Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.mft
File: 10mM0yfqM7_4Yp1_Sda-Otxf8yw.mft (raw, json)
Hash identifier: GQt87Rbx5fSjgYDw0IpKCe/fSVGG6+rJq0GZdlo2Mdc=
Subject key identifier: BD:E2:C5:71:10:72:F4:97:08:AF:E7:BF:0C:F4:DF:C7:7A:4D:8C:79
Authority key identifier: D7:49:8C:D3:27:EA:33:BF:F8:62:9D:7F:49:D6:BE:3A:DC:5F:F3:2C
Certificate issuer: /CN=d7498cd327ea33bff8629d7f49d6be3adc5ff32c
Certificate serial: 019CAD2311A7C18CA504A53B7DAE9B953139
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10mM0yfqM7_4Yp1_Sda-Otxf8yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 06:01:22 +0000
Manifest this update: Mon 02 Mar 2026 06:01:22 +0000
Manifest next update: Tue 03 Mar 2026 06:01:22 +0000
Files and hashes: 1: 10mM0yfqM7_4Yp1_Sda-Otxf8yw.crl (hash: 6iGHtdZK5cQExJl29USSrfu7wBpb7qYa41a4S/ePgMg=)
2: c4zkb26v95y_D2sc6nv7fdxn9Lc.roa (hash: bMZY04nBemF6cIkhBuUz9nxHZyNkGpj8Eh/OlRIxJ2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.mft
rsync://rpki.ripe.net/repository/DEFAULT/10mM0yfqM7_4Yp1_Sda-Otxf8yw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:23:11:a7:c1:8c:a5:04:a5:3b:7d:ae:9b:95:31:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7498cd327ea33bff8629d7f49d6be3adc5ff32c
Validity
Not Before: Mar 2 06:01:22 2026 GMT
Not After : Mar 3 06:01:22 2026 GMT
Subject: CN=bde2c5711072f49708afe7bf0cf4dfc77a4d8c79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:31:fd:30:1c:f9:69:33:2d:c3:de:c2:4a:83:
80:27:70:4a:1d:92:ae:4d:34:13:e3:49:c9:db:7c:
33:b8:a9:a4:35:24:50:47:eb:7a:97:0d:29:20:94:
3d:49:d1:1b:6c:ca:31:34:87:b6:0c:99:b0:d2:a1:
db:cf:86:01:26:2d:bb:d1:25:ec:73:f0:bb:22:d5:
63:80:cb:17:0f:a5:33:69:24:3a:a5:e6:09:85:62:
2c:a9:f6:c3:25:9a:ba:51:7f:57:40:72:24:df:8a:
b4:6e:09:32:82:0a:85:9b:9b:68:b6:b6:be:ac:6d:
53:24:04:13:d5:97:ba:f8:a5:6c:de:20:1f:13:9c:
f1:e1:e5:6b:91:67:3c:6b:5a:58:33:86:24:42:12:
87:62:aa:f0:c5:5c:59:98:6a:c9:28:ba:12:95:d2:
49:51:e4:d9:25:5a:4b:b0:7d:52:e7:3d:99:c9:d1:
57:7f:c8:8c:c3:7f:91:7c:0d:e6:0f:bf:f7:c4:13:
5e:34:9c:fe:49:3d:0c:c4:54:d4:0d:fe:cc:24:73:
34:2c:cc:10:b7:64:a2:f8:ac:9f:fa:9b:c5:d8:21:
2d:c9:91:fa:d3:41:56:41:eb:b9:90:be:ce:59:69:
18:5a:67:89:77:81:f2:0b:61:8a:cb:0d:26:9e:8a:
7d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:E2:C5:71:10:72:F4:97:08:AF:E7:BF:0C:F4:DF:C7:7A:4D:8C:79
X509v3 Authority Key Identifier:
keyid:D7:49:8C:D3:27:EA:33:BF:F8:62:9D:7F:49:D6:BE:3A:DC:5F:F3:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10mM0yfqM7_4Yp1_Sda-Otxf8yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:a1:fd:2f:74:eb:84:ce:f5:05:3e:83:a9:80:60:5d:6b:ab:
8e:00:65:14:77:83:f3:70:25:3f:d1:1b:08:8e:75:b5:7f:11:
e0:7b:d5:74:28:78:8c:b1:5c:48:2d:88:1a:8c:dd:21:e6:2d:
36:5a:cc:8a:49:4f:82:cb:4e:a1:d7:29:35:28:e2:ce:0c:1c:
ff:dc:b6:c8:6e:85:9f:a5:a1:d0:19:17:3f:a2:43:94:8d:87:
e3:9e:03:a7:79:a8:d9:ea:23:58:aa:f3:85:1b:29:5a:f0:b9:
bb:30:1d:78:ea:79:bf:e8:9a:1b:dd:3a:6f:4c:97:c0:65:22:
15:20:c3:8a:20:da:60:85:2a:fe:66:fe:c5:d5:38:2b:3e:6f:
1f:2d:a2:8f:02:1f:65:9e:9a:fc:8d:20:3b:1a:bb:3f:0b:69:
00:ae:09:69:fd:0a:c7:c3:f5:4a:6b:f4:0b:10:62:3d:6b:9e:
a9:81:0d:96:70:df:4f:bb:fe:0c:16:2c:6c:c4:bf:6b:3d:5a:
65:f5:fd:fc:88:85:43:8d:27:42:73:2b:8e:20:de:5f:1d:7b:
61:70:75:cc:e0:a0:e3:fd:fe:fd:eb:39:d8:e1:f7:8d:c7:d2:
78:a1:23:44:a9:84:6b:c6:c5:4b:b9:5d:e1:83:68:7f:fd:99:
03:ae:9c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:40:31 2026 by rpki-client