Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/10AeAklBizV1RyaIJPYkSSXY2zk.mft
File: 10AeAklBizV1RyaIJPYkSSXY2zk.mft (raw, json)
Hash identifier: CP7NCxaKRSY7P1uoxdCVLyKAjrD79BxkG3cpd9FvWMg=
Subject key identifier: 53:FE:88:BE:8D:E8:04:D4:FF:E9:A2:12:46:3F:08:9F:A6:07:D3:6E
Authority key identifier: D7:40:1E:02:49:41:8B:35:75:47:26:88:24:F6:24:49:25:D8:DB:39
Certificate issuer: /CN=d7401e0249418b357547268824f6244925d8db39
Certificate serial: 019D25BA17E957333D2E310955CB88AEE8E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10AeAklBizV1RyaIJPYkSSXY2zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/10AeAklBizV1RyaIJPYkSSXY2zk.mft
Manifest number: 0A07
Signing time: Wed 25 Mar 2026 16:00:45 +0000
Manifest this update: Wed 25 Mar 2026 16:00:45 +0000
Manifest next update: Thu 26 Mar 2026 16:00:45 +0000
Files and hashes: 1: 1-oVMePvmP_ShU4g9iq3PEMwk624.asa (hash: pi0ntWvCbn7cLEwUcdMKB4Mh3rw+t4rGo3pT9vesjgs=)
2: 10AeAklBizV1RyaIJPYkSSXY2zk.crl (hash: CoS2e8+ocjPrdSTZUtbhXYE5kPCvTRTgwaenoyHPiD0=)
3: JfiKnbeqPSQWrccipxHIV5asnZc.roa (hash: So58lqCsWHBSZ8BZGYVkNJbNtgNVSoZeRVERTPcUKB8=)
4: zWI51cMGq8NIsv4xHlGLcLlujuY.roa (hash: eQXeTCbeaOa+X96n8vuRc2zEoYqnb9UvGcseeMKxWrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/10AeAklBizV1RyaIJPYkSSXY2zk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/10AeAklBizV1RyaIJPYkSSXY2zk.mft
rsync://rpki.ripe.net/repository/DEFAULT/10AeAklBizV1RyaIJPYkSSXY2zk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:17:e9:57:33:3d:2e:31:09:55:cb:88:ae:e8:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7401e0249418b357547268824f6244925d8db39
Validity
Not Before: Mar 25 16:00:45 2026 GMT
Not After : Mar 26 16:00:45 2026 GMT
Subject: CN=53fe88be8de804d4ffe9a212463f089fa607d36e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:77:e5:22:3a:a4:7e:31:78:13:1d:bf:dd:fe:
4a:b1:03:05:c3:78:76:40:a4:8e:54:55:96:a3:5e:
63:52:7f:65:90:42:db:97:93:c9:fa:03:59:10:af:
7f:fb:55:0d:f4:e8:5f:6b:1c:bd:fc:34:0e:d0:77:
4b:d5:c3:c1:43:71:89:2c:6e:d3:0b:6f:ea:64:58:
70:bc:9c:69:1b:8b:b8:71:c3:45:14:04:62:e0:62:
46:0c:ff:91:41:4f:72:62:ad:47:8b:e2:a0:e2:13:
f7:d6:0e:e8:87:a7:54:4b:db:82:3d:9d:e5:d5:97:
c2:52:8a:0d:f4:bc:bb:f1:ce:22:78:40:53:71:cc:
eb:e9:2f:04:bd:7a:55:4d:0e:43:db:27:48:13:c9:
aa:f4:b6:87:e0:51:11:2a:d1:8a:d2:1d:c5:c3:bc:
c0:d2:bf:a2:3a:9c:57:0f:15:4e:d0:db:0b:c6:64:
41:dd:a9:3b:60:80:e1:ce:23:bf:79:76:3f:52:eb:
94:32:3e:76:aa:8a:8f:79:eb:96:29:d3:7c:e4:89:
cd:cb:d2:c4:06:38:77:cc:01:6c:aa:c2:15:8d:2c:
ed:a8:e7:b7:01:ee:7d:fa:92:30:ca:2c:ca:03:d6:
2a:57:56:bf:2a:cc:5a:c6:1c:5d:0d:46:3d:73:e0:
8a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:FE:88:BE:8D:E8:04:D4:FF:E9:A2:12:46:3F:08:9F:A6:07:D3:6E
X509v3 Authority Key Identifier:
keyid:D7:40:1E:02:49:41:8B:35:75:47:26:88:24:F6:24:49:25:D8:DB:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10AeAklBizV1RyaIJPYkSSXY2zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/10AeAklBizV1RyaIJPYkSSXY2zk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/10AeAklBizV1RyaIJPYkSSXY2zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:6f:57:fc:06:84:2f:fd:8c:05:62:32:18:c5:49:d9:cb:42:
36:5d:88:29:6a:cb:ea:6f:71:72:0c:2f:5e:94:fd:27:58:35:
d0:7e:2a:d8:9e:8b:a0:72:db:de:ca:10:57:36:8d:87:8b:29:
31:f4:c7:66:e9:cf:f1:00:5b:75:e7:b8:4f:2e:9c:dc:b9:34:
3d:8c:e8:bd:46:c3:99:fc:a0:4d:25:ef:41:49:92:1d:16:3e:
44:2f:8b:3d:a8:d8:f1:af:2a:aa:e1:55:5c:23:1f:77:cb:fc:
60:03:0b:be:3a:4c:e8:cd:53:b9:09:32:6e:b0:e1:03:5f:5e:
08:83:f0:2a:b4:00:5c:ce:29:df:98:60:2f:bb:a3:f4:58:66:
62:70:09:94:02:b3:4e:54:b1:b0:f1:1f:84:8f:b2:9e:1a:87:
e2:26:0a:7e:6d:35:5b:ae:b3:56:5c:50:2b:48:c1:f0:ba:3b:
d3:53:fe:b3:89:0a:9a:6e:e6:e8:1d:53:62:a8:a5:ef:70:6a:
56:82:36:90:c5:d3:88:e1:75:84:70:ac:ce:ac:d1:e6:f5:1d:
4d:e2:1f:4b:46:66:c3:e9:f5:73:e7:e1:f5:ee:5d:7f:0e:fa:
f3:d2:a6:17:61:5c:9a:8a:11:64:c1:96:78:05:e7:73:33:ac:
26:58:15:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:24:38 2026 by rpki-client