Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.mft
File: 10itqKdHT1rZkMmB_2snzj3hRxM.mft (raw, json)
Hash identifier: q5O6Onber2dv9LKAkK/hRdzj9hnV8+OlVHs9I+oOjsg=
Subject key identifier: 61:4B:A4:AF:FF:BA:E4:3B:7A:73:B7:C0:9B:9E:A1:28:72:EA:4F:64
Authority key identifier: D7:48:AD:A8:A7:47:4F:5A:D9:90:C9:81:FF:6B:27:CE:3D:E1:47:13
Certificate issuer: /CN=d748ada8a7474f5ad990c981ff6b27ce3de14713
Certificate serial: 019E32980035C8228AD19D3339B80815998B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10itqKdHT1rZkMmB_2snzj3hRxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.mft
Manifest number: 022D
Signing time: Sat 16 May 2026 21:01:22 +0000
Manifest this update: Sat 16 May 2026 21:01:22 +0000
Manifest next update: Sun 17 May 2026 21:01:22 +0000
Files and hashes: 1: 10itqKdHT1rZkMmB_2snzj3hRxM.crl (hash: Kj8TPN7tKCIg9VWjrkXjV6/EI4GZyvHVQOLYvdjNulk=)
2: dh6O1KZT1UxJ74lXsViPoGTKRqs.roa (hash: GqWYfVTgp7zJ77InQ5zu+O/CisErYsq267odGYdVn8s=)
3: q2Sr6iNLEgQhXIhOj17x_U41yCw.roa (hash: v7+FGob3+laO9WE5TRGdJZbvI5tauk2y9nqQMlT/eeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/10itqKdHT1rZkMmB_2snzj3hRxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:32:98:00:35:c8:22:8a:d1:9d:33:39:b8:08:15:99:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d748ada8a7474f5ad990c981ff6b27ce3de14713
Validity
Not Before: May 16 21:01:22 2026 GMT
Not After : May 17 21:01:22 2026 GMT
Subject: CN=614ba4afffbae43b7a73b7c09b9ea12872ea4f64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b9:bd:55:f0:7d:cb:a0:23:42:0a:0c:5c:40:
6b:06:6a:5d:76:d3:51:53:42:c6:8f:5e:7e:46:1b:
c2:30:1f:7e:9d:13:61:a5:97:0b:14:cf:64:04:1c:
c8:d7:a8:47:c4:58:a3:8f:4a:e4:8a:0e:5b:f0:2f:
a9:a2:13:f7:5b:f8:0c:e0:1e:ff:60:77:63:4f:9c:
7b:e1:22:3e:91:26:72:31:1e:58:e9:99:75:c9:3e:
2b:50:b2:fb:42:45:ff:6a:b4:81:84:fb:1a:66:1a:
7d:c8:88:7b:f3:6d:24:ce:ca:96:99:05:83:3f:56:
57:9f:65:74:fc:32:be:f6:10:03:de:2b:c8:41:2d:
0c:ca:56:93:e0:84:7f:de:3c:d3:80:09:57:e3:73:
e8:06:05:49:43:4e:8f:28:55:a6:b0:89:fc:61:fb:
d7:ea:3c:34:0e:90:de:04:c7:a8:03:a4:4a:f1:6d:
61:22:a0:d0:58:a1:62:42:df:98:db:87:05:b6:62:
09:0d:b5:61:25:0b:76:d5:a4:5d:4a:5c:17:2b:31:
b0:61:4e:7f:73:2b:f8:90:fc:7b:e6:8e:a7:e6:73:
84:17:e3:f8:56:c3:aa:f1:bb:e1:65:94:5c:45:bb:
40:f7:36:d9:97:75:78:e7:eb:b4:79:c8:c0:6f:58:
c1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:4B:A4:AF:FF:BA:E4:3B:7A:73:B7:C0:9B:9E:A1:28:72:EA:4F:64
X509v3 Authority Key Identifier:
keyid:D7:48:AD:A8:A7:47:4F:5A:D9:90:C9:81:FF:6B:27:CE:3D:E1:47:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10itqKdHT1rZkMmB_2snzj3hRxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:20:37:10:9e:77:e8:db:9b:a2:2a:db:4d:a0:79:a8:ec:22:
91:e2:e4:08:a2:1c:ea:1c:0f:91:ed:55:d4:cd:15:16:5b:e8:
f3:a4:a8:c0:a7:78:2f:da:c9:a5:31:33:6d:7d:c0:8e:ce:ce:
20:11:b4:1b:67:98:e7:96:12:d6:6a:68:f0:92:5e:3f:52:52:
ef:a5:02:28:e8:70:75:23:06:e1:d1:c3:a5:ab:e6:36:c2:52:
b4:4f:22:db:90:36:ae:36:1e:85:d5:31:4b:1a:ed:b8:b3:5a:
3f:90:70:52:b9:88:b4:98:a2:e5:fb:d4:b6:ba:da:4a:5f:87:
7d:93:f6:1b:04:6a:1b:ed:9e:24:8f:c1:ae:43:4a:58:d5:de:
26:70:81:75:7d:3d:4f:9d:7d:2c:1a:12:3c:32:52:21:e7:7b:
f7:d4:65:0a:dd:f8:08:89:fa:e9:a7:da:44:d6:18:97:65:92:
91:0d:c5:34:b1:18:e7:ce:3c:e9:7a:69:e1:2b:aa:92:13:55:
f7:f9:ab:0f:f7:c4:c9:91:94:ef:eb:92:c2:ab:3f:36:9c:c6:
38:a0:cd:98:4c:07:01:69:11:9a:5a:62:6b:d9:e6:2c:57:85:
d2:fb:d4:1c:0b:7b:a3:9c:5c:9c:fd:80:05:0a:4c:f6:94:72:
a5:50:14:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:41:43 2026 by rpki-client