Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft
File: M3L10Rir0Ska4kjmxp1kqZqa7wY.mft (raw, json)
Hash identifier: qFZ5/TGClsJ+ZnRj5eENspIjvtfTqRr74qMK0fPL9d0=
Subject key identifier: 7A:06:B9:B2:B5:80:2C:19:86:A8:7D:21:0D:79:2F:72:69:99:DD:1B
Authority key identifier: 33:72:F5:D1:18:AB:D1:29:1A:E2:48:E6:C6:9D:64:A9:9A:9A:EF:06
Certificate issuer: /CN=3372f5d118abd1291ae248e6c69d64a99a9aef06
Certificate serial: 01A1751469698DEF0D4F32543C76D3A3C17D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M3L10Rir0Ska4kjmxp1kqZqa7wY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft
Manifest number: 10F0
Signing time: Sun 25 Oct 2026 22:00:34 +0000
Manifest this update: Sun 25 Oct 2026 22:00:34 +0000
Manifest next update: Mon 26 Oct 2026 22:00:34 +0000
Files and hashes: 1: M3L10Rir0Ska4kjmxp1kqZqa7wY.crl (hash: lL45EmoJ9ut7mT6gXnTtxdpO/kePevzuE+NWwSG015I=)
2: x3j0YXNfrQ1uoL9p2fnHwDo4Voo.roa (hash: +HeOEQXq41iJ7S0nO2qqAI09YN5UE1e6xIQ3R8exCoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft
rsync://rpki.ripe.net/repository/DEFAULT/M3L10Rir0Ska4kjmxp1kqZqa7wY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 22:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:75:14:69:69:8d:ef:0d:4f:32:54:3c:76:d3:a3:c1:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3372f5d118abd1291ae248e6c69d64a99a9aef06
Validity
Not Before: Oct 25 22:00:34 2026 GMT
Not After : Oct 26 22:00:34 2026 GMT
Subject: CN=7a06b9b2b5802c1986a87d210d792f726999dd1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:76:57:ed:72:e3:ff:f2:33:1c:92:f8:54:ec:
6d:be:04:67:5d:7d:5f:ff:8c:bb:26:4a:95:9e:89:
32:85:c5:10:8a:cc:11:c1:f2:02:38:93:10:78:4f:
2d:0d:45:79:3f:ba:25:5c:39:ff:74:f1:a6:08:0b:
27:7d:b3:d0:c9:3e:09:d4:a4:13:1e:18:66:60:02:
e4:73:66:95:7e:16:e7:db:85:db:6c:89:a8:45:60:
81:35:9b:fa:fe:61:6f:9b:f2:dc:31:44:c0:56:27:
2f:cf:4d:fa:39:03:9a:8a:b1:d0:bd:2b:87:73:4d:
fe:db:38:62:1f:18:21:1d:39:b8:1c:fa:58:b3:71:
d1:c1:4d:f1:9a:49:a0:f0:6e:c1:ac:76:64:d9:38:
be:d7:95:c2:b8:eb:c2:12:06:6b:18:c9:d5:0e:cd:
a3:56:6e:2a:0f:06:a7:0c:c1:ef:58:b7:5a:94:be:
e0:5a:46:23:34:c2:a9:4f:ce:df:2b:1b:fd:c8:fa:
8f:89:a7:bf:3e:ce:41:c1:bb:76:6e:9b:2d:85:96:
f9:60:e3:67:40:3e:81:a0:ab:88:87:b8:1d:21:53:
4f:57:d2:d9:89:3b:d5:55:3c:41:b4:71:f8:e2:c7:
eb:fc:d4:a1:fb:bb:2b:ac:ed:f4:4b:57:6b:29:c3:
03:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:06:B9:B2:B5:80:2C:19:86:A8:7D:21:0D:79:2F:72:69:99:DD:1B
X509v3 Authority Key Identifier:
keyid:33:72:F5:D1:18:AB:D1:29:1A:E2:48:E6:C6:9D:64:A9:9A:9A:EF:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M3L10Rir0Ska4kjmxp1kqZqa7wY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:5f:59:30:c4:7d:0d:d6:ae:99:8e:0c:2c:64:2c:04:3d:14:
ef:b1:dc:18:6a:24:e7:3b:ff:78:72:f6:a3:c5:07:6a:cb:50:
cb:a8:40:66:7d:cd:70:e4:c5:e9:9f:ee:c6:0b:8a:15:bc:85:
3b:d9:48:1f:fc:55:a1:5a:f7:e4:1a:12:80:92:aa:14:6e:98:
df:d2:78:5e:27:dd:56:4d:ec:db:9b:ba:82:cd:76:3c:64:4f:
be:f7:86:a1:c9:b4:d1:50:58:6d:67:6d:be:41:e0:c5:c8:2c:
ad:36:51:43:7e:ea:9c:7b:5b:1d:c8:5f:3f:f2:90:46:d8:51:
d9:2c:3b:6c:67:21:05:13:d4:29:02:80:75:9a:89:07:96:6d:
ea:d0:a2:2f:3f:c4:85:49:6b:f5:86:5c:f1:32:cb:59:58:4b:
15:63:d5:a3:90:c6:ec:5f:99:57:25:b2:ca:cb:de:4c:56:cf:
8f:3d:fa:e3:20:d3:11:16:51:af:70:90:fd:c3:5c:e6:78:1e:
9c:e8:73:b5:27:2b:8c:bc:a2:4a:a0:4c:9e:46:d8:38:c3:48:
e9:03:20:f6:ad:1a:10:8b:7f:59:f3:dd:74:8c:c2:d6:be:8b:
21:8f:b1:42:b5:20:18:ed:cb:0f:ab:e5:04:50:05:4c:2d:3a:
cd:30:af:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 07:34:33 2026 by rpki-client