Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.mft
File: 10itqKdHT1rZkMmB_2snzj3hRxM.mft (raw, json)
Hash identifier: O9xjCG+qAJ9PFRyyUSHztPKkON9TjAouE2LleypGEI0=
Subject key identifier: 15:55:C3:18:BA:BF:00:97:58:A0:88:63:31:14:47:0C:C5:60:A7:C0
Authority key identifier: D7:48:AD:A8:A7:47:4F:5A:D9:90:C9:81:FF:6B:27:CE:3D:E1:47:13
Certificate issuer: /CN=d748ada8a7474f5ad990c981ff6b27ce3de14713
Certificate serial: 01A0CAEB541514EE0C82ABEF206B8EB3A144
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10itqKdHT1rZkMmB_2snzj3hRxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.mft
Manifest number: 0385
Signing time: Tue 22 Sep 2026 21:00:15 +0000
Manifest this update: Tue 22 Sep 2026 21:00:15 +0000
Manifest next update: Wed 23 Sep 2026 21:00:15 +0000
Files and hashes: 1: 10itqKdHT1rZkMmB_2snzj3hRxM.crl (hash: AKAlOXVBjphs1FBpYRBd1EhJhC6bt5y2lnJ8Z6hZ4XY=)
2: dh6O1KZT1UxJ74lXsViPoGTKRqs.roa (hash: GqWYfVTgp7zJ77InQ5zu+O/CisErYsq267odGYdVn8s=)
3: q2Sr6iNLEgQhXIhOj17x_U41yCw.roa (hash: v7+FGob3+laO9WE5TRGdJZbvI5tauk2y9nqQMlT/eeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/10itqKdHT1rZkMmB_2snzj3hRxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:eb:54:15:14:ee:0c:82:ab:ef:20:6b:8e:b3:a1:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d748ada8a7474f5ad990c981ff6b27ce3de14713
Validity
Not Before: Sep 22 21:00:15 2026 GMT
Not After : Sep 23 21:00:15 2026 GMT
Subject: CN=1555c318babf009758a088633114470cc560a7c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2f:a9:0a:cb:79:fb:76:be:dc:05:8e:88:1a:
31:4e:48:42:f3:d5:d0:93:e8:51:fb:25:b7:39:c1:
08:06:ea:ed:66:d0:77:41:a8:f6:6c:1f:25:3e:a8:
28:3e:ac:5f:b0:eb:ea:f4:57:26:eb:9d:9c:64:f2:
d5:ce:f7:f5:d9:e3:93:e5:b6:c5:2d:b7:a6:57:e1:
12:4a:b2:24:2e:5e:ed:83:f5:ff:b1:2e:eb:8b:53:
06:67:17:82:a2:0b:e9:1e:e7:06:b2:34:4a:fe:ac:
e6:dc:61:21:4f:d0:8d:cd:56:fb:7e:17:4f:11:ee:
ff:52:be:f9:a8:8b:10:c0:c2:98:e5:0b:29:07:b0:
c4:ff:e1:1f:df:83:26:3f:99:ea:1b:b5:b3:89:e2:
cc:a1:ef:28:bc:75:21:97:f2:d2:6b:9f:4e:f4:9d:
f9:85:19:7f:d1:62:1d:c4:8f:1f:2c:ae:72:fa:8c:
b8:8a:9b:03:0c:3e:c0:d8:30:1b:a7:71:3d:11:09:
7d:dd:ef:3b:9b:a5:55:b4:02:66:ea:af:66:a1:43:
5c:35:77:3c:a0:05:88:26:56:1a:c1:60:e6:ee:ac:
3d:ff:f9:48:54:67:af:74:d3:ec:ae:fb:20:95:21:
26:0c:e9:84:2c:cd:d9:5a:16:e0:91:92:e5:13:63:
c3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:55:C3:18:BA:BF:00:97:58:A0:88:63:31:14:47:0C:C5:60:A7:C0
X509v3 Authority Key Identifier:
keyid:D7:48:AD:A8:A7:47:4F:5A:D9:90:C9:81:FF:6B:27:CE:3D:E1:47:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10itqKdHT1rZkMmB_2snzj3hRxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:bb:d6:95:75:54:60:ad:b7:0f:31:68:0b:23:4e:e1:bc:a9:
a6:a3:35:26:05:1b:41:1c:e6:b6:9f:77:5f:b4:db:91:5d:a9:
7c:32:1e:0c:e7:ba:cd:0b:5d:26:d7:2a:aa:d2:c5:df:7c:2c:
06:ce:d2:19:12:fb:a0:ab:32:f7:ca:f1:11:dc:d4:aa:6f:33:
41:e5:79:1d:f5:e1:a7:59:26:26:4e:8d:11:2f:d3:4f:ca:89:
d3:fc:38:71:53:2c:4b:2a:66:4b:20:20:17:d8:4e:6c:7c:b5:
59:94:d9:c9:b3:9e:fe:47:78:de:18:49:ff:4b:b2:29:5a:2f:
23:3f:a9:cb:0a:24:8e:4c:c3:2a:84:ef:ba:ec:49:96:cf:95:
f9:a5:0c:97:ac:0f:21:15:a6:61:fa:21:17:c6:32:e4:ce:94:
07:90:75:26:58:39:9c:55:e6:58:ee:95:54:02:fe:38:4e:c3:
94:ee:be:92:04:89:6b:9b:d8:48:15:92:fd:6b:1a:2d:c7:7b:
f1:92:40:6e:95:68:65:b6:f7:66:f3:1a:5c:9b:99:7d:a9:bc:
b5:94:0c:ec:79:a7:82:1b:b2:e8:70:0d:f4:2d:ff:7c:cc:2e:
0c:f9:89:cc:a0:31:1f:92:44:be:bd:ed:a8:48:45:3f:35:8c:
78:bd:6a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:14:27 2026 by rpki-client