkK/tHXWRbQRrvHUMjfMOi94PeXwdeQ=
Subject key identifier: 53:2A:7E:2A:A8:1A:08:8C:61:DE:C5:8A:C8:DB:CE:9A:84:47:AF:A2
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Certificate issuer: /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial: 019D27A8BBCFE051BB74D74993CB9E791B4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
Manifest number: 188B
Signing time: Thu 26 Mar 2026 01:01:02 +0000
Manifest this update: Thu 26 Mar 2026 01:01:02 +0000
Manifest next update: Fri 27 Mar 2026 01:01:02 +0000
Files and hashes: 1: 2MSpCLbIJT_dNS85cUQH7P6hQQQ.roa (hash: LqxKJfwKg1vJNoy6niHI6Ay0t/ibwSsUhqanJ+kZvVg=)
2: TZEmLmroEs6IRm7BIRkKTFCJTnA.roa (hash: QhC3msm1fXEe5FbZInDyO6caWrevlSV8+0GhYVm+mSE=)
3: XKyWf4Y6NjYLpXjJG8NNu1YgV8I.roa (hash: Wg/rYioLK0eT7zXUczkOHExRo3EIegYLBIdXxr8Hp88=)
4: t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl (hash: Vo7p9VfsZrfe3GACRZScnRA3JCfQ5MZazpbdk4cHSbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:bb:cf:e0:51:bb:74:d7:49:93:cb:9e:79:1b:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Validity
Not Before: Mar 26 01:01:02 2026 GMT
Not After : Mar 27 01:01:02 2026 GMT
Subject: CN=532a7e2aa81a088c61dec58ac8dbce9a8447afa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:38:bf:9b:cc:38:ee:81:e6:4a:8e:31:48:4d:
a3:9e:d2:fd:bc:87:db:96:c8:0c:c1:94:7f:74:50:
34:35:c2:bb:70:88:17:4f:d1:cc:86:d9:ca:3c:2e:
58:55:1e:b3:62:9a:99:ed:ad:41:02:96:78:a2:a7:
b2:bb:07:f2:a5:b9:f3:4f:95:74:a2:ed:cd:94:0b:
e6:57:88:8f:3c:d0:39:a7:c6:ba:32:6a:c9:de:a3:
3b:41:81:28:05:94:36:85:b0:35:f0:e3:2a:dc:6d:
ae:c8:9b:42:f6:e2:cd:33:5b:15:42:49:36:c7:e8:
8d:55:bb:db:b8:59:8a:bb:15:39:cf:e5:46:c9:20:
98:b5:b4:9e:85:6a:a2:d5:83:f4:dc:0e:c8:b1:83:
5a:0e:98:5e:8d:83:3f:c0:81:2a:83:e9:df:c5:e3:
89:86:c1:d0:ce:25:2d:d1:0a:0f:b0:28:05:85:d1:
d1:06:25:4a:75:dd:bd:00:60:f0:8c:df:17:84:94:
52:e0:c5:7c:46:c9:30:2d:7d:f7:0a:e1:b7:a7:58:
d6:88:c3:59:53:39:86:7c:e1:66:a3:ba:c9:68:25:
d8:8e:d9:70:2f:fb:0c:c0:24:64:59:cb:0b:dd:99:
df:fb:06:aa:52:71:32:51:e0:d3:72:21:01:f2:a7:
d6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:2A:7E:2A:A8:1A:08:8C:61:DE:C5:8A:C8:DB:CE:9A:84:47:AF:A2
X509v3 Authority Key Identifier:
keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:a3:a9:60:4a:bc:2b:8d:9d:54:78:40:5c:5c:ea:c3:a8:65:
b1:2b:05:cf:fe:b0:dc:85:e3:29:59:cb:fb:a7:51:86:ca:a2:
a9:8e:54:ea:0b:70:b3:3e:42:f6:a5:a7:ce:eb:dd:11:9b:3a:
a5:ed:1b:b0:66:fb:52:b9:0a:25:a4:77:70:d3:2f:46:37:78:
e2:06:16:43:a6:08:3b:11:37:5a:ed:4f:79:3d:78:ea:e1:b5:
ca:42:f4:da:b9:c1:a0:d9:11:55:b9:bd:4f:38:51:3f:ed:54:
be:65:9a:42:b0:ee:35:76:00:fb:ed:92:13:4a:96:6b:ba:cc:
ff:a0:50:1a:3b:12:ac:2f:16:83:30:5a:53:c7:87:d9:29:4d:
9e:23:e5:2a:04:21:be:e5:73:05:05:2a:52:8f:1b:31:17:5a:
a2:9c:07:f1:16:a5:29:50:a7:d2:4b:ff:42:a3:8a:be:84:18:
58:e4:74:cd:b4:ed:16:34:76:ba:9a:3a:83:19:c2:4a:b2:0e:
bd:7e:03:3b:a7:7e:0c:2a:08:3d:f5:5b:d5:6e:bc:58:bd:69:
6b:e7:20:4f:6d:03:4e:ee:ce:f4:01:e7:a4:ff:03:b0:3d:71:
5a:dd:ea:d9:30:db:a9:57:d9:44:c5:c9:a8:fe:aa:97:b1:1a:
2f:d9:a7:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:19:35 2026 by rpki-client