Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/1/10C87A364FC67E6FD644AB0896BEE4CB1D5428FE.mft
File: 10C87A364FC67E6FD644AB0896BEE4CB1D5428FE.mft (raw, json)
Hash identifier: ym0lbikTjv99S03X7ZrjflGN83IQ3ifr9Zffkq0cb04=
Subject key identifier: 2F:F3:22:8B:EA:E2:02:6C:33:D5:5D:91:3A:FF:A9:64:6E:EC:B7:4B
Authority key identifier: 10:C8:7A:36:4F:C6:7E:6F:D6:44:AB:08:96:BE:E4:CB:1D:54:28:FE
Certificate issuer: /CN=10c87a364fc67e6fd644ab0896bee4cb1d5428fe
Certificate serial: 2D9D3D61499EB1146C26E230A6AD83F15B0DE6D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EMh6Nk_Gfm_WRKsIlr7kyx1UKP4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/1/10C87A364FC67E6FD644AB0896BEE4CB1D5428FE.mft
Manifest number: 37
Signing time: Tue 12 May 2026 16:40:40 +0000
Manifest this update: Tue 12 May 2026 16:35:40 +0000
Manifest next update: Wed 13 May 2026 17:56:40 +0000
Files and hashes: 1: AS199353.asa (hash: GzUtRisoBpap4J4JTDtai5ZIBMzXPWyCrb3HWgNBb/c=)
2: 10C87A364FC67E6FD644AB0896BEE4CB1D5428FE.crl (hash: N3F7wroLLyxqRYQee/xKkKzQ3nFm0VfonDewtLRo0NU=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/1/10C87A364FC67E6FD644AB0896BEE4CB1D5428FE.crl
rsync://rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/1/10C87A364FC67E6FD644AB0896BEE4CB1D5428FE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EMh6Nk_Gfm_WRKsIlr7kyx1UKP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:9d:3d:61:49:9e:b1:14:6c:26:e2:30:a6:ad:83:f1:5b:0d:e6:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10c87a364fc67e6fd644ab0896bee4cb1d5428fe
Validity
Not Before: May 12 16:35:40 2026 GMT
Not After : May 13 17:56:40 2026 GMT
Subject: CN=2FF3228BEAE2026C33D55D913AFFA9646EECB74B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:98:a1:af:26:08:39:01:b8:81:32:86:27:b6:
24:52:61:10:7a:9e:67:41:63:4a:d2:3a:b6:61:3a:
52:62:5f:68:24:89:cf:71:19:7c:28:d8:89:87:70:
fd:9c:eb:60:a5:cb:ed:a5:5d:42:ec:83:3c:06:84:
34:6b:0e:d1:f2:cb:96:c5:38:53:34:f2:ba:b0:84:
8d:ed:b9:7b:b4:0f:59:b7:51:bb:df:e1:79:f2:9e:
1f:54:00:40:4d:f6:52:1b:8a:c9:a0:af:40:a6:b1:
83:5a:46:c8:be:9c:ba:47:5b:49:ff:d1:a0:1b:9b:
79:51:a4:e9:3b:5c:40:9c:a9:1e:1e:98:e9:62:0b:
82:c4:ad:ac:12:f0:26:3a:ca:82:ec:bd:df:0b:2f:
bc:69:ff:7e:80:54:80:f3:25:e1:e3:c6:07:2c:5c:
99:bc:17:b0:11:b7:b5:0c:8b:07:55:49:6d:20:d1:
94:53:d9:98:a4:eb:97:78:19:6c:f9:a1:c3:ac:76:
9b:f3:66:50:e6:46:b1:d7:75:90:26:0b:15:ca:f3:
bb:8d:b8:12:f5:08:9a:f6:4d:08:bd:ea:a4:49:61:
28:18:e8:d8:44:0e:6d:a2:c7:62:bf:e2:52:31:8e:
6a:a4:a2:b2:4c:d7:47:e1:23:36:a1:2e:82:15:e5:
80:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F3:22:8B:EA:E2:02:6C:33:D5:5D:91:3A:FF:A9:64:6E:EC:B7:4B
X509v3 Authority Key Identifier:
keyid:10:C8:7A:36:4F:C6:7E:6F:D6:44:AB:08:96:BE:E4:CB:1D:54:28:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/1/10C87A364FC67E6FD644AB0896BEE4CB1D5428FE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EMh6Nk_Gfm_WRKsIlr7kyx1UKP4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/1/10C87A364FC67E6FD644AB0896BEE4CB1D5428FE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:dd:31:b5:f4:31:d4:74:72:3a:70:d5:ba:fb:e9:5d:a2:5b:
4c:6b:92:df:7b:65:ce:77:60:a7:44:f2:15:cc:70:71:88:e1:
d0:3a:d9:8c:32:53:69:ff:6c:e1:4d:e7:79:85:f3:0e:1b:b5:
89:59:73:3e:90:7e:09:b7:f6:9c:13:05:b6:6f:4b:0f:7d:91:
01:c2:2c:cf:4a:d5:ce:fb:00:ff:ed:cd:a6:52:52:05:26:8b:
b8:16:4f:5c:2d:36:52:80:47:b5:fa:e3:5e:7f:23:cd:f8:fd:
47:5b:56:95:26:ef:b9:63:78:67:4f:c4:b8:b4:48:51:85:f7:
4c:cb:05:8a:65:b1:d1:06:d2:f0:14:34:93:38:fb:1d:dc:87:
0d:58:e4:e8:e2:fb:4b:2f:b4:a9:23:19:79:33:17:b4:fd:9b:
f7:87:bf:ba:3b:bb:0f:77:29:34:7d:95:ce:1a:c1:f1:a5:1c:
12:21:f6:f2:d1:9b:88:46:2e:44:0a:0d:74:90:a5:b3:50:7d:
39:96:5b:87:f1:63:39:39:c5:25:78:3c:a1:d8:93:99:35:a8:
d1:8d:45:c4:e7:02:47:c3:22:02:2f:50:47:0c:20:35:47:0a:
4b:83:f8:66:6b:63:5e:54:35:95:97:b8:ee:ab:b1:ec:1f:ba:
d0:d0:74:47
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIULZ09YUmesRRsJuIwpq2D8VsN5tcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTBjODdhMzY0ZmM2N2U2ZmQ2NDRhYjA4OTZiZWU0Y2Ix
ZDU0MjhmZTAeFw0yNjA1MTIxNjM1NDBaFw0yNjA1MTMxNzU2NDBaMDMxMTAvBgNV
BAMTKDJGRjMyMjhCRUFFMjAyNkMzM0Q1NUQ5MTNBRkZBOTY0NkVFQ0I3NEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWmKGvJgg5AbiBMoYntiRSYRB6
nmdBY0rSOrZhOlJiX2gkic9xGXwo2ImHcP2c62Cly+2lXULsgzwGhDRrDtHyy5bF
OFM08rqwhI3tuXu0D1m3Ubvf4Xnynh9UAEBN9lIbismgr0CmsYNaRsi+nLpHW0n/
0aAbm3lRpOk7XECcqR4emOliC4LErawS8CY6yoLsvd8LL7xp/36AVIDzJeHjxgcs
XJm8F7ARt7UMiwdVSW0g0ZRT2Zik65d4GWz5ocOsdpvzZlDmRrHXdZAmCxXK87uN
uBL1CJr2TQi96qRJYSgY6NhEDm2ix2K/4lIxjmqkorJM10fhIzahLoIV5YBfAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUL/Mii+riAmwz1V2ROv+pZG7st0swHwYDVR0j
BBgwFoAUEMh6Nk/Gfm/WRKsIlr7kyx1UKP4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmI4MDY5NzgtNTU3MS00ZGM5LWE4NzItOTIzOTdjNGM4
ODgwLzEvMTBDODdBMzY0RkM2N0U2RkQ2NDRBQjA4OTZCRUU0Q0IxRDU0MjhGRS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0VNaDZOa19HZm1fV1JLc0lscjdreXgx
VUtQNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mYjgwNjk3OC01
NTcxLTRkYzktYTg3Mi05MjM5N2M0Yzg4ODAvMS8xMEM4N0EzNjRGQzY3RTZGRDY0
NEFCMDg5NkJFRTRDQjFENTQyOEZFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiN0xtfQx1HRyOnDVuvvp
XaJbTGuS33tlzndgp0TyFcxwcYjh0DrZjDJTaf9s4U3neYXzDhu1iVlzPpB+Cbf2
nBMFtm9LD32RAcIsz0rVzvsA/+3NplJSBSaLuBZPXC02UoBHtfrjXn8jzfj9R1tW
lSbvuWN4Z0/EuLRIUYX3TMsFimWx0QbS8BQ0kzj7HdyHDVjk6OL7Sy+0qSMZeTMX
tP2b94e/uju7D3cpNH2VzhrB8aUcEiH28tGbiEYuRAoNdJCls1B9OZZbh/FjOTnF
JXg8odiTmTWo0Y1FxOcCR8MiAi9QRwwgNUcKS4P4ZmtjXlQ1lZe47qux7B+60NB0
Rw==
-----END CERTIFICATE-----
Generated at Tue May 12 21:38:17 2026 by rpki-client