Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.mft
File: 10itqKdHT1rZkMmB_2snzj3hRxM.mft (raw, json)
Hash identifier: JslXJihbRAuh2WlLLkFvrE2xPV9v+JtLltIiaVPXqGg=
Subject key identifier: 01:BF:2F:DF:7C:15:30:D2:8F:F4:FA:F3:68:D4:89:EC:DA:96:E0:D8
Authority key identifier: D7:48:AD:A8:A7:47:4F:5A:D9:90:C9:81:FF:6B:27:CE:3D:E1:47:13
Certificate issuer: /CN=d748ada8a7474f5ad990c981ff6b27ce3de14713
Certificate serial: 019F9023534FA3D74C0D45E1A791BBCCFFC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10itqKdHT1rZkMmB_2snzj3hRxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.mft
Manifest number: 02E2
Signing time: Thu 23 Jul 2026 18:01:01 +0000
Manifest this update: Thu 23 Jul 2026 18:01:01 +0000
Manifest next update: Fri 24 Jul 2026 18:01:01 +0000
Files and hashes: 1: 10itqKdHT1rZkMmB_2snzj3hRxM.crl (hash: IUqT+0JeLzsCSjL0dF8pO2DGchMO5JhEHwSxgIM+8bk=)
2: dh6O1KZT1UxJ74lXsViPoGTKRqs.roa (hash: GqWYfVTgp7zJ77InQ5zu+O/CisErYsq267odGYdVn8s=)
3: q2Sr6iNLEgQhXIhOj17x_U41yCw.roa (hash: v7+FGob3+laO9WE5TRGdJZbvI5tauk2y9nqQMlT/eeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/10itqKdHT1rZkMmB_2snzj3hRxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 18:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:23:53:4f:a3:d7:4c:0d:45:e1:a7:91:bb:cc:ff:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d748ada8a7474f5ad990c981ff6b27ce3de14713
Validity
Not Before: Jul 23 18:01:01 2026 GMT
Not After : Jul 24 18:01:01 2026 GMT
Subject: CN=01bf2fdf7c1530d28ff4faf368d489ecda96e0d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:de:38:ab:d5:77:0f:0e:48:35:76:bb:aa:09:
12:e9:20:73:b9:c7:82:00:52:57:5e:ac:32:5b:b4:
c0:3a:d6:5a:bc:54:fa:84:c9:67:58:ef:fb:c5:61:
bb:30:24:92:af:6f:a2:4e:0a:e5:4b:7a:fd:e7:fe:
dc:b1:6b:52:a9:7f:79:5e:46:be:3b:0c:05:19:c2:
78:05:f3:bb:c2:37:2d:45:1f:4e:11:1d:66:61:cb:
32:87:9a:d4:1d:ad:0c:b7:99:b8:53:8c:14:03:96:
0e:b0:e2:e6:1e:44:8a:67:f5:8e:21:8f:10:45:ce:
20:8d:ea:63:22:be:6c:79:36:5c:c6:94:a7:5d:2e:
3a:3c:21:5a:e1:a7:7e:f7:7f:4c:54:de:64:a2:b7:
6c:c3:9c:f6:e1:58:2b:02:ec:c1:69:f9:35:13:aa:
33:a9:8e:3d:5f:9d:76:91:f0:e4:4e:6a:24:30:88:
a6:8f:80:b4:b5:f2:a3:08:79:be:6e:37:9c:db:2b:
b8:3d:50:1e:f4:f7:b9:48:fc:4d:3b:1f:4b:b9:ef:
8f:84:da:d0:07:1b:1a:b6:cd:36:c4:36:83:b2:65:
2f:78:58:2b:40:b9:60:82:2e:34:87:67:9a:90:15:
7a:27:e7:2b:8d:39:21:bd:eb:92:98:f3:2f:b4:e9:
2f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:BF:2F:DF:7C:15:30:D2:8F:F4:FA:F3:68:D4:89:EC:DA:96:E0:D8
X509v3 Authority Key Identifier:
keyid:D7:48:AD:A8:A7:47:4F:5A:D9:90:C9:81:FF:6B:27:CE:3D:E1:47:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10itqKdHT1rZkMmB_2snzj3hRxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:42:f1:48:d0:8a:e7:5f:4a:ed:fd:da:85:17:10:bb:23:18:
ac:be:6a:3a:35:9f:03:8a:71:c9:74:50:d5:9e:8a:bc:c4:ae:
3a:69:53:e1:12:d7:90:7b:74:13:c6:fe:d9:41:e4:b6:81:f3:
e4:88:ff:b2:41:12:82:54:61:fd:6f:b1:55:b0:31:86:9b:a1:
7f:19:c0:67:36:3c:74:ab:f1:16:fa:09:27:6c:dd:f7:e2:33:
fe:97:c5:15:ec:91:0e:1f:38:92:e6:9d:a4:7a:8c:f6:50:2e:
99:51:78:c6:f4:f3:29:35:b5:54:28:3d:4e:6b:e8:1c:06:93:
e8:b5:17:52:c5:fa:56:6c:67:e8:33:58:d6:09:09:28:e2:c8:
30:ff:a6:ce:1a:66:08:36:66:8c:4b:71:71:82:a9:ae:90:a0:
e3:50:03:40:c8:cc:88:08:3e:29:dd:f2:2d:54:f7:00:66:bb:
57:76:79:9d:ce:80:b3:25:f4:4c:2d:3f:51:64:2b:7a:8b:53:
b7:80:f9:4e:31:e3:0c:13:9f:25:76:2c:1b:b0:83:d3:ed:7d:
fe:f0:15:c4:f7:31:1a:89:c2:c8:1f:e0:44:dc:f0:a7:40:3b:
3c:23:8b:e5:71:22:fc:9c:37:13:e8:85:62:f0:36:ea:ee:cd:
cc:e6:70:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:19:41 2026 by rpki-client