Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/10AeAklBizV1RyaIJPYkSSXY2zk.mft
File: 10AeAklBizV1RyaIJPYkSSXY2zk.mft (raw, json)
Hash identifier: 2RZvBjtBh6i/gTwEnR6USSm7WbgQlj+PE7ecLgSn9B4=
Subject key identifier: C7:E4:99:ED:A2:7E:09:8C:B3:FF:B2:1E:84:02:BD:D8:1C:C7:48:D8
Authority key identifier: D7:40:1E:02:49:41:8B:35:75:47:26:88:24:F6:24:49:25:D8:DB:39
Certificate issuer: /CN=d7401e0249418b357547268824f6244925d8db39
Certificate serial: 01A0ED41D49888554C3CC3FC8AD48F0FF7E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10AeAklBizV1RyaIJPYkSSXY2zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/10AeAklBizV1RyaIJPYkSSXY2zk.mft
Manifest number: 0BFC
Signing time: Tue 29 Sep 2026 13:01:49 +0000
Manifest this update: Tue 29 Sep 2026 13:01:49 +0000
Manifest next update: Wed 30 Sep 2026 13:01:49 +0000
Files and hashes: 1: 1-oVMePvmP_ShU4g9iq3PEMwk624.asa (hash: pi0ntWvCbn7cLEwUcdMKB4Mh3rw+t4rGo3pT9vesjgs=)
2: 10AeAklBizV1RyaIJPYkSSXY2zk.crl (hash: lrFWfO0FR/Kocnip160w59AzHCvV91kCrGJ+sx5Ir0w=)
3: JfiKnbeqPSQWrccipxHIV5asnZc.roa (hash: So58lqCsWHBSZ8BZGYVkNJbNtgNVSoZeRVERTPcUKB8=)
4: zWI51cMGq8NIsv4xHlGLcLlujuY.roa (hash: eQXeTCbeaOa+X96n8vuRc2zEoYqnb9UvGcseeMKxWrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/10AeAklBizV1RyaIJPYkSSXY2zk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/10AeAklBizV1RyaIJPYkSSXY2zk.mft
rsync://rpki.ripe.net/repository/DEFAULT/10AeAklBizV1RyaIJPYkSSXY2zk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 13:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:41:d4:98:88:55:4c:3c:c3:fc:8a:d4:8f:0f:f7:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7401e0249418b357547268824f6244925d8db39
Validity
Not Before: Sep 29 13:01:49 2026 GMT
Not After : Sep 30 13:01:49 2026 GMT
Subject: CN=c7e499eda27e098cb3ffb21e8402bdd81cc748d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:38:8c:e6:72:ac:a2:6e:b2:57:f9:29:e4:7d:
56:72:53:55:2b:02:80:be:de:7d:04:86:49:77:26:
1a:00:10:99:d8:b2:9c:82:e3:dc:29:e0:cb:1f:8b:
8b:1f:99:bd:52:db:df:96:02:c9:d6:5a:45:81:08:
9a:b4:33:8f:5b:ea:b1:0b:cf:d9:44:ec:67:2f:77:
d7:ed:16:b8:dc:74:fa:20:01:92:d3:33:5a:65:b6:
b9:c2:ac:5b:b2:55:b0:11:cb:b6:58:8f:98:25:da:
66:65:27:53:ed:8a:6e:7a:03:f4:6a:c6:16:e8:56:
e8:f5:67:df:26:77:62:89:aa:18:81:ce:a3:e8:a4:
5c:0e:2b:de:1b:6a:42:5d:a0:a4:78:fe:9a:ad:c5:
02:0d:6e:6c:8d:87:02:23:f9:6f:c1:cc:dc:f5:f0:
f0:a8:ad:fe:c1:85:c3:27:b7:ad:90:ac:12:eb:7c:
9c:9f:3d:99:4e:82:d6:bb:57:32:5c:af:3b:55:23:
32:cd:5c:41:8f:f7:e5:11:61:c8:43:af:ab:f2:96:
bb:29:be:60:09:ef:62:67:a9:81:de:93:2c:32:75:
7f:1f:44:64:48:d7:9f:f8:e3:99:32:a5:86:70:57:
e5:e4:58:79:c9:92:d0:92:1e:b0:53:32:dc:ed:74:
d6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:E4:99:ED:A2:7E:09:8C:B3:FF:B2:1E:84:02:BD:D8:1C:C7:48:D8
X509v3 Authority Key Identifier:
keyid:D7:40:1E:02:49:41:8B:35:75:47:26:88:24:F6:24:49:25:D8:DB:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10AeAklBizV1RyaIJPYkSSXY2zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/10AeAklBizV1RyaIJPYkSSXY2zk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/10AeAklBizV1RyaIJPYkSSXY2zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e8:c0:18:b8:2c:b7:94:9a:2e:65:3e:74:20:84:af:6c:ae:b1:
cb:1c:91:8e:36:a0:fa:6e:6b:77:72:65:4b:40:bb:10:22:f2:
79:11:8d:01:7d:56:83:b0:d8:6c:c8:6a:90:e7:ee:eb:18:c3:
e9:e5:03:d5:06:4c:8f:df:94:7c:33:ba:e3:e1:5f:dd:8f:c1:
5b:07:6c:d0:28:9a:01:ec:ca:49:a7:c7:b2:0f:b7:71:d5:4d:
29:77:93:8b:0b:7b:b8:a9:2a:68:94:f4:47:aa:62:30:1f:02:
76:03:b5:06:da:e7:9c:41:14:47:23:4d:3a:20:86:a4:99:a7:
af:e7:38:6b:f8:01:c1:79:61:8f:1a:17:14:8e:d9:ae:c2:2d:
4f:35:93:2c:44:e3:85:f4:6f:9b:27:65:2c:27:f2:ef:5b:59:
a0:22:d6:9f:a4:61:31:84:80:4f:fd:93:52:eb:b2:51:32:bc:
45:e3:b9:d8:6e:4d:af:8a:21:c7:be:66:ac:3e:a1:29:20:d2:
87:7d:03:e4:2b:bb:90:8c:94:42:f1:4c:82:85:8a:32:4b:53:
87:b9:e6:86:b7:8d:7f:7c:57:5f:4b:98:4d:62:7c:af:da:a4:
28:2a:9f:de:90:3a:af:29:0a:0e:63:c2:63:83:cf:90:df:03:
1b:b0:4e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 00:20:33 2026 by rpki-client