Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft
File: M3L10Rir0Ska4kjmxp1kqZqa7wY.mft (raw, json)
Hash identifier: dJoG4mspFbsiNVcwsf4bguTi8vK+bBmNL7XLta9OpWk=
Subject key identifier: FF:E8:27:6F:82:68:83:E3:9D:52:C7:A8:F9:6F:0D:65:58:A5:DC:98
Authority key identifier: 33:72:F5:D1:18:AB:D1:29:1A:E2:48:E6:C6:9D:64:A9:9A:9A:EF:06
Certificate issuer: /CN=3372f5d118abd1291ae248e6c69d64a99a9aef06
Certificate serial: 01A17702C8146463D10DD6FF3F57247F9B51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M3L10Rir0Ska4kjmxp1kqZqa7wY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft
Manifest number: 10F1
Signing time: Mon 26 Oct 2026 07:00:33 +0000
Manifest this update: Mon 26 Oct 2026 07:00:33 +0000
Manifest next update: Tue 27 Oct 2026 07:00:33 +0000
Files and hashes: 1: M3L10Rir0Ska4kjmxp1kqZqa7wY.crl (hash: eJIyFo+PGTEdlJeRR1e85ljn6kZf2YZI36wNoH2U1+A=)
2: x3j0YXNfrQ1uoL9p2fnHwDo4Voo.roa (hash: +HeOEQXq41iJ7S0nO2qqAI09YN5UE1e6xIQ3R8exCoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft
rsync://rpki.ripe.net/repository/DEFAULT/M3L10Rir0Ska4kjmxp1kqZqa7wY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:02:c8:14:64:63:d1:0d:d6:ff:3f:57:24:7f:9b:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3372f5d118abd1291ae248e6c69d64a99a9aef06
Validity
Not Before: Oct 26 07:00:33 2026 GMT
Not After : Oct 27 07:00:33 2026 GMT
Subject: CN=ffe8276f826883e39d52c7a8f96f0d6558a5dc98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ae:c5:60:a1:3a:52:88:49:e0:27:04:84:0a:
aa:ac:a4:ff:f9:35:af:7a:7d:bb:15:72:7c:eb:68:
e0:60:7c:c1:62:a3:c3:14:23:10:e9:2d:e0:88:b5:
53:da:b2:c2:17:2a:44:84:b5:c0:0f:dc:ee:cb:f8:
f7:50:01:cb:10:60:48:25:fd:2d:24:46:07:80:7c:
4d:e7:f2:88:c3:d9:73:e8:ff:04:d8:fb:18:7e:e2:
b6:f6:3f:44:58:ef:a9:3c:c7:0b:50:8a:72:bf:46:
07:c3:2d:ef:dd:41:9f:ab:52:da:5d:c5:54:c1:04:
67:95:0d:30:11:5e:54:28:1b:3d:1c:44:33:6f:ae:
35:2c:7f:14:9b:78:35:27:ae:a8:b7:ad:34:f4:1e:
89:6b:1d:81:51:d5:06:60:4a:ba:df:cc:aa:f7:56:
aa:72:a5:6a:22:73:d1:49:5d:37:1e:df:a9:9e:9a:
14:07:3b:a5:29:fe:f1:fb:1a:c1:be:21:d0:20:0a:
5b:6d:e6:37:8c:10:e3:42:3c:a9:50:00:60:d3:2d:
c1:aa:f5:d4:6f:94:a6:08:7d:5a:8f:e2:68:ef:e6:
15:ca:70:4d:a9:c1:4e:52:1a:78:3a:d2:9b:63:7b:
32:df:6d:23:4b:11:57:00:e8:66:e1:56:77:8a:89:
82:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E8:27:6F:82:68:83:E3:9D:52:C7:A8:F9:6F:0D:65:58:A5:DC:98
X509v3 Authority Key Identifier:
keyid:33:72:F5:D1:18:AB:D1:29:1A:E2:48:E6:C6:9D:64:A9:9A:9A:EF:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M3L10Rir0Ska4kjmxp1kqZqa7wY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:9d:c7:e5:b8:cb:e9:68:87:da:05:6b:b8:eb:14:8e:52:5d:
9a:4f:3d:d0:4e:25:6e:1d:4e:92:66:9b:66:cc:ac:b4:98:67:
67:d1:50:00:fc:85:89:44:0f:00:ae:bf:4a:e5:d9:b2:9b:fa:
b4:8f:8b:29:67:06:6f:a6:25:cc:f1:1e:ee:c8:65:ed:49:26:
07:0e:19:a2:19:f9:35:ed:8e:16:5a:4d:dc:56:d8:bb:ad:a6:
7a:d4:b2:2e:74:ff:bb:92:42:98:97:a3:02:cc:82:3c:27:44:
63:c1:5d:e2:f9:60:97:d0:6d:6b:50:55:0c:53:4e:8a:e6:ed:
99:60:9c:50:0a:a9:dc:5e:d3:5d:01:c8:aa:dc:7b:ec:8b:e9:
62:cf:48:fe:86:03:a8:de:1c:12:e4:71:ab:0a:3d:66:de:6c:
46:72:d0:a6:f6:40:aa:eb:c2:53:06:52:f9:89:02:7b:02:18:
6d:f7:ef:aa:18:49:6b:5b:c1:2e:30:99:d5:db:6a:c5:84:f3:
aa:ed:10:4c:d4:73:81:fe:ab:86:21:bc:5a:4d:4a:9a:e0:96:
95:10:3d:e2:f4:ce:cb:b8:1a:68:f1:42:5e:7b:cc:11:aa:41:
fa:92:89:bb:b8:98:73:11:14:d0:ac:33:43:2c:1c:b5:6f:82:
2d:4d:10:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 12:42:25 2026 by rpki-client