Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft
File: M3L10Rir0Ska4kjmxp1kqZqa7wY.mft (raw, json)
Hash identifier: AbD+YMJHkNiW9NGz4JEf9bo2+nkJ+Ow1qoqziuHtJiY=
Subject key identifier: FB:57:2E:EF:F0:31:F6:C7:15:75:E0:B5:45:1B:2E:03:47:24:6D:71
Authority key identifier: 33:72:F5:D1:18:AB:D1:29:1A:E2:48:E6:C6:9D:64:A9:9A:9A:EF:06
Certificate issuer: /CN=3372f5d118abd1291ae248e6c69d64a99a9aef06
Certificate serial: 01A0E43F0881038A5639FC323D3EF0C224A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M3L10Rir0Ska4kjmxp1kqZqa7wY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft
Manifest number: 10A5
Signing time: Sun 27 Sep 2026 19:02:11 +0000
Manifest this update: Sun 27 Sep 2026 19:02:11 +0000
Manifest next update: Mon 28 Sep 2026 19:02:11 +0000
Files and hashes: 1: M3L10Rir0Ska4kjmxp1kqZqa7wY.crl (hash: EGkMsmHX4nUURSsX1eCjN1sZxVwcxFYG0567vVzFr+8=)
2: x3j0YXNfrQ1uoL9p2fnHwDo4Voo.roa (hash: +HeOEQXq41iJ7S0nO2qqAI09YN5UE1e6xIQ3R8exCoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft
rsync://rpki.ripe.net/repository/DEFAULT/M3L10Rir0Ska4kjmxp1kqZqa7wY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e4:3f:08:81:03:8a:56:39:fc:32:3d:3e:f0:c2:24:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3372f5d118abd1291ae248e6c69d64a99a9aef06
Validity
Not Before: Sep 27 19:02:11 2026 GMT
Not After : Sep 28 19:02:11 2026 GMT
Subject: CN=fb572eeff031f6c71575e0b5451b2e0347246d71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6b:08:fb:30:47:a8:4f:44:73:8b:d7:39:33:
9b:d0:6c:8d:47:39:26:94:f3:6c:9c:5d:0a:6e:64:
94:92:1e:b4:79:fb:4d:58:d2:c6:3d:1c:53:aa:ea:
d2:2f:6c:3b:a3:5b:8c:a9:e2:c5:69:57:79:63:a0:
41:4b:57:89:2a:aa:77:a1:e4:1b:16:a3:10:74:d1:
5a:4f:0b:6a:d2:99:39:04:79:75:a5:f3:7f:56:ea:
6d:5e:b0:67:3f:cc:17:e4:7a:d7:8b:99:30:ae:8c:
49:44:6d:83:78:37:08:ee:27:ae:b5:d3:b2:cb:1a:
9c:5c:11:a1:e0:0f:14:e6:f2:a3:a9:ab:95:d8:74:
50:0f:46:3d:8f:92:e5:06:32:b1:44:57:a1:d3:63:
11:90:c4:e3:62:e6:2c:75:63:60:7d:08:34:89:64:
d1:bf:14:1a:43:ee:bf:dd:c3:ec:02:f2:16:9a:d4:
87:85:0e:4b:bd:a6:57:61:bc:26:a5:c7:80:ab:0c:
2b:96:cf:8f:c5:fe:c1:f3:96:0a:19:59:bc:88:9d:
53:e0:c0:af:aa:2d:06:11:7a:27:a0:c2:dd:fb:92:
21:30:79:87:96:ae:af:51:bd:d9:1d:14:fe:d2:16:
37:c5:a2:d2:f9:91:40:e6:3f:ae:8f:e4:dd:37:f1:
af:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:57:2E:EF:F0:31:F6:C7:15:75:E0:B5:45:1B:2E:03:47:24:6D:71
X509v3 Authority Key Identifier:
keyid:33:72:F5:D1:18:AB:D1:29:1A:E2:48:E6:C6:9D:64:A9:9A:9A:EF:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M3L10Rir0Ska4kjmxp1kqZqa7wY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:f9:5c:b9:0d:e5:df:e9:64:01:1c:3b:d1:79:6e:af:5b:e9:
30:3e:1b:16:8b:19:b1:91:86:eb:de:cb:15:29:6c:59:38:e4:
11:2a:9f:ba:23:9e:28:e2:32:bb:1c:49:66:bd:78:47:dd:1e:
b6:b7:33:d2:28:76:03:d6:b7:10:86:22:ad:6c:38:56:e9:a2:
96:f6:c7:fa:b5:b1:bc:5e:48:12:33:61:56:a6:20:b2:ff:e0:
1b:75:bf:cb:d5:b1:bc:16:2a:77:2d:c9:3e:26:9e:87:a2:55:
ac:a1:db:4e:63:b2:31:1d:31:b4:4f:86:5c:2d:d5:0d:56:fd:
b4:8e:a4:01:7c:99:cb:95:fd:7f:32:14:ca:07:fd:e8:3d:10:
5b:c0:29:b4:74:3b:4c:77:24:a0:9d:64:dd:49:1b:a3:fb:03:
ca:81:dd:2f:52:f7:8e:35:f2:f8:ac:bc:34:40:20:11:08:1e:
19:70:d4:17:f3:02:2d:81:f1:1a:81:48:ef:2d:e7:70:9a:b9:
c3:9e:c6:f5:f1:36:f6:5c:f3:ce:f8:ea:59:7c:3e:4f:5c:b7:
bc:28:62:ce:6c:f2:f0:fa:78:52:75:d1:97:2e:41:36:8b:3a:
9a:cd:d2:56:fe:b4:0b:3e:9a:09:10:98:9a:4f:25:49:54:a7:
08:cb:a1:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:17:42 2026 by rpki-client