Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/10AeAklBizV1RyaIJPYkSSXY2zk.mft
File: 10AeAklBizV1RyaIJPYkSSXY2zk.mft (raw, json)
Hash identifier: GphnvfSiFZXsBUFyBVGNrUuUCXIxbcay7XjxZN4pnuA=
Subject key identifier: 1F:15:6E:29:90:E4:47:09:75:EF:BD:BC:0C:7E:75:66:7F:0B:80:10
Authority key identifier: D7:40:1E:02:49:41:8B:35:75:47:26:88:24:F6:24:49:25:D8:DB:39
Certificate issuer: /CN=d7401e0249418b357547268824f6244925d8db39
Certificate serial: 019D9B877B9CBB19315F10EE46693E8E6CBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10AeAklBizV1RyaIJPYkSSXY2zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/10AeAklBizV1RyaIJPYkSSXY2zk.mft
Manifest number: 0A44
Signing time: Fri 17 Apr 2026 13:00:40 +0000
Manifest this update: Fri 17 Apr 2026 13:00:40 +0000
Manifest next update: Sat 18 Apr 2026 13:00:40 +0000
Files and hashes: 1: 1-oVMePvmP_ShU4g9iq3PEMwk624.asa (hash: pi0ntWvCbn7cLEwUcdMKB4Mh3rw+t4rGo3pT9vesjgs=)
2: 10AeAklBizV1RyaIJPYkSSXY2zk.crl (hash: GLXpD7/TkRJB4nrqx8DGRilgUVA2Ie0H59owA1xwRgo=)
3: JfiKnbeqPSQWrccipxHIV5asnZc.roa (hash: So58lqCsWHBSZ8BZGYVkNJbNtgNVSoZeRVERTPcUKB8=)
4: zWI51cMGq8NIsv4xHlGLcLlujuY.roa (hash: eQXeTCbeaOa+X96n8vuRc2zEoYqnb9UvGcseeMKxWrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/10AeAklBizV1RyaIJPYkSSXY2zk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/10AeAklBizV1RyaIJPYkSSXY2zk.mft
rsync://rpki.ripe.net/repository/DEFAULT/10AeAklBizV1RyaIJPYkSSXY2zk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:7b:9c:bb:19:31:5f:10:ee:46:69:3e:8e:6c:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7401e0249418b357547268824f6244925d8db39
Validity
Not Before: Apr 17 13:00:40 2026 GMT
Not After : Apr 18 13:00:40 2026 GMT
Subject: CN=1f156e2990e4470975efbdbc0c7e75667f0b8010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4b:5b:40:29:c9:8a:10:b6:be:8a:25:27:cb:
13:af:a4:95:a1:fb:a2:29:10:2f:3f:a1:00:f9:c9:
5e:61:80:af:fe:63:aa:96:c9:30:50:8c:d0:24:9d:
c2:70:45:79:1f:3e:4f:52:4f:ad:58:69:a2:d9:c4:
7a:b0:20:95:a2:d6:7b:12:40:ae:35:e1:df:cc:66:
8e:7e:72:71:de:0b:2f:1b:20:62:fa:ff:df:6c:41:
e8:e2:0b:24:74:80:51:ad:ce:24:32:f2:bf:15:1e:
c8:25:d0:c6:4c:7e:da:21:ae:66:4d:9d:55:07:29:
7f:c5:94:62:fc:6a:9e:98:c5:f3:fc:5a:80:9d:7d:
30:a7:ee:b5:3c:3c:df:fb:96:c3:87:cf:37:64:6d:
92:50:50:c9:b8:d9:cd:8b:24:99:ef:ff:b3:23:8f:
ba:27:ec:0c:b8:3f:be:12:aa:b6:9f:4c:be:2c:70:
fd:e4:ce:d5:8c:09:f7:35:d2:25:53:3d:e7:d8:e3:
36:35:6e:a4:56:a5:74:3e:88:0d:17:e0:23:60:64:
87:60:23:42:19:32:98:54:78:7f:6d:01:bd:44:46:
05:38:78:12:d1:8a:59:5d:59:54:7f:08:35:3b:36:
05:43:1e:3b:59:6c:0d:12:9e:aa:30:fb:84:fe:a7:
36:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:15:6E:29:90:E4:47:09:75:EF:BD:BC:0C:7E:75:66:7F:0B:80:10
X509v3 Authority Key Identifier:
keyid:D7:40:1E:02:49:41:8B:35:75:47:26:88:24:F6:24:49:25:D8:DB:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10AeAklBizV1RyaIJPYkSSXY2zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/10AeAklBizV1RyaIJPYkSSXY2zk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/10AeAklBizV1RyaIJPYkSSXY2zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:56:fc:4b:c2:5e:94:b0:6c:ca:ca:50:9c:40:8c:2e:60:1a:
4b:cf:ff:b5:12:ed:ec:e6:6a:ff:76:4b:33:b1:6d:0b:74:3a:
81:6b:b9:fe:52:ca:2e:88:65:66:81:71:2c:d6:86:fe:cb:5c:
75:eb:28:00:cb:1e:b1:10:1e:de:01:9d:0b:9d:b5:02:4f:68:
cc:76:f2:8c:e8:23:96:12:7f:42:a2:ca:b3:58:86:66:7f:5b:
4f:15:77:5f:79:bb:d9:7b:e3:26:95:72:5c:fe:91:df:af:2c:
1d:7c:68:a1:0e:8a:24:5e:e4:77:1d:57:1c:0d:22:db:74:cb:
61:f0:4f:3b:db:78:f7:ec:7e:c2:50:83:90:f1:8b:d3:b9:32:
96:54:35:48:aa:50:a3:aa:53:4f:44:25:8d:e0:16:e5:fe:02:
da:9e:d3:90:18:80:38:8a:b7:ba:db:c9:ad:ef:18:df:99:f5:
de:ca:00:f3:19:14:bf:e8:02:1f:a5:14:13:d9:fa:3c:b7:5b:
87:88:7b:df:1b:17:a0:2a:3d:29:76:47:7a:44:7e:d2:91:e9:
cb:37:47:fa:8b:b1:8c:95:9c:4a:d5:d6:aa:ca:8e:3f:48:8a:
bf:0d:aa:2a:2c:fd:42:a3:77:c0:31:d8:d0:4a:04:fb:5d:f6:
6e:66:de:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:22:51 2026 by rpki-client