Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.mft
File: 10itqKdHT1rZkMmB_2snzj3hRxM.mft (raw, json)
Hash identifier: JwhSZdOQMAUnjyqPwRm2d2IxchZMv4M7MgUydsthXq4=
Subject key identifier: 6B:F5:38:06:04:CB:F0:1B:04:7F:36:06:72:70:9F:F3:9D:3F:66:F5
Authority key identifier: D7:48:AD:A8:A7:47:4F:5A:D9:90:C9:81:FF:6B:27:CE:3D:E1:47:13
Certificate issuer: /CN=d748ada8a7474f5ad990c981ff6b27ce3de14713
Certificate serial: 019FA37328F5F0B5A1BF6A560785CB10AE02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10itqKdHT1rZkMmB_2snzj3hRxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.mft
Manifest number: 02EC
Signing time: Mon 27 Jul 2026 12:01:01 +0000
Manifest this update: Mon 27 Jul 2026 12:01:01 +0000
Manifest next update: Tue 28 Jul 2026 12:01:01 +0000
Files and hashes: 1: 10itqKdHT1rZkMmB_2snzj3hRxM.crl (hash: hkkaVLivum0CTcRM8a8IbD0zOZwidYErcv2vm+cHnZk=)
2: dh6O1KZT1UxJ74lXsViPoGTKRqs.roa (hash: GqWYfVTgp7zJ77InQ5zu+O/CisErYsq267odGYdVn8s=)
3: q2Sr6iNLEgQhXIhOj17x_U41yCw.roa (hash: v7+FGob3+laO9WE5TRGdJZbvI5tauk2y9nqQMlT/eeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/10itqKdHT1rZkMmB_2snzj3hRxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 12:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:73:28:f5:f0:b5:a1:bf:6a:56:07:85:cb:10:ae:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d748ada8a7474f5ad990c981ff6b27ce3de14713
Validity
Not Before: Jul 27 12:01:01 2026 GMT
Not After : Jul 28 12:01:01 2026 GMT
Subject: CN=6bf5380604cbf01b047f360672709ff39d3f66f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:bd:c5:80:d2:f0:25:25:6e:38:0f:63:f7:5a:
43:2e:14:58:88:b3:31:04:78:f0:09:c1:1a:90:f1:
f9:3b:67:0c:e3:0d:a2:fa:3d:9a:3e:1a:b7:dc:21:
4d:c9:c9:c6:af:80:66:7b:52:5a:87:d6:c0:49:b7:
27:bd:05:61:c6:3e:17:88:3c:9b:b2:08:b1:4d:e0:
35:18:5f:2b:5d:d1:f6:59:e3:9f:78:4a:0f:1a:c9:
df:1e:c6:27:cc:3d:38:58:b9:e5:27:fe:1e:44:a5:
6a:8e:3d:89:14:ef:11:db:e5:d1:96:fc:16:ef:0f:
2c:4e:e5:93:e9:13:24:4f:3b:29:53:20:11:5c:03:
08:e7:ca:84:03:a3:d0:44:80:58:3c:52:c3:af:15:
3e:6b:0b:cc:2e:e7:98:10:c0:a9:ad:fd:09:f2:4d:
39:79:9d:91:09:09:3d:0c:5c:29:1b:6c:7a:92:2e:
1b:fd:d0:b2:6e:5e:14:23:17:a4:cc:72:61:73:e9:
6e:44:0c:cb:07:3e:c7:2c:b1:e6:51:80:a7:9b:d8:
f7:05:78:a5:6f:cc:17:46:ea:26:5c:41:2c:0e:3d:
0a:2a:8d:0a:83:20:c1:b1:41:42:10:5b:f0:4c:de:
69:64:9e:7c:61:10:e1:1c:e6:ed:b1:78:24:ad:e2:
a6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:F5:38:06:04:CB:F0:1B:04:7F:36:06:72:70:9F:F3:9D:3F:66:F5
X509v3 Authority Key Identifier:
keyid:D7:48:AD:A8:A7:47:4F:5A:D9:90:C9:81:FF:6B:27:CE:3D:E1:47:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10itqKdHT1rZkMmB_2snzj3hRxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:6d:17:24:b0:9f:15:3b:42:1d:ba:2c:18:17:ee:08:c6:6b:
39:92:d8:47:b3:d5:fc:dd:36:92:ba:7e:aa:de:9a:3b:d3:1e:
03:02:84:48:a3:fb:82:41:10:e4:bb:ee:03:db:64:10:7d:d6:
f9:be:b9:fd:c0:47:80:7d:b7:12:06:88:f8:c0:3f:89:f7:7c:
10:0b:a0:15:13:51:b3:a9:0f:91:d9:4b:9b:45:9e:66:28:fd:
51:e5:5f:ef:f6:61:e4:25:3d:eb:3c:10:40:8e:51:5e:73:9d:
f2:66:38:47:2e:dc:f9:8d:39:2b:ef:cb:a6:81:f0:bf:f2:ba:
c0:ca:22:dc:77:d6:c9:b0:1a:cd:17:c0:c1:33:08:dc:39:6c:
62:21:d0:51:24:a3:dc:c6:ce:cd:b5:82:3f:b9:8f:03:6d:d5:
82:ef:8b:2b:72:b2:09:aa:68:d4:74:de:62:15:e4:e5:09:38:
5e:47:8f:cc:63:7f:31:70:c2:57:c5:fd:33:ee:27:27:81:b5:
a5:89:8a:03:c3:df:6d:ce:e0:98:54:1c:99:c9:95:ce:23:0c:
bd:dc:b3:2c:58:62:78:7d:cb:7d:a4:cc:f3:43:fa:b9:bf:1c:
ab:41:7d:e9:c3:bc:57:37:b3:f2:ae:ae:d6:51:43:13:fd:bf:
8a:21:c5:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 17:20:50 2026 by rpki-client