Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/10AeAklBizV1RyaIJPYkSSXY2zk.mft
File: 10AeAklBizV1RyaIJPYkSSXY2zk.mft (raw, json)
Hash identifier: CBiqgCJEwsviLGFLhl9aRmucnSq2UJe4VxhZNydwkf8=
Subject key identifier: 60:DE:A8:E5:68:20:B7:BA:A2:70:73:2A:4C:F1:E8:F3:7D:0A:4E:10
Authority key identifier: D7:40:1E:02:49:41:8B:35:75:47:26:88:24:F6:24:49:25:D8:DB:39
Certificate issuer: /CN=d7401e0249418b357547268824f6244925d8db39
Certificate serial: 019E1CEB7CAF8B71546C4379C21E761967A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10AeAklBizV1RyaIJPYkSSXY2zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/10AeAklBizV1RyaIJPYkSSXY2zk.mft
Manifest number: 0A87
Signing time: Tue 12 May 2026 16:00:55 +0000
Manifest this update: Tue 12 May 2026 16:00:55 +0000
Manifest next update: Wed 13 May 2026 16:00:55 +0000
Files and hashes: 1: 1-oVMePvmP_ShU4g9iq3PEMwk624.asa (hash: pi0ntWvCbn7cLEwUcdMKB4Mh3rw+t4rGo3pT9vesjgs=)
2: 10AeAklBizV1RyaIJPYkSSXY2zk.crl (hash: qqxnPv68vqXTvAq9diYrF8O0qA71EOiRz5QQEMM+NSc=)
3: JfiKnbeqPSQWrccipxHIV5asnZc.roa (hash: So58lqCsWHBSZ8BZGYVkNJbNtgNVSoZeRVERTPcUKB8=)
4: zWI51cMGq8NIsv4xHlGLcLlujuY.roa (hash: eQXeTCbeaOa+X96n8vuRc2zEoYqnb9UvGcseeMKxWrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/10AeAklBizV1RyaIJPYkSSXY2zk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/10AeAklBizV1RyaIJPYkSSXY2zk.mft
rsync://rpki.ripe.net/repository/DEFAULT/10AeAklBizV1RyaIJPYkSSXY2zk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:7c:af:8b:71:54:6c:43:79:c2:1e:76:19:67:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7401e0249418b357547268824f6244925d8db39
Validity
Not Before: May 12 16:00:55 2026 GMT
Not After : May 13 16:00:55 2026 GMT
Subject: CN=60dea8e56820b7baa270732a4cf1e8f37d0a4e10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c3:0a:da:42:19:e9:ae:c1:9b:3e:b9:35:39:
f6:b6:45:f2:06:e7:d4:3f:84:8a:7c:30:38:41:bc:
44:ff:cc:83:58:c6:3f:ce:b9:bc:02:40:7e:88:d1:
36:9a:74:f9:57:a6:d2:6c:cb:a9:3c:c3:ee:7d:ef:
cb:fe:e8:21:07:e8:b5:1c:81:b2:78:ef:63:f1:a4:
5b:84:f4:11:8a:29:94:a5:88:ac:23:a9:b0:6d:d3:
1a:c2:df:fe:2c:45:9e:85:ee:38:30:df:57:b2:24:
0d:7d:17:b3:62:d2:7e:74:4b:66:51:31:57:66:2d:
cb:04:8a:1c:c1:c1:c5:fa:7f:4b:82:0f:8a:91:4a:
f8:56:45:8f:84:17:1f:d1:63:a7:39:5a:0b:93:ab:
b8:dc:db:20:63:64:b5:27:bd:77:6d:08:a5:0f:ce:
5c:71:b2:01:ce:d8:41:2a:18:4a:3c:83:13:00:00:
31:5a:44:2c:90:14:6f:da:32:6f:b8:16:0d:57:39:
49:db:04:37:96:50:ae:25:0d:11:a4:77:41:4c:2f:
83:f9:c3:d0:ec:4e:f6:b2:34:86:5d:87:65:f8:46:
db:27:1f:f2:56:1a:66:de:77:2d:85:5b:59:f8:d5:
9c:1a:74:4a:20:2c:34:e9:31:a2:a0:a5:f5:43:51:
b7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:DE:A8:E5:68:20:B7:BA:A2:70:73:2A:4C:F1:E8:F3:7D:0A:4E:10
X509v3 Authority Key Identifier:
keyid:D7:40:1E:02:49:41:8B:35:75:47:26:88:24:F6:24:49:25:D8:DB:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10AeAklBizV1RyaIJPYkSSXY2zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/10AeAklBizV1RyaIJPYkSSXY2zk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/10AeAklBizV1RyaIJPYkSSXY2zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:dd:f9:4e:77:9f:9a:a4:8e:8c:a6:43:3a:90:2a:85:c2:c6:
39:5c:7c:1d:e2:46:71:d0:be:6c:7f:6f:c9:bb:d2:de:10:6b:
5f:f6:b9:f7:db:5c:75:2d:ef:23:a1:3f:61:6d:2f:bb:b7:fc:
96:69:1f:13:63:7c:5a:47:7f:62:e4:a6:b9:50:69:05:81:90:
e0:e0:39:72:9e:fd:cb:4a:90:f2:17:48:fa:4a:11:cb:3f:d2:
5f:26:66:11:61:15:8b:f7:2f:c4:b2:e3:1d:26:02:1b:b4:25:
13:a4:c7:20:d0:d2:c6:89:44:b4:02:bd:3b:09:ab:04:6b:c7:
2d:10:48:cb:a8:87:03:cd:16:f8:c1:43:ce:df:a1:09:88:33:
3b:68:c6:0e:df:13:c0:80:32:60:2e:c3:6c:33:f7:03:22:0d:
0b:d3:83:f2:5b:54:38:1e:b1:b1:5c:fe:19:c8:fb:8b:ec:ba:
53:68:16:2c:ea:e0:bb:84:b3:06:d4:04:3f:8c:5a:0d:75:08:
30:d5:2b:98:77:29:78:6f:4d:fa:f4:c9:c8:8a:8d:c1:44:93:
8a:3f:14:1e:05:f6:0b:5a:c2:6c:7a:4b:bf:44:af:a3:5f:e5:
56:ec:33:30:bd:34:84:e3:38:fa:cb:ec:76:d7:30:94:cc:77:
6e:f5:1b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:12:49 2026 by rpki-client