Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.mft
File: 10itqKdHT1rZkMmB_2snzj3hRxM.mft (raw, json)
Hash identifier: hf0ZmL2v7AwTsoOJS2e0cYr06hS5/H7uG0ni0oKika0=
Subject key identifier: EC:70:69:96:07:2C:E0:D7:8A:C2:D2:FD:3A:03:8E:9D:3F:FB:C9:F3
Authority key identifier: D7:48:AD:A8:A7:47:4F:5A:D9:90:C9:81:FF:6B:27:CE:3D:E1:47:13
Certificate issuer: /CN=d748ada8a7474f5ad990c981ff6b27ce3de14713
Certificate serial: 01A138FFF56F6E9C7B0AB8C1FBC7F01F1BD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10itqKdHT1rZkMmB_2snzj3hRxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.mft
Manifest number: 03BE
Signing time: Wed 14 Oct 2026 06:01:00 +0000
Manifest this update: Wed 14 Oct 2026 06:01:00 +0000
Manifest next update: Thu 15 Oct 2026 06:01:00 +0000
Files and hashes: 1: 10itqKdHT1rZkMmB_2snzj3hRxM.crl (hash: k07o3XFe5TMOzUektT6JJWH8xRex0Rz8zocbaRIhbbU=)
2: dh6O1KZT1UxJ74lXsViPoGTKRqs.roa (hash: GqWYfVTgp7zJ77InQ5zu+O/CisErYsq267odGYdVn8s=)
3: q2Sr6iNLEgQhXIhOj17x_U41yCw.roa (hash: v7+FGob3+laO9WE5TRGdJZbvI5tauk2y9nqQMlT/eeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/10itqKdHT1rZkMmB_2snzj3hRxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 06:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:38:ff:f5:6f:6e:9c:7b:0a:b8:c1:fb:c7:f0:1f:1b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d748ada8a7474f5ad990c981ff6b27ce3de14713
Validity
Not Before: Oct 14 06:01:00 2026 GMT
Not After : Oct 15 06:01:00 2026 GMT
Subject: CN=ec706996072ce0d78ac2d2fd3a038e9d3ffbc9f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7e:e6:b8:fe:f2:4d:a9:4e:e1:f1:bc:8a:ef:
b4:17:3b:79:d1:ec:21:e9:35:63:fc:69:8f:fc:24:
9b:3b:14:68:b0:3c:2f:ff:6c:f4:9c:dc:87:a6:32:
bb:c6:10:3f:0f:0c:ae:ef:81:d8:a4:93:2e:df:a2:
5b:6e:47:a6:81:8e:51:29:aa:cf:37:99:f8:22:7d:
bd:40:40:62:d7:5e:c4:59:c1:3e:af:dd:49:02:1f:
fd:97:c9:29:c9:49:e8:4f:68:4e:4b:96:57:19:b4:
e3:21:18:61:15:7a:f2:bd:35:27:e0:6a:d9:6c:ec:
84:55:f1:4f:c8:37:c0:1f:a8:d5:f0:57:56:aa:9b:
2e:4d:cf:e5:d1:2d:34:ef:c6:d1:97:07:04:dd:22:
1d:44:3e:ee:be:ec:a2:43:04:58:bd:78:1c:cc:96:
ce:8d:84:45:76:2a:c6:b9:8e:c6:61:59:6e:12:40:
45:37:c7:6c:49:9d:45:6c:ab:62:19:66:95:b7:4b:
45:ff:7c:c6:b5:fa:5e:2e:1f:2a:84:05:4e:04:09:
79:cc:c9:80:12:9a:9b:b5:4c:f1:2c:8d:e1:df:83:
83:58:6a:f4:37:60:e8:48:06:da:a5:c0:5c:50:38:
63:6a:df:e5:ef:f6:cf:d0:4b:7f:ef:83:fe:1f:31:
36:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:70:69:96:07:2C:E0:D7:8A:C2:D2:FD:3A:03:8E:9D:3F:FB:C9:F3
X509v3 Authority Key Identifier:
keyid:D7:48:AD:A8:A7:47:4F:5A:D9:90:C9:81:FF:6B:27:CE:3D:E1:47:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10itqKdHT1rZkMmB_2snzj3hRxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:a3:b3:21:20:27:04:9d:2d:d6:48:7b:69:1d:2e:56:f2:26:
6b:9d:81:91:a4:a3:ff:ec:c6:a1:b2:04:79:4f:86:86:6e:e6:
81:fe:ab:0a:40:af:a5:9f:cf:5d:5b:4d:b0:37:f0:15:4e:e9:
ad:36:c4:37:79:de:a7:24:04:79:41:20:b5:78:7a:96:5e:c0:
31:d2:07:0b:7b:10:41:86:64:16:3c:d0:7a:de:22:65:75:73:
24:85:57:ef:c0:2d:8e:53:72:67:cb:70:5a:27:04:cc:e8:51:
53:3f:c3:15:6e:51:12:68:d4:8d:a8:c7:48:95:6b:58:77:52:
99:48:2a:d4:3f:cc:66:18:11:7d:da:cd:73:41:12:8f:ef:ce:
1a:79:ea:ac:07:3a:d6:8e:23:91:1e:8b:18:e1:85:c2:0e:50:
d8:0c:e7:aa:06:eb:59:90:17:b2:6f:73:ce:1f:22:dc:62:9d:
9c:4d:13:a8:5b:ab:fe:dd:61:31:e6:0f:d5:4c:21:62:1a:cf:
34:38:0b:da:7e:0a:ac:71:69:aa:46:c1:76:07:e6:7f:c2:1b:
ab:8f:1b:c1:ff:81:79:52:b2:bb:2b:42:52:9d:69:66:7e:53:
ac:8d:0a:d7:58:ee:46:44:ff:b8:f3:bf:2b:4d:21:70:a2:cf:
e7:55:c1:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE4//Vvbpx7CrjB+8fwHxvQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NDhhZGE4YTc0NzRmNWFkOTkwYzk4MWZmNmIyN2NlM2Rl
MTQ3MTMwHhcNMjYxMDE0MDYwMTAwWhcNMjYxMDE1MDYwMTAwWjAzMTEwLwYDVQQD
EyhlYzcwNjk5NjA3MmNlMGQ3OGFjMmQyZmQzYTAzOGU5ZDNmZmJjOWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnH7muP7yTalO4fG8iu+0Fzt50ewh
6TVj/GmP/CSbOxRosDwv/2z0nNyHpjK7xhA/Dwyu74HYpJMu36JbbkemgY5RKarP
N5n4In29QEBi117EWcE+r91JAh/9l8kpyUnoT2hOS5ZXGbTjIRhhFXryvTUn4GrZ
bOyEVfFPyDfAH6jV8FdWqpsuTc/l0S0078bRlwcE3SIdRD7uvuyiQwRYvXgczJbO
jYRFdirGuY7GYVluEkBFN8dsSZ1FbKtiGWaVt0tF/3zGtfpeLh8qhAVOBAl5zMmA
EpqbtUzxLI3h34ODWGr0N2DoSAbapcBcUDhjat/l7/bP0Et/74P+HzE25QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOxwaZYHLODXisLS/ToDjp0/+8nzMB8GA1UdIwQY
MBaAFNdIrainR09a2ZDJgf9rJ8494UcTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTBpdHFLZEhUMXJaa01tQl8yc256ajNoUnhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi84ZmMyNjEtYmZmOC00NDkwLThiNjkt
MDA5NzM5ZjdlNTVjLzEvMTBpdHFLZEhUMXJaa01tQl8yc256ajNoUnhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi84ZmMyNjEtYmZmOC00NDkwLThiNjktMDA5NzM5ZjdlNTVj
LzEvMTBpdHFLZEhUMXJaa01tQl8yc256ajNoUnhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWKOzISAn
BJ0t1kh7aR0uVvIma52BkaSj/+zGobIEeU+Ghm7mgf6rCkCvpZ/PXVtNsDfwFU7p
rTbEN3nepyQEeUEgtXh6ll7AMdIHC3sQQYZkFjzQet4iZXVzJIVX78AtjlNyZ8tw
WicEzOhRUz/DFW5REmjUjajHSJVrWHdSmUgq1D/MZhgRfdrNc0ESj+/OGnnqrAc6
1o4jkR6LGOGFwg5Q2AznqgbrWZAXsm9zzh8i3GKdnE0TqFur/t1hMeYP1UwhYhrP
NDgL2n4KrHFpqkbBdgfmf8Ibq48bwf+BeVKyuytCUp1pZn5TrI0K11juRkT/uPO/
K00hcKLP51XBug==
-----END CERTIFICATE-----
Generated at Wed Oct 14 18:06:15 2026 by rpki-client