Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.mft
File: 10zp2eGKKooGy02bCLWc12siEYQ.mft (raw, json)
Hash identifier: Q1L4hpm/WxMvTPw6Nhfo2JBn4OE0dUe6BpQ1lFQ64rk=
Subject key identifier: AA:06:80:78:53:00:58:D4:B5:1E:7F:7A:E7:BD:BC:C0:4B:70:4D:54
Authority key identifier: D7:4C:E9:D9:E1:8A:2A:8A:06:CB:4D:9B:08:B5:9C:D7:6B:22:11:84
Certificate issuer: /CN=d74ce9d9e18a2a8a06cb4d9b08b59cd76b221184
Certificate serial: 01A0C6A164A90CCEC8BE1E6607D442164AF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10zp2eGKKooGy02bCLWc12siEYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.mft
Manifest number: 1A67
Signing time: Tue 22 Sep 2026 01:01:00 +0000
Manifest this update: Tue 22 Sep 2026 01:01:00 +0000
Manifest next update: Wed 23 Sep 2026 01:01:00 +0000
Files and hashes: 1: 10zp2eGKKooGy02bCLWc12siEYQ.crl (hash: mpPfiG33tL2iCpk+Avf9dwwdgsNy1D01DLDUQk5zfU0=)
2: OAbpOTnAOzglaKzJYR_dSWth0y0.roa (hash: p0BRSUqt0ibbeGiIUqDvTDnDIoyeLcX+EC1SME0H0Io=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/10zp2eGKKooGy02bCLWc12siEYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:a1:64:a9:0c:ce:c8:be:1e:66:07:d4:42:16:4a:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d74ce9d9e18a2a8a06cb4d9b08b59cd76b221184
Validity
Not Before: Sep 22 01:01:00 2026 GMT
Not After : Sep 23 01:01:00 2026 GMT
Subject: CN=aa068078530058d4b51e7f7ae7bdbcc04b704d54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f8:9c:40:5f:be:73:5b:3c:6d:14:f8:bc:a8:
cd:86:5f:ff:55:eb:a4:c5:8d:2b:d9:41:12:fe:96:
01:85:c4:2a:de:0e:ef:e8:00:fd:be:0b:45:ce:d0:
0f:7e:5a:a0:38:99:72:a4:e3:28:34:3e:8a:36:01:
dd:09:c6:36:ce:a1:d9:4f:ee:76:88:d4:da:7e:69:
66:cd:00:f3:21:35:39:df:43:57:8b:77:e6:51:d3:
29:b5:94:64:94:fc:f1:98:8d:69:9e:15:7c:2d:0f:
e4:28:0e:2e:7e:f2:2d:24:b9:95:69:34:78:67:a1:
37:09:c7:ed:02:f0:79:35:a2:c6:62:99:bb:2f:ad:
44:01:5a:52:f7:2d:4a:f7:bd:1d:51:f9:25:50:19:
05:02:61:3f:ae:6b:13:48:db:0a:2d:bf:ed:7f:40:
d7:f2:2a:cf:43:a9:43:d5:df:b1:12:fc:da:3c:d2:
8f:94:65:1d:72:86:1a:5a:82:4b:33:f9:f1:ca:88:
e8:00:31:a4:a6:95:54:77:e0:42:d9:9a:90:ec:ca:
e5:47:21:b6:d4:33:6b:69:64:60:c2:a6:8c:84:da:
58:c0:42:b5:02:a4:87:41:41:45:32:f9:27:d4:e0:
f9:cf:f9:b1:0e:61:59:5d:8f:de:9e:de:08:f6:5f:
34:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:06:80:78:53:00:58:D4:B5:1E:7F:7A:E7:BD:BC:C0:4B:70:4D:54
X509v3 Authority Key Identifier:
keyid:D7:4C:E9:D9:E1:8A:2A:8A:06:CB:4D:9B:08:B5:9C:D7:6B:22:11:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10zp2eGKKooGy02bCLWc12siEYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:5a:c1:3f:8a:96:d2:fa:91:6f:3d:31:55:be:07:08:58:33:
42:fc:61:47:3f:4c:c6:20:82:78:d2:1d:56:ee:d5:f2:31:b5:
2e:f6:e3:c4:ad:b9:bc:88:df:fd:e5:da:50:c8:9c:19:40:40:
b2:be:a0:a3:f3:d4:ef:1b:ef:30:a5:b6:31:41:6f:3e:33:35:
96:f2:3d:96:88:97:2d:96:aa:46:20:9e:83:11:e8:77:e0:af:
37:4d:d8:a1:c2:ee:f0:2b:65:d2:4d:01:ef:d9:ae:f0:32:f9:
1a:2e:85:31:0d:54:81:d8:9a:b6:2e:f0:96:54:ef:67:dd:e8:
ac:b1:df:f2:48:54:e9:00:dc:bb:12:68:7e:3f:50:87:a5:1c:
63:a9:af:8a:88:5b:a1:a1:ef:61:ca:6d:ca:c6:3e:ed:98:48:
9d:44:69:65:f3:61:e2:12:48:30:7a:e3:c7:18:f6:cc:28:be:
94:e7:18:13:f0:8a:8f:db:23:dd:a7:fe:41:b5:39:16:fb:a7:
42:cf:c1:39:ae:2a:32:fb:c0:08:02:53:45:67:11:cc:26:c2:
7d:75:92:4c:5b:ca:d5:d1:b1:fa:df:08:9e:d4:71:33:45:6d:
31:ac:cb:6f:9f:59:33:e1:09:9d:89:4f:9b:04:9c:a9:eb:7e:
c3:ee:cf:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:56:34 2026 by rpki-client