Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/ed0296-43be-489f-a82f-8d6b6ab61b75/1/10eU-ZasWj8CtWp1wUlJQD0CrGQ.mft
File: 10eU-ZasWj8CtWp1wUlJQD0CrGQ.mft (raw, json)
Hash identifier: /6r58/De63yaTI3DqsVZvOPTxaqXdyDm6fNjMSy187k=
Subject key identifier: DE:BC:69:2E:33:31:F4:AE:55:D5:2A:A6:60:B6:FB:79:08:8A:22:71
Authority key identifier: D7:47:94:F9:96:AC:5A:3F:02:B5:6A:75:C1:49:49:40:3D:02:AC:64
Certificate issuer: /CN=d74794f996ac5a3f02b56a75c14949403d02ac64
Certificate serial: 019D2960788CBA09CD79AD588523540955D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10eU-ZasWj8CtWp1wUlJQD0CrGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/ed0296-43be-489f-a82f-8d6b6ab61b75/1/10eU-ZasWj8CtWp1wUlJQD0CrGQ.mft
Manifest number: 1882
Signing time: Thu 26 Mar 2026 09:01:21 +0000
Manifest this update: Thu 26 Mar 2026 09:01:21 +0000
Manifest next update: Fri 27 Mar 2026 09:01:21 +0000
Files and hashes: 1: 10eU-ZasWj8CtWp1wUlJQD0CrGQ.crl (hash: if9CIcAxGIepdC8cTMHWAlEZas3OmnhVeTtH7n5brqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/ed0296-43be-489f-a82f-8d6b6ab61b75/1/10eU-ZasWj8CtWp1wUlJQD0CrGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/ed0296-43be-489f-a82f-8d6b6ab61b75/1/10eU-ZasWj8CtWp1wUlJQD0CrGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/10eU-ZasWj8CtWp1wUlJQD0CrGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:78:8c:ba:09:cd:79:ad:58:85:23:54:09:55:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d74794f996ac5a3f02b56a75c14949403d02ac64
Validity
Not Before: Mar 26 09:01:21 2026 GMT
Not After : Mar 27 09:01:21 2026 GMT
Subject: CN=debc692e3331f4ae55d52aa660b6fb79088a2271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2d:e0:03:02:e0:d1:b7:ff:5f:5e:4f:69:b9:
12:7b:d2:d6:c1:16:a5:6b:7f:c6:0f:1c:fe:63:6c:
2f:aa:0f:84:28:c4:59:19:a7:d6:35:d8:86:c7:d9:
a4:9d:34:10:49:ed:6f:36:2a:92:65:d0:94:6c:38:
8c:f6:35:cd:ff:24:d6:19:80:cf:03:fc:92:3a:66:
90:1c:51:2c:0a:87:4e:70:75:06:3d:3c:4e:37:bd:
df:46:90:32:25:66:c2:3e:2d:14:b9:de:f6:e0:b1:
33:28:92:31:63:16:ed:8e:4c:62:08:ee:53:e9:42:
61:90:53:41:5a:ed:57:02:a8:1a:d5:5e:67:a5:76:
b0:b2:bc:5f:36:ec:24:24:0d:75:68:b1:a9:94:31:
36:64:41:fd:ee:09:9d:a7:85:28:15:1b:00:17:a7:
4a:38:09:0c:00:44:cd:df:87:77:2c:2f:cd:1e:1e:
b2:c6:e4:29:d1:3e:29:3b:a5:e5:39:cf:c4:5d:74:
65:e0:19:ff:37:41:e4:44:f8:fb:5e:22:e8:41:77:
64:f2:b0:97:cf:63:47:23:61:36:d2:9c:cd:8c:bc:
cd:b1:e0:db:9a:6e:8e:5f:76:4f:c7:5a:c4:df:5f:
e7:63:62:a7:66:51:42:7c:86:0a:43:6e:46:1c:8d:
be:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:BC:69:2E:33:31:F4:AE:55:D5:2A:A6:60:B6:FB:79:08:8A:22:71
X509v3 Authority Key Identifier:
keyid:D7:47:94:F9:96:AC:5A:3F:02:B5:6A:75:C1:49:49:40:3D:02:AC:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10eU-ZasWj8CtWp1wUlJQD0CrGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ed0296-43be-489f-a82f-8d6b6ab61b75/1/10eU-ZasWj8CtWp1wUlJQD0CrGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ed0296-43be-489f-a82f-8d6b6ab61b75/1/10eU-ZasWj8CtWp1wUlJQD0CrGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:72:b5:42:13:98:e4:6f:40:5a:a4:a0:e6:9b:a7:95:cb:c6:
92:52:3e:fe:28:13:af:28:52:5e:98:6e:49:e5:db:3d:1a:dc:
7a:27:d5:21:5e:48:b9:de:6e:27:a3:37:22:69:15:07:1e:87:
03:24:ae:69:85:3b:3b:db:49:b1:ca:52:74:60:bb:6b:00:e7:
f8:5a:85:af:bf:08:b4:e0:a8:0c:d0:12:67:ea:a7:b1:e9:7b:
e6:ba:14:be:d2:77:35:81:90:e7:b2:9a:83:35:45:77:41:8c:
14:a0:51:0a:fe:29:84:ea:49:eb:e9:ed:b8:8d:b8:75:c6:1e:
c3:f5:f4:9e:21:65:29:f7:94:55:4b:05:2f:10:12:6d:8d:c2:
18:3d:55:b6:72:f9:4a:6a:59:1e:8e:8a:7a:d1:24:3b:5b:c0:
73:50:b1:0d:0e:39:1f:66:3d:4a:95:9a:56:53:7f:b6:63:c1:
f6:4f:44:26:a8:68:e5:1a:d3:9f:a4:cd:86:3b:10:92:6c:c6:
ee:cc:6a:ba:1e:bb:9e:9a:c1:42:a2:aa:71:c3:e6:42:f9:e2:
ec:07:00:3f:83:1c:f6:67:39:58:8e:84:ed:a4:29:2a:91:d6:
e5:08:f4:b0:3b:02:1a:4a:d1:26:01:1f:73:7e:95:95:7f:c7:
7f:38:e6:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:03:56 2026 by rpki-client