Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.mft
File: 10L6T7KPryihjordTBDJYzfDxMU.mft (raw, json)
Hash identifier: Zqoq9CjWdomm7aDxlyTDjKRDq5DfRq6nJtUZ0Akhy1c=
Subject key identifier: 89:D3:BA:B7:DB:FA:9F:67:A1:7E:00:91:C9:6B:CF:E9:F0:B9:29:39
Authority key identifier: D7:42:FA:4F:B2:8F:AF:28:A1:8E:8A:DD:4C:10:C9:63:37:C3:C4:C5
Certificate issuer: /CN=d742fa4fb28faf28a18e8add4c10c96337c3c4c5
Certificate serial: 019D386675CAB54369986941BB175C60AD5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10L6T7KPryihjordTBDJYzfDxMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 07:02:11 +0000
Manifest this update: Sun 29 Mar 2026 07:02:11 +0000
Manifest next update: Mon 30 Mar 2026 07:02:11 +0000
Files and hashes: 1: 10L6T7KPryihjordTBDJYzfDxMU.crl (hash: 1UQgfgklRsHurxsb4Tb0iWCEOLXFgnYzSX7+L7QS7Is=)
2: 3bAp3q_3awus_cxtdm3xlCp_Kro.roa (hash: MeFCYRnaLN9vGZ2yrhZuS6ZkusuOmCKGC/cofWy68Cw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/10L6T7KPryihjordTBDJYzfDxMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:75:ca:b5:43:69:98:69:41:bb:17:5c:60:ad:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d742fa4fb28faf28a18e8add4c10c96337c3c4c5
Validity
Not Before: Mar 29 07:02:11 2026 GMT
Not After : Mar 30 07:02:11 2026 GMT
Subject: CN=89d3bab7dbfa9f67a17e0091c96bcfe9f0b92939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8d:52:3c:4f:62:42:b1:a6:e1:3e:81:57:18:
02:06:31:7c:8c:6e:db:3c:39:00:4f:b1:78:f3:63:
d7:60:8e:89:17:13:6f:ed:30:9e:e7:71:ad:f3:7b:
27:db:8b:6f:bc:54:05:91:0d:20:49:f1:01:38:a0:
b5:89:4a:19:95:ca:01:9f:79:14:14:af:62:7f:41:
0c:2d:7d:4e:46:e0:35:38:d6:f6:97:9c:de:1f:4f:
83:17:a0:a1:72:e8:98:c1:a6:af:ac:aa:f6:cf:51:
70:1a:62:9e:91:c8:1a:f0:5b:81:d3:f8:11:1a:b9:
31:7a:98:e7:d9:36:36:0b:c4:ee:7d:78:8a:41:34:
e0:8b:59:78:ab:09:69:30:d5:c3:0c:c5:90:04:ec:
d4:f7:1b:90:ce:c8:ee:63:55:18:b6:db:1a:69:19:
16:af:3d:98:26:a0:b8:7f:02:91:fc:12:03:be:3e:
65:7b:e2:fa:42:37:a9:31:f7:07:f7:6d:d0:a9:61:
0c:77:6b:87:c7:a1:ef:bd:ba:5c:71:ba:98:96:c4:
ff:5d:06:a0:1a:14:2f:a2:54:9a:b2:a1:1f:09:c2:
0a:1e:52:5a:23:76:cb:8f:80:2a:2d:d8:f0:0d:83:
3c:1f:8f:2f:bd:02:ce:9f:ef:36:aa:0d:d0:65:d1:
2a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:D3:BA:B7:DB:FA:9F:67:A1:7E:00:91:C9:6B:CF:E9:F0:B9:29:39
X509v3 Authority Key Identifier:
keyid:D7:42:FA:4F:B2:8F:AF:28:A1:8E:8A:DD:4C:10:C9:63:37:C3:C4:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10L6T7KPryihjordTBDJYzfDxMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:70:95:b2:fa:83:b4:8a:31:6f:f8:66:a7:77:be:5f:0a:50:
ae:d8:40:9c:d0:7e:4b:2f:8c:30:c3:09:35:20:7f:e1:76:48:
70:1c:f4:97:28:c3:4b:5e:8b:a5:14:31:aa:ec:d1:32:c9:d8:
f9:79:d8:35:e4:d8:0d:14:13:e3:d4:80:9c:5b:31:22:f1:83:
0f:ed:18:57:c3:07:6f:30:c0:9d:96:6b:46:46:dd:4c:fd:91:
5a:1a:fb:d5:b1:03:29:cd:55:49:04:b4:dd:8d:c6:a6:eb:f9:
23:49:7c:84:65:28:41:bb:e8:ab:f9:ba:0a:6a:f1:91:ce:5c:
0f:7f:d5:f2:f5:c9:0c:a0:27:19:4e:54:77:f4:61:de:eb:b0:
d8:9d:13:d5:61:a5:17:fa:fd:63:9f:03:3f:76:9b:dc:e9:71:
d1:73:2d:2d:a8:35:92:b5:26:03:4d:f5:16:7c:ef:ff:10:3c:
1e:1b:1d:cc:d6:2a:1b:e0:c3:b4:d0:6f:13:b1:a7:e5:08:a0:
ad:78:ac:c4:f9:c6:28:84:10:31:18:13:8c:e7:3f:a1:3d:39:
3d:c5:d2:c8:6f:33:ef:96:97:78:91:94:f4:27:69:8f:60:8a:
1b:b7:4a:ee:62:49:9a:89:0b:99:93:40:0a:25:63:e7:2e:15:
13:57:64:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:39 2026 by rpki-client