Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/92dcb4-f7fb-406f-adb8-0aa541e53928/1/510D73UIMrK8zukAl6l-m65W1UI.mft
File: 510D73UIMrK8zukAl6l-m65W1UI.mft (raw, json)
Hash identifier: OqCnQEj+yzqq6Fr7hjvCI/tyKMG8jq5KYihjsTqD8ng=
Subject key identifier: D9:F1:58:FA:08:53:09:0B:63:2B:F7:A2:5A:C6:97:CA:99:7D:91:9A
Authority key identifier: E7:5D:03:EF:75:08:32:B2:BC:CE:E9:00:97:A9:7E:9B:AE:56:D5:42
Certificate issuer: /CN=e75d03ef750832b2bccee90097a97e9bae56d542
Certificate serial: 01A0D26DFB1EDD06C19209C1C5EE2097F79E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/510D73UIMrK8zukAl6l-m65W1UI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/92dcb4-f7fb-406f-adb8-0aa541e53928/1/510D73UIMrK8zukAl6l-m65W1UI.mft
Manifest number: 010A
Signing time: Thu 24 Sep 2026 08:00:17 +0000
Manifest this update: Thu 24 Sep 2026 08:00:17 +0000
Manifest next update: Fri 25 Sep 2026 08:00:17 +0000
Files and hashes: 1: 510D73UIMrK8zukAl6l-m65W1UI.crl (hash: 9e86fNlkANOPKRObHlVT8RSoftxaJ8/IWnLGLR2vzgE=)
2: xOQzIz75lAWdGvsczpzw-mOsx48.roa (hash: plurgHJiRi0HXi8YT7nPx4/38GnV4aGxFs5z0lgHBMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/92dcb4-f7fb-406f-adb8-0aa541e53928/1/510D73UIMrK8zukAl6l-m65W1UI.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/92dcb4-f7fb-406f-adb8-0aa541e53928/1/510D73UIMrK8zukAl6l-m65W1UI.mft
rsync://rpki.ripe.net/repository/DEFAULT/510D73UIMrK8zukAl6l-m65W1UI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:6d:fb:1e:dd:06:c1:92:09:c1:c5:ee:20:97:f7:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e75d03ef750832b2bccee90097a97e9bae56d542
Validity
Not Before: Sep 24 08:00:17 2026 GMT
Not After : Sep 25 08:00:17 2026 GMT
Subject: CN=d9f158fa0853090b632bf7a25ac697ca997d919a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8c:aa:a1:f5:bc:69:ca:64:b0:3b:dd:70:cb:
90:64:50:bc:3c:66:3a:c2:79:1c:8e:0e:bf:16:38:
85:de:6c:a2:b7:16:13:85:f3:1e:cc:77:9d:00:0b:
f5:cf:23:17:99:0b:e5:3d:bb:fa:fe:92:48:b4:ce:
1a:ff:7a:34:58:e2:c4:0a:17:5b:2b:e8:dc:9f:69:
1c:1a:c2:e5:4a:ed:8a:2d:b3:97:9a:cb:19:93:95:
00:65:47:d8:99:ee:7e:55:ec:cc:eb:6e:09:f4:d6:
83:e5:11:3f:4f:af:fa:6b:0e:a8:4f:3f:0a:75:30:
33:bc:ab:a9:3f:29:02:91:a5:0d:7a:6e:97:8e:68:
e9:00:ca:f5:42:c8:81:13:76:54:22:22:71:fe:8b:
28:8a:6a:0f:12:a8:d9:d0:25:6f:80:93:d2:58:72:
a1:cf:8f:37:cf:cc:b8:45:53:83:fa:8a:34:e4:44:
ee:da:19:bb:e9:ed:7e:08:bd:5b:24:e1:d9:c0:65:
fb:fc:ec:46:46:9f:7b:e1:d5:e4:99:09:2a:dd:fe:
f5:d2:c8:06:e8:a6:13:f0:98:68:64:9d:52:91:30:
e0:a3:92:10:90:78:86:e9:00:1e:09:79:86:81:11:
ab:55:e6:83:df:76:5c:d4:50:73:cd:ea:e1:f3:d3:
91:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:F1:58:FA:08:53:09:0B:63:2B:F7:A2:5A:C6:97:CA:99:7D:91:9A
X509v3 Authority Key Identifier:
keyid:E7:5D:03:EF:75:08:32:B2:BC:CE:E9:00:97:A9:7E:9B:AE:56:D5:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/510D73UIMrK8zukAl6l-m65W1UI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/92dcb4-f7fb-406f-adb8-0aa541e53928/1/510D73UIMrK8zukAl6l-m65W1UI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/92dcb4-f7fb-406f-adb8-0aa541e53928/1/510D73UIMrK8zukAl6l-m65W1UI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:9b:77:fb:4b:dd:d6:1f:70:23:10:84:f5:52:c2:a3:06:13:
b7:aa:b7:cb:93:dd:e6:6a:66:51:51:ed:7a:b0:7f:28:59:d0:
00:c2:13:87:9b:87:8e:63:93:4d:49:d4:6d:21:6b:3c:54:55:
85:1e:7b:62:dc:bd:2d:cb:bd:95:a0:f6:f5:dc:de:a7:13:2d:
8f:ab:9a:85:cc:c5:0a:e0:55:48:e8:9e:63:38:2c:2a:59:95:
82:72:35:bf:47:58:93:c8:26:84:d1:77:f1:32:55:cc:8a:d6:
e0:65:d5:8a:94:a9:ef:25:f0:c7:19:39:c9:b2:a9:b0:1b:b5:
c9:19:c8:0f:30:ba:91:63:c8:65:5a:47:0c:28:2c:c8:f3:c0:
f2:01:a2:a6:af:58:30:35:28:b6:c4:a7:8d:33:29:28:08:ce:
69:70:e5:d1:1f:12:5f:a6:fc:d3:ce:fc:85:7d:aa:3f:08:45:
51:63:78:3b:3e:8e:d3:36:ee:f3:a0:db:7a:37:d0:81:5c:73:
a6:24:d4:17:61:cb:91:a6:c5:b4:3c:83:c3:39:0d:d9:56:d2:
73:34:c5:3f:e2:37:a0:d3:1d:c1:a3:9f:b7:ae:b0:58:b1:67:
bb:2b:19:9c:bf:1a:e3:54:da:24:57:88:86:31:6f:51:95:0d:
ba:46:15:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:44:41 2026 by rpki-client