Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.mft
File: 10itqKdHT1rZkMmB_2snzj3hRxM.mft (raw, json)
Hash identifier: jUit34fRjWYllAlE2P3t7w7stCMrvB6D367hfY0q9hM=
Subject key identifier: F4:F0:3B:CB:09:86:D0:31:FA:28:D3:44:5A:89:20:4C:2A:83:1D:49
Authority key identifier: D7:48:AD:A8:A7:47:4F:5A:D9:90:C9:81:FF:6B:27:CE:3D:E1:47:13
Certificate issuer: /CN=d748ada8a7474f5ad990c981ff6b27ce3de14713
Certificate serial: 01A184511917FA6E0C7E64CD1757A3B2FA16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10itqKdHT1rZkMmB_2snzj3hRxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.mft
Manifest number: 03E5
Signing time: Wed 28 Oct 2026 21:01:09 +0000
Manifest this update: Wed 28 Oct 2026 21:01:09 +0000
Manifest next update: Thu 29 Oct 2026 21:01:09 +0000
Files and hashes: 1: 10itqKdHT1rZkMmB_2snzj3hRxM.crl (hash: 2Kcsya1H901FSa9Rp8b1oXfBs2DPl8sgVA1C3FMQa3M=)
2: dh6O1KZT1UxJ74lXsViPoGTKRqs.roa (hash: GqWYfVTgp7zJ77InQ5zu+O/CisErYsq267odGYdVn8s=)
3: q2Sr6iNLEgQhXIhOj17x_U41yCw.roa (hash: v7+FGob3+laO9WE5TRGdJZbvI5tauk2y9nqQMlT/eeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/10itqKdHT1rZkMmB_2snzj3hRxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:84:51:19:17:fa:6e:0c:7e:64:cd:17:57:a3:b2:fa:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d748ada8a7474f5ad990c981ff6b27ce3de14713
Validity
Not Before: Oct 28 21:01:09 2026 GMT
Not After : Oct 29 21:01:09 2026 GMT
Subject: CN=f4f03bcb0986d031fa28d3445a89204c2a831d49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:15:e6:72:de:2e:6f:a5:80:ff:20:8c:22:59:
84:91:1f:ac:cd:ee:78:89:76:59:54:ba:44:7c:bd:
32:28:c5:ac:95:0a:3c:7c:cb:48:53:04:92:ca:f8:
d5:50:f5:46:a0:d3:5c:5e:97:a3:24:0a:a7:9f:d4:
c0:85:55:d6:71:73:a1:fd:dd:52:22:51:7b:9d:03:
89:1d:78:49:2a:7b:35:b4:e9:07:d6:a9:d0:95:6d:
0b:c8:58:e3:7b:75:1d:fb:fc:85:a0:60:6c:47:80:
de:4c:4d:57:2b:cd:d6:2a:32:9a:41:fc:3d:80:13:
a9:8a:1c:98:cc:43:1c:5a:88:14:3a:4c:c3:a5:20:
df:0d:c3:65:e4:d4:9f:a3:b0:3d:24:b3:89:d3:fd:
df:03:3b:af:51:04:75:1c:d6:b7:cd:59:da:01:37:
30:d6:0e:a8:7e:82:74:14:ae:3c:a1:2e:37:35:91:
2e:c5:e0:bc:14:0c:e3:ae:f6:42:0f:57:25:9c:47:
8b:2d:f3:74:d9:c4:2d:af:d8:c7:45:f8:4f:52:7e:
92:1c:7e:3c:f0:32:05:54:64:0e:db:ed:5e:f1:88:
a0:4e:5c:9e:1e:4d:a4:fe:fb:b5:7b:40:0d:26:18:
23:a6:e3:a5:ba:7f:93:84:62:9a:bf:8f:dc:18:b7:
40:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:F0:3B:CB:09:86:D0:31:FA:28:D3:44:5A:89:20:4C:2A:83:1D:49
X509v3 Authority Key Identifier:
keyid:D7:48:AD:A8:A7:47:4F:5A:D9:90:C9:81:FF:6B:27:CE:3D:E1:47:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10itqKdHT1rZkMmB_2snzj3hRxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:1b:6c:25:e1:ec:10:9d:5a:89:41:f0:22:48:2f:28:f3:1b:
91:c8:be:c0:bb:d9:16:a9:8e:bb:4b:fe:a9:b2:d5:ed:32:50:
37:ce:ba:a6:bd:e6:3a:c8:39:33:42:89:87:9c:f3:37:0f:db:
2e:85:a5:e7:21:60:12:5e:56:de:ba:23:30:f7:6c:e1:3e:5d:
78:a6:1e:3e:f7:0c:25:33:cc:be:0a:72:22:76:cd:b3:29:74:
c2:c0:e2:65:21:fc:5d:ad:c8:9a:f5:47:82:4c:4a:eb:80:70:
ad:3c:0d:c6:c6:5a:89:a6:e7:1c:4d:bb:9b:89:0a:05:f4:27:
e9:e8:d9:88:4e:ae:80:52:f4:b7:43:34:7c:d3:f2:c6:bc:af:
30:5a:dd:b2:a4:dd:b0:d2:2b:c9:4a:d6:b5:3e:42:37:f3:36:
fc:30:5e:88:f5:fa:fa:cc:ca:8c:12:2b:8f:e1:29:16:ab:7c:
c4:c5:dc:04:0e:12:7d:bd:16:09:a1:41:ab:cb:d9:4f:85:e8:
83:d8:ef:7e:eb:79:f4:fe:df:7c:46:bb:d2:37:03:61:af:b4:
32:be:b2:05:23:72:05:0e:ab:4b:1a:cb:6a:3c:87:8b:81:0e:
d5:42:4f:ee:f1:22:46:96:32:b4:3b:f0:63:d8:45:5c:59:3b:
61:db:70:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 22:51:21 2026 by rpki-client