Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.mft
File: 10itqKdHT1rZkMmB_2snzj3hRxM.mft (raw, json)
Hash identifier: 4WnP7s/zF2HLlYcKIeLDB+WSk6STfTNZ5nrQANUhEE8=
Subject key identifier: 6F:A3:48:90:31:66:28:86:F9:3F:A1:4F:A1:CF:3F:7E:29:51:93:5F
Authority key identifier: D7:48:AD:A8:A7:47:4F:5A:D9:90:C9:81:FF:6B:27:CE:3D:E1:47:13
Certificate issuer: /CN=d748ada8a7474f5ad990c981ff6b27ce3de14713
Certificate serial: 019CAE6BF8E652B70E7F1FDAF1BAA77C114D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10itqKdHT1rZkMmB_2snzj3hRxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.mft
Manifest number: 0164
Signing time: Mon 02 Mar 2026 12:00:37 +0000
Manifest this update: Mon 02 Mar 2026 12:00:37 +0000
Manifest next update: Tue 03 Mar 2026 12:00:37 +0000
Files and hashes: 1: 10itqKdHT1rZkMmB_2snzj3hRxM.crl (hash: nXHS4dGQz8j28hqxJg0tTShAZlZRGJo9bwv/anuiUeQ=)
2: dh6O1KZT1UxJ74lXsViPoGTKRqs.roa (hash: GqWYfVTgp7zJ77InQ5zu+O/CisErYsq267odGYdVn8s=)
3: q2Sr6iNLEgQhXIhOj17x_U41yCw.roa (hash: v7+FGob3+laO9WE5TRGdJZbvI5tauk2y9nqQMlT/eeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/10itqKdHT1rZkMmB_2snzj3hRxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6b:f8:e6:52:b7:0e:7f:1f:da:f1:ba:a7:7c:11:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d748ada8a7474f5ad990c981ff6b27ce3de14713
Validity
Not Before: Mar 2 12:00:37 2026 GMT
Not After : Mar 3 12:00:37 2026 GMT
Subject: CN=6fa3489031662886f93fa14fa1cf3f7e2951935f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e0:61:05:b8:ba:58:54:ce:fa:af:3b:d4:93:
52:9c:c9:8a:37:38:7b:22:80:1e:ee:a1:1d:d2:b5:
df:a7:c2:ea:fe:41:cb:d9:18:cd:42:7c:99:5a:b5:
c0:b0:52:fa:ae:3d:7d:64:6a:db:05:12:27:b0:d3:
fa:54:40:bb:d8:f3:c7:25:d5:cf:23:a1:19:83:87:
a1:47:78:3c:32:ba:f5:26:14:eb:8e:a5:b7:fa:12:
87:0d:7b:b6:67:a1:99:6b:65:0e:bc:58:0c:06:39:
fc:de:01:b9:9e:cd:19:0e:b9:af:43:71:91:34:ec:
af:d8:18:7f:e7:52:83:dc:13:8f:13:01:45:9d:89:
19:7c:9b:24:a0:af:17:45:ee:6b:34:46:67:6b:2c:
d9:27:6d:df:05:5a:3a:cf:99:04:fa:7c:fe:d4:f2:
4e:76:30:ee:13:47:8d:88:58:79:5d:24:03:cb:f5:
6d:58:25:f6:94:cb:ea:87:0c:c7:4c:1b:da:2d:c9:
2c:ee:1e:cf:35:29:cc:3f:f3:8b:eb:92:c0:89:d5:
a2:9d:60:85:33:cf:a9:29:9d:e8:8b:9a:3d:16:7a:
53:9c:d0:b7:d0:c5:89:7d:92:cc:8c:38:be:2a:34:
23:5d:2f:e4:dd:7b:8b:d0:d3:4c:2b:9a:ae:c4:a0:
62:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:A3:48:90:31:66:28:86:F9:3F:A1:4F:A1:CF:3F:7E:29:51:93:5F
X509v3 Authority Key Identifier:
keyid:D7:48:AD:A8:A7:47:4F:5A:D9:90:C9:81:FF:6B:27:CE:3D:E1:47:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10itqKdHT1rZkMmB_2snzj3hRxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:86:b3:ef:75:ee:d0:5f:11:76:02:0d:d5:bb:ae:fb:ca:23:
20:d6:66:20:fb:4b:9b:e9:f3:d4:bc:2f:0b:61:8f:d7:a3:a9:
f0:94:c7:be:84:a4:2f:c2:73:dd:f1:49:63:85:a5:55:21:45:
52:0f:c3:9e:d1:24:05:56:41:a1:bf:64:ba:3b:8d:67:21:5d:
86:ed:81:d5:4f:de:7d:f8:f4:fc:de:b2:70:bf:31:74:ae:5b:
18:25:32:5d:30:70:f0:39:92:02:e4:40:53:79:72:2a:18:7b:
73:e6:ab:bf:41:9c:1d:99:c9:f2:fa:05:05:63:d4:a5:64:b9:
e0:8a:d2:21:5e:4e:ed:6f:cd:85:15:9b:3a:b8:e4:62:6f:35:
50:a9:01:53:48:0e:a6:80:73:a7:7f:15:be:76:fd:88:7d:ee:
87:ca:9c:12:ac:8f:c8:d1:8f:73:74:0f:4f:41:36:ed:4d:ab:
11:8a:23:77:4d:26:5e:49:ba:eb:56:15:27:f6:64:da:1b:0f:
84:03:5f:01:22:33:08:57:44:14:d4:5d:3a:fe:fc:35:7c:af:
8d:a1:7b:36:ac:d4:ea:5f:f7:f0:05:28:07:d2:9c:37:6c:6b:
ca:7b:b0:6c:00:71:0f:63:5c:37:9a:61:78:72:41:93:c4:0b:
81:8f:26:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:12:51 2026 by rpki-client