Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.mft
File: 10itqKdHT1rZkMmB_2snzj3hRxM.mft (raw, json)
Hash identifier: D3AJan5x+7uYc83HfekDLRy2ZJ28+dqzlOX3CIEMwKk=
Subject key identifier: 30:FE:48:7F:D0:9F:4E:2A:54:17:CC:8E:96:3D:7E:7F:00:77:36:80
Authority key identifier: D7:48:AD:A8:A7:47:4F:5A:D9:90:C9:81:FF:6B:27:CE:3D:E1:47:13
Certificate issuer: /CN=d748ada8a7474f5ad990c981ff6b27ce3de14713
Certificate serial: 019FAD1B100F9362072B8F9C106F11B770F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10itqKdHT1rZkMmB_2snzj3hRxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.mft
Manifest number: 02F1
Signing time: Wed 29 Jul 2026 09:00:59 +0000
Manifest this update: Wed 29 Jul 2026 09:00:59 +0000
Manifest next update: Thu 30 Jul 2026 09:00:59 +0000
Files and hashes: 1: 10itqKdHT1rZkMmB_2snzj3hRxM.crl (hash: Vorc82M3KfPMfL5QhYIN3ugpIr2uq4QS6sHK50lA70M=)
2: dh6O1KZT1UxJ74lXsViPoGTKRqs.roa (hash: GqWYfVTgp7zJ77InQ5zu+O/CisErYsq267odGYdVn8s=)
3: q2Sr6iNLEgQhXIhOj17x_U41yCw.roa (hash: v7+FGob3+laO9WE5TRGdJZbvI5tauk2y9nqQMlT/eeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/10itqKdHT1rZkMmB_2snzj3hRxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:1b:10:0f:93:62:07:2b:8f:9c:10:6f:11:b7:70:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d748ada8a7474f5ad990c981ff6b27ce3de14713
Validity
Not Before: Jul 29 09:00:59 2026 GMT
Not After : Jul 30 09:00:59 2026 GMT
Subject: CN=30fe487fd09f4e2a5417cc8e963d7e7f00773680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:65:4d:ec:ee:0d:3a:23:d1:a9:79:a0:50:e8:
d2:83:34:97:c7:03:b6:44:22:d4:6e:e5:ba:c9:52:
c6:62:70:85:df:8a:4b:9c:62:e1:3d:9b:55:32:ea:
de:af:1d:db:49:7f:1c:bc:b4:8f:f5:e4:03:85:97:
11:50:fa:b5:4e:75:1a:3c:0e:83:ba:65:99:bc:7d:
0c:f4:06:52:83:f8:a9:19:d7:53:b5:48:9d:c6:b7:
5b:d5:59:9c:60:08:e3:d5:e1:77:58:e2:b2:cc:ba:
0f:b7:97:25:f7:e8:69:53:13:85:71:fe:b2:21:a6:
ef:28:2f:0e:d6:4c:8b:89:b9:2d:24:ae:4a:97:ea:
42:c4:20:96:ba:f6:40:61:58:a0:01:fc:04:b2:8e:
70:2c:fa:3b:4a:23:bc:5f:31:23:9f:00:ac:cf:e3:
e8:6a:9c:dc:af:73:b8:62:2a:55:f8:f9:91:93:33:
89:f0:23:1e:a0:29:c9:6d:a1:89:82:99:32:13:66:
c5:48:b8:f9:58:d6:b6:e2:55:de:af:04:45:0f:8a:
3d:92:87:71:0d:14:2f:97:25:f2:4a:62:90:9c:89:
ec:78:83:b7:7d:55:57:e8:92:a4:5c:37:e7:b7:2b:
40:21:4f:5b:cb:4a:ca:5e:57:5e:f4:b5:a9:bb:a5:
25:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:FE:48:7F:D0:9F:4E:2A:54:17:CC:8E:96:3D:7E:7F:00:77:36:80
X509v3 Authority Key Identifier:
keyid:D7:48:AD:A8:A7:47:4F:5A:D9:90:C9:81:FF:6B:27:CE:3D:E1:47:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10itqKdHT1rZkMmB_2snzj3hRxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:83:84:4d:b7:ba:e0:ff:26:ac:25:a7:83:6f:ad:40:3e:e8:
d1:b0:1b:f6:f6:ae:49:2e:e1:c2:c9:e8:99:01:3b:b3:69:a8:
4a:88:60:08:77:b1:bb:4e:e9:f2:a7:4c:89:87:78:3d:ae:bf:
4a:e0:08:dc:2a:32:0d:0e:02:40:d4:2d:ad:d5:bb:06:70:2d:
f8:e2:cf:21:92:ff:3e:d6:15:e9:5b:dc:0b:95:2d:7c:f0:49:
d0:15:ef:df:15:30:be:59:30:fc:75:10:99:cc:a7:07:2d:75:
c7:55:de:3d:e9:83:95:80:ac:f2:d9:02:bb:58:dc:04:d8:ee:
3a:fe:32:1b:f1:51:e4:86:03:01:1d:06:d2:47:21:93:14:6c:
f1:3a:80:fd:73:b8:62:5d:93:8e:17:fa:de:86:ee:1b:67:7e:
1d:88:ea:b0:a2:69:e6:6f:da:c9:7d:19:9c:35:da:1d:48:d2:
20:ec:42:df:0d:04:1a:6e:af:22:17:d7:b2:1b:49:65:e1:60:
52:9b:c5:b6:19:1b:ec:49:d1:18:c6:1a:af:04:fa:76:bb:ef:
b5:a6:7b:c5:f0:67:c3:be:f9:a3:9f:ee:96:0f:e7:17:ba:a4:
05:da:be:65:fc:75:d3:24:39:d5:18:3c:c2:35:9b:a3:46:12:
d9:2b:1b:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:28:16 2026 by rpki-client