Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.mft
File: 10itqKdHT1rZkMmB_2snzj3hRxM.mft (raw, json)
Hash identifier: SKx1eWsi8nb766tzyNeenmRgbo7WOc0cTtGBdP1HEbg=
Subject key identifier: 7F:0B:07:12:F0:A2:B3:E8:4A:25:19:0B:2C:68:91:9B:E7:B8:5C:0A
Authority key identifier: D7:48:AD:A8:A7:47:4F:5A:D9:90:C9:81:FF:6B:27:CE:3D:E1:47:13
Certificate issuer: /CN=d748ada8a7474f5ad990c981ff6b27ce3de14713
Certificate serial: 01A08F0E498824CBBB3F98F2FEBE851B85BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10itqKdHT1rZkMmB_2snzj3hRxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.mft
Manifest number: 0366
Signing time: Fri 11 Sep 2026 06:01:13 +0000
Manifest this update: Fri 11 Sep 2026 06:01:13 +0000
Manifest next update: Sat 12 Sep 2026 06:01:13 +0000
Files and hashes: 1: 10itqKdHT1rZkMmB_2snzj3hRxM.crl (hash: HLKqjB/wCy2b2IRqTsOLkFPRDOxb0/UlZoMdNfutwDc=)
2: dh6O1KZT1UxJ74lXsViPoGTKRqs.roa (hash: GqWYfVTgp7zJ77InQ5zu+O/CisErYsq267odGYdVn8s=)
3: q2Sr6iNLEgQhXIhOj17x_U41yCw.roa (hash: v7+FGob3+laO9WE5TRGdJZbvI5tauk2y9nqQMlT/eeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/10itqKdHT1rZkMmB_2snzj3hRxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 06:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8f:0e:49:88:24:cb:bb:3f:98:f2:fe:be:85:1b:85:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d748ada8a7474f5ad990c981ff6b27ce3de14713
Validity
Not Before: Sep 11 06:01:13 2026 GMT
Not After : Sep 12 06:01:13 2026 GMT
Subject: CN=7f0b0712f0a2b3e84a25190b2c68919be7b85c0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d3:42:b9:71:84:20:8c:b5:6a:f5:c2:ff:17:
a3:71:87:da:62:1e:58:b3:55:ac:f4:aa:81:5c:25:
c6:dd:c9:64:97:46:76:99:3d:b6:2b:93:4e:ca:21:
ff:e8:48:cf:b7:8c:2c:0e:e0:c1:0f:89:f9:43:77:
c5:f6:87:c0:69:00:df:3e:7b:28:6d:bb:83:bb:28:
bb:24:87:00:7e:b2:41:42:e3:38:77:c0:cf:26:93:
80:1f:4f:2a:d3:33:5b:95:65:81:d4:18:fc:61:95:
ea:13:38:ef:1f:cb:6b:05:49:fa:b4:33:27:c9:c8:
89:ef:4f:2f:36:0c:7f:24:28:6f:54:4c:d6:9f:80:
d6:67:85:eb:5f:16:ed:d8:25:98:48:c5:f0:e1:cf:
33:3c:d2:2f:d6:21:ab:58:49:ee:f0:6e:53:dd:b3:
74:4a:3c:2f:48:fd:fe:1c:77:c1:b8:8a:3e:e1:3a:
bc:6d:a1:ec:e3:a3:1d:9e:ee:1d:03:95:48:96:3c:
fc:ef:6e:e9:dc:9e:6b:7a:d0:d9:db:9a:fa:bb:b2:
0c:ee:75:6e:e3:54:b0:a8:cf:cb:af:c0:2e:f2:fc:
4b:d9:61:98:46:37:22:f3:a9:d4:8e:5c:98:6c:b9:
bf:ec:8c:96:b3:87:02:2b:5f:60:be:e3:9b:4e:62:
db:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:0B:07:12:F0:A2:B3:E8:4A:25:19:0B:2C:68:91:9B:E7:B8:5C:0A
X509v3 Authority Key Identifier:
keyid:D7:48:AD:A8:A7:47:4F:5A:D9:90:C9:81:FF:6B:27:CE:3D:E1:47:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10itqKdHT1rZkMmB_2snzj3hRxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:6a:fa:92:c9:1c:42:82:0b:d4:a5:72:e5:40:c5:d3:0d:96:
c6:ca:c5:be:bc:87:1f:35:ff:4c:93:41:2c:7a:c7:84:5c:1c:
56:19:f3:9d:9e:a8:da:7c:f6:01:4b:ed:c9:a4:94:6b:50:3a:
cf:cb:1d:19:38:f6:2d:25:d3:4b:97:d4:48:22:18:1f:f1:53:
1d:48:e3:3d:c1:d8:c3:29:17:17:20:01:77:f1:b2:f5:73:0c:
ea:b7:cc:3d:9b:35:14:46:7a:3b:c8:54:2c:97:8f:db:03:db:
73:40:b3:40:ad:6f:40:60:b6:24:33:79:5d:9f:ab:70:86:f3:
60:2b:ce:b7:ec:8d:97:44:9c:16:d6:5b:06:63:0c:03:5b:e9:
7c:7d:16:84:2e:12:a4:f0:74:a2:0f:9c:42:c8:28:c7:ec:4f:
06:36:17:4b:12:d4:47:29:48:be:41:60:19:9e:a5:66:e3:03:
ed:1f:02:a8:e0:c1:13:33:30:dc:e0:1e:57:ef:77:32:84:58:
52:a5:62:ce:74:c8:25:c6:de:2c:12:cf:b0:02:e9:9b:80:b1:
c3:60:3a:71:ab:71:42:18:98:1b:c6:1a:3f:bb:9e:ca:52:2a:
67:b9:5b:c4:77:4f:2b:8b:62:38:a7:b4:43:ba:9f:e7:d8:bf:
76:5b:cb:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 10:38:48 2026 by rpki-client