Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.mft
File: 10itqKdHT1rZkMmB_2snzj3hRxM.mft (raw, json)
Hash identifier: Y723niyAn0iZYxZyUko1xMrq0BWRcvB63cshBABiVhI=
Subject key identifier: 20:93:67:CF:0C:44:15:60:E6:09:36:FB:4A:E4:2B:E7:35:6C:27:14
Authority key identifier: D7:48:AD:A8:A7:47:4F:5A:D9:90:C9:81:FF:6B:27:CE:3D:E1:47:13
Certificate issuer: /CN=d748ada8a7474f5ad990c981ff6b27ce3de14713
Certificate serial: 019D9BF568BA98E6F94FFCFCF178461583D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10itqKdHT1rZkMmB_2snzj3hRxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.mft
Manifest number: 01DF
Signing time: Fri 17 Apr 2026 15:00:44 +0000
Manifest this update: Fri 17 Apr 2026 15:00:44 +0000
Manifest next update: Sat 18 Apr 2026 15:00:44 +0000
Files and hashes: 1: 10itqKdHT1rZkMmB_2snzj3hRxM.crl (hash: Qd2P6LrWOGGn2+zXgL+PqPyKzxO7yHFg22CbXTpWOVo=)
2: dh6O1KZT1UxJ74lXsViPoGTKRqs.roa (hash: GqWYfVTgp7zJ77InQ5zu+O/CisErYsq267odGYdVn8s=)
3: q2Sr6iNLEgQhXIhOj17x_U41yCw.roa (hash: v7+FGob3+laO9WE5TRGdJZbvI5tauk2y9nqQMlT/eeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/10itqKdHT1rZkMmB_2snzj3hRxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:68:ba:98:e6:f9:4f:fc:fc:f1:78:46:15:83:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d748ada8a7474f5ad990c981ff6b27ce3de14713
Validity
Not Before: Apr 17 15:00:44 2026 GMT
Not After : Apr 18 15:00:44 2026 GMT
Subject: CN=209367cf0c441560e60936fb4ae42be7356c2714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:7b:e9:af:32:19:be:7e:92:cc:54:e9:e0:2b:
3a:cb:f2:12:c2:01:78:35:55:77:36:58:e2:27:8a:
96:66:0d:34:4c:d7:e3:00:49:ef:d8:36:e8:33:96:
83:5c:e9:81:88:3f:6a:db:ce:92:ff:b7:35:1c:78:
ef:fb:29:cd:b2:f9:1f:31:40:46:d5:26:88:f9:e8:
b6:78:b6:d3:77:e1:cc:44:28:64:79:ef:86:dc:5e:
49:d4:00:87:f7:ea:a9:23:1b:9e:8b:ad:8d:bd:09:
a6:03:f2:c5:5b:5e:8f:98:09:2f:ef:25:18:b5:98:
97:80:8d:c3:16:21:2a:18:9d:d9:35:cc:5a:e2:6a:
f3:0c:fe:77:43:02:40:e4:82:71:49:44:83:48:ca:
c6:7b:a9:5a:fd:16:7a:5e:30:49:f2:61:cb:40:62:
ef:2d:a8:14:dd:00:bc:29:56:e1:12:85:c2:9f:dc:
1b:86:8b:7f:21:49:7b:39:4e:b0:1a:f8:d4:16:3d:
f1:2e:92:9b:01:df:89:96:b1:46:6a:be:ed:46:2d:
94:dd:8a:f2:79:e7:09:b7:a1:c0:db:df:d3:b2:9b:
85:8a:73:bf:35:cc:56:f8:cc:2f:10:52:3f:0b:e9:
42:a2:e7:8c:31:f7:05:64:79:df:5c:d2:cb:05:e7:
e4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:93:67:CF:0C:44:15:60:E6:09:36:FB:4A:E4:2B:E7:35:6C:27:14
X509v3 Authority Key Identifier:
keyid:D7:48:AD:A8:A7:47:4F:5A:D9:90:C9:81:FF:6B:27:CE:3D:E1:47:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10itqKdHT1rZkMmB_2snzj3hRxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:c2:71:df:ee:d1:d5:4f:53:e2:cc:9a:e8:52:b3:73:26:36:
ca:e3:4b:23:37:f1:fa:b1:b1:ae:f5:94:fd:ab:0c:97:b8:15:
a5:61:3c:92:66:2f:94:f8:78:a7:f4:c1:2f:36:40:18:46:00:
57:63:71:e0:e9:d5:26:d3:c4:56:4d:18:63:12:a6:be:f1:9d:
c5:66:9c:f7:b0:f1:92:e1:ed:57:86:58:ed:59:bf:bc:29:95:
ff:c4:f6:47:d7:ee:9b:ae:38:41:d8:70:d7:23:6b:81:e9:95:
5b:03:19:32:ef:9a:96:a0:89:f4:8c:64:e1:b3:71:e0:e9:c5:
a7:14:fe:7a:a6:33:01:38:b8:83:8f:ea:bb:82:8a:73:15:dc:
3b:af:11:ee:80:52:bf:ce:aa:e9:93:3b:8c:03:10:80:18:85:
6a:1f:00:c8:fb:f3:90:a7:b3:6b:6b:34:16:bb:a4:58:cb:59:
92:76:7a:d2:03:05:4b:c1:57:fc:87:c6:5e:d5:ae:c3:9d:55:
39:e3:69:a6:f2:45:3d:bd:45:bb:57:41:90:81:31:dd:9d:e3:
db:a3:35:34:a5:52:5c:f3:27:f4:e6:d8:fc:f7:b7:65:c6:5e:
04:dc:7b:b7:ff:6d:d1:43:3e:eb:40:e7:73:1a:c2:f0:a7:02:
fc:99:9a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:36:13 2026 by rpki-client