Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.mft
File: 10itqKdHT1rZkMmB_2snzj3hRxM.mft (raw, json)
Hash identifier: SubRjk6BCRWRl93MYrGMGQBz+kw/bwoiZ3wpqj4tkkA=
Subject key identifier: E4:1B:40:E3:DD:89:88:7B:6F:9B:3D:11:DA:1A:10:3A:56:DF:64:10
Authority key identifier: D7:48:AD:A8:A7:47:4F:5A:D9:90:C9:81:FF:6B:27:CE:3D:E1:47:13
Certificate issuer: /CN=d748ada8a7474f5ad990c981ff6b27ce3de14713
Certificate serial: 019D37893682E12D908DE0AD276377FD08F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10itqKdHT1rZkMmB_2snzj3hRxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.mft
Manifest number: 01AB
Signing time: Sun 29 Mar 2026 03:00:32 +0000
Manifest this update: Sun 29 Mar 2026 03:00:32 +0000
Manifest next update: Mon 30 Mar 2026 03:00:32 +0000
Files and hashes: 1: 10itqKdHT1rZkMmB_2snzj3hRxM.crl (hash: ey/dpl1rJpgR2F7rARZoSg4aQNcD1qQlhCitZ+tgims=)
2: dh6O1KZT1UxJ74lXsViPoGTKRqs.roa (hash: GqWYfVTgp7zJ77InQ5zu+O/CisErYsq267odGYdVn8s=)
3: q2Sr6iNLEgQhXIhOj17x_U41yCw.roa (hash: v7+FGob3+laO9WE5TRGdJZbvI5tauk2y9nqQMlT/eeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/10itqKdHT1rZkMmB_2snzj3hRxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:36:82:e1:2d:90:8d:e0:ad:27:63:77:fd:08:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d748ada8a7474f5ad990c981ff6b27ce3de14713
Validity
Not Before: Mar 29 03:00:32 2026 GMT
Not After : Mar 30 03:00:32 2026 GMT
Subject: CN=e41b40e3dd89887b6f9b3d11da1a103a56df6410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ef:0c:04:ad:f4:a9:6e:c7:c7:ed:8a:32:ed:
37:17:84:db:da:e8:24:c6:f4:3b:a4:43:ee:cf:ff:
87:5a:ff:10:dc:0a:07:73:23:c1:ee:97:6f:0b:cd:
97:f9:a2:fd:cc:dc:e5:b5:a0:6e:f3:45:d9:dd:87:
75:d0:8d:8e:b7:4a:f2:6d:12:6e:d3:50:9c:02:e7:
2b:15:d4:88:d3:fc:69:5e:91:b7:b2:56:44:27:8c:
09:a5:d7:2b:39:27:0a:4f:1a:ab:b3:50:e5:4e:7a:
2f:f0:ca:c7:2a:af:ce:a4:7e:0d:b2:e7:8e:be:eb:
ad:f3:fe:d2:6c:46:39:bf:88:84:65:68:c6:7a:6f:
56:10:aa:45:03:1a:cc:0f:95:93:90:4b:3d:2f:0a:
4a:ed:f3:1d:36:0b:89:6c:66:4c:40:3d:c3:bb:4c:
6b:a5:3a:65:8f:07:00:57:96:51:15:61:ee:f8:bb:
d7:1f:13:b2:74:b4:d4:2a:05:22:99:28:6b:6b:2e:
29:2a:e4:ce:af:35:3d:b6:1d:f9:62:d7:84:39:69:
b4:db:5b:fb:fd:bd:64:c8:89:41:1d:53:15:42:81:
ba:ed:ed:cc:c3:23:cc:b4:2e:a8:d0:81:22:22:93:
0b:05:d0:7f:ce:38:fc:1d:3b:23:c1:04:9c:5a:11:
7b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:1B:40:E3:DD:89:88:7B:6F:9B:3D:11:DA:1A:10:3A:56:DF:64:10
X509v3 Authority Key Identifier:
keyid:D7:48:AD:A8:A7:47:4F:5A:D9:90:C9:81:FF:6B:27:CE:3D:E1:47:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10itqKdHT1rZkMmB_2snzj3hRxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:4f:7e:77:89:d7:ec:ea:d1:e9:aa:9a:c9:ae:be:b9:a7:57:
ca:da:b2:c2:c2:bc:7e:c3:d2:69:84:19:26:9d:d6:9a:26:e1:
9a:d0:0c:11:45:e3:af:2c:2a:c7:d1:01:71:f4:84:e8:35:05:
c1:3a:8f:fb:c3:20:ff:0b:74:5d:87:b4:c5:6f:b7:a0:cf:ce:
ac:ff:6c:60:f0:f6:99:2f:37:fd:22:38:19:a3:a2:16:aa:e5:
30:57:9c:12:50:46:d1:43:94:ba:f3:b2:f0:5b:b1:c4:dd:25:
b6:1c:dc:fc:a3:10:31:d3:32:b3:94:86:a5:52:4c:39:b6:3a:
1b:1b:53:27:d2:c7:0a:f9:a2:45:4d:17:c2:e9:46:94:56:3c:
7b:2d:b2:ce:19:d4:52:1a:fd:01:74:28:95:17:32:f0:48:20:
d8:99:e1:62:89:da:40:c0:4f:f8:3a:ca:3e:b0:66:23:84:33:
4b:dd:40:81:48:46:49:84:ec:be:83:31:5d:c0:e5:13:9a:94:
c6:75:a0:6a:fd:69:81:d0:26:48:8b:b3:aa:76:03:33:59:7f:
07:d2:3d:52:38:92:ab:aa:70:64:0b:5b:4e:37:1d:c8:f2:97:
27:69:6a:c4:ac:bd:9b:08:e1:b7:89:3d:29:0b:04:60:e3:fd:
d1:47:76:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 10:27:30 2026 by rpki-client