Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.mft
File: 10mM0yfqM7_4Yp1_Sda-Otxf8yw.mft (raw, json)
Hash identifier: rUPWRDomIFw32HB/d0rpxYeUw+fjqLeMp7HjZdJLj2s=
Subject key identifier: 87:79:51:68:CD:4C:CA:D6:0F:4B:A7:66:13:53:D3:86:6A:12:B9:6B
Authority key identifier: D7:49:8C:D3:27:EA:33:BF:F8:62:9D:7F:49:D6:BE:3A:DC:5F:F3:2C
Certificate issuer: /CN=d7498cd327ea33bff8629d7f49d6be3adc5ff32c
Certificate serial: 019CE523A5F9100315ACE1B388340ADD63B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10mM0yfqM7_4Yp1_Sda-Otxf8yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.mft
Manifest number: 1865
Signing time: Fri 13 Mar 2026 03:00:44 +0000
Manifest this update: Fri 13 Mar 2026 03:00:44 +0000
Manifest next update: Sat 14 Mar 2026 03:00:44 +0000
Files and hashes: 1: 10mM0yfqM7_4Yp1_Sda-Otxf8yw.crl (hash: my60ucrU0KoAE5/jzJWzyfay7XQH3YLuWINksKpxZi8=)
2: c4zkb26v95y_D2sc6nv7fdxn9Lc.roa (hash: bMZY04nBemF6cIkhBuUz9nxHZyNkGpj8Eh/OlRIxJ2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.mft
rsync://rpki.ripe.net/repository/DEFAULT/10mM0yfqM7_4Yp1_Sda-Otxf8yw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:23:a5:f9:10:03:15:ac:e1:b3:88:34:0a:dd:63:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7498cd327ea33bff8629d7f49d6be3adc5ff32c
Validity
Not Before: Mar 13 03:00:44 2026 GMT
Not After : Mar 14 03:00:44 2026 GMT
Subject: CN=87795168cd4ccad60f4ba7661353d3866a12b96b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2c:27:0f:89:41:60:42:9b:8c:ea:f3:9d:f2:
d4:1f:5a:8e:ab:e4:a0:5a:dd:0d:01:d4:58:f7:33:
24:51:43:58:52:5a:da:ae:30:ce:93:bb:5c:a4:21:
53:f1:f6:06:96:10:33:1d:6a:6c:e9:da:48:0b:7d:
cc:79:57:81:f3:b2:00:36:d8:25:68:7a:ad:8a:17:
cf:62:87:ef:43:09:ee:99:69:a2:e2:11:b2:36:72:
c8:3f:2f:bb:e9:76:cb:00:48:7c:53:7c:c4:95:7d:
c3:0e:06:60:3d:12:4d:da:2a:0e:6b:f3:0e:b4:7e:
01:6e:9b:18:68:75:a6:0c:7f:23:af:98:45:ba:2f:
61:83:e9:a7:2f:6b:7f:45:79:9d:c2:99:69:19:22:
4c:7f:be:ec:a1:f9:a6:2f:cb:b2:9d:91:50:46:56:
90:0c:60:30:de:fc:07:37:08:e9:65:f7:f2:29:bb:
05:e5:16:bc:2f:6d:c9:9a:ce:4e:39:ef:82:bd:bd:
16:2f:33:87:3a:ea:49:c9:12:e4:47:01:3b:ee:7f:
0a:66:fc:bf:a0:e9:c8:3c:3e:d2:fb:8d:f3:f8:0f:
74:24:92:ef:98:a7:ad:d6:21:e6:d0:72:0e:23:1d:
aa:ce:15:74:55:d8:b4:98:5f:55:16:44:7d:df:5a:
e3:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:79:51:68:CD:4C:CA:D6:0F:4B:A7:66:13:53:D3:86:6A:12:B9:6B
X509v3 Authority Key Identifier:
keyid:D7:49:8C:D3:27:EA:33:BF:F8:62:9D:7F:49:D6:BE:3A:DC:5F:F3:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10mM0yfqM7_4Yp1_Sda-Otxf8yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:c6:60:93:09:0a:0a:6f:ae:93:be:36:e1:df:74:fa:ae:af:
cf:6a:49:23:ac:1a:7c:a5:9c:02:ac:0b:7c:0e:ed:2c:16:6e:
6f:64:15:62:8d:c4:b9:92:0d:12:7a:de:00:d7:69:a4:c5:9e:
db:1c:0d:47:55:95:cc:ea:3c:1e:7b:ae:16:a6:f2:3c:f1:e1:
a4:89:b7:18:e4:13:06:ed:fa:5e:25:82:5f:4e:0c:24:b0:80:
75:fd:15:11:d0:2a:b3:16:4e:e2:e9:9a:b9:35:76:3d:7b:be:
24:51:dc:2d:b5:aa:ab:26:3f:65:0d:3b:d1:e9:ab:11:73:48:
a0:d9:e3:09:36:df:05:28:03:21:76:b1:f2:f8:a2:cd:34:7e:
e3:3e:6a:4b:b3:c8:98:2a:ec:48:d5:e4:46:45:5e:ad:ae:83:
be:e7:83:58:e5:5c:97:90:b4:57:fe:22:3a:a7:d7:39:e9:13:
0d:4c:4d:23:0c:7e:e6:9c:9a:34:f7:c5:31:08:09:76:dd:7f:
20:b6:55:52:58:a2:cc:e6:ea:92:59:95:f4:5b:a8:75:5c:d6:
ae:f1:f6:78:3a:d7:70:61:2d:ca:6a:25:84:6d:f9:be:65:9e:
6d:86:b6:32:f7:3e:ba:b8:da:ce:f9:c6:71:25:c2:9d:c0:46:
d3:ab:7b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:18:32 2026 by rpki-client