Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/10AeAklBizV1RyaIJPYkSSXY2zk.mft
File: 10AeAklBizV1RyaIJPYkSSXY2zk.mft (raw, json)
Hash identifier: Wa90RwazgaR8vhy9/pcBO4sPgd9buGHsrXpYNayYrx0=
Subject key identifier: 7F:D0:F3:10:46:60:99:91:55:7E:EA:C8:0F:5E:B9:11:98:BE:D7:9C
Authority key identifier: D7:40:1E:02:49:41:8B:35:75:47:26:88:24:F6:24:49:25:D8:DB:39
Certificate issuer: /CN=d7401e0249418b357547268824f6244925d8db39
Certificate serial: 019D9D75CC134AE47B7D2D4339BDD681FB99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10AeAklBizV1RyaIJPYkSSXY2zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/10AeAklBizV1RyaIJPYkSSXY2zk.mft
Manifest number: 0A45
Signing time: Fri 17 Apr 2026 22:00:35 +0000
Manifest this update: Fri 17 Apr 2026 22:00:35 +0000
Manifest next update: Sat 18 Apr 2026 22:00:35 +0000
Files and hashes: 1: 1-oVMePvmP_ShU4g9iq3PEMwk624.asa (hash: pi0ntWvCbn7cLEwUcdMKB4Mh3rw+t4rGo3pT9vesjgs=)
2: 10AeAklBizV1RyaIJPYkSSXY2zk.crl (hash: JYdZ03vC5esZ1KFZBnQ7p5brAkWzUEAewqxD7KO+n6c=)
3: JfiKnbeqPSQWrccipxHIV5asnZc.roa (hash: So58lqCsWHBSZ8BZGYVkNJbNtgNVSoZeRVERTPcUKB8=)
4: zWI51cMGq8NIsv4xHlGLcLlujuY.roa (hash: eQXeTCbeaOa+X96n8vuRc2zEoYqnb9UvGcseeMKxWrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/10AeAklBizV1RyaIJPYkSSXY2zk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/10AeAklBizV1RyaIJPYkSSXY2zk.mft
rsync://rpki.ripe.net/repository/DEFAULT/10AeAklBizV1RyaIJPYkSSXY2zk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:75:cc:13:4a:e4:7b:7d:2d:43:39:bd:d6:81:fb:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7401e0249418b357547268824f6244925d8db39
Validity
Not Before: Apr 17 22:00:35 2026 GMT
Not After : Apr 18 22:00:35 2026 GMT
Subject: CN=7fd0f31046609991557eeac80f5eb91198bed79c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bb:69:1c:e3:16:99:04:9c:ac:4a:17:56:8e:
5a:54:c7:e3:14:3f:80:4d:f6:f9:45:fa:94:4b:16:
db:48:a2:e1:4a:16:a8:4b:f8:f0:2c:ac:b2:81:22:
7f:6a:45:9e:e2:ab:0f:e1:1c:1e:8f:a3:7c:b8:2a:
24:25:4a:dd:7f:9a:46:8b:b8:a4:23:74:41:a6:3a:
71:de:84:1d:a2:8c:ff:5c:fd:64:ef:8a:17:18:ad:
79:45:0b:af:7f:aa:09:86:89:2d:2a:6c:e9:ab:a6:
e5:85:3a:53:bb:49:b4:26:87:a0:f5:a9:3d:97:e7:
a9:30:e3:f3:fb:e9:a7:5e:6f:55:ce:b1:1b:c8:77:
16:43:c4:ae:df:de:74:02:64:75:77:f6:19:16:91:
12:b9:72:4d:41:7e:de:bc:9a:fe:e8:d6:49:49:63:
4b:05:6e:23:9b:32:47:38:e0:dd:29:4c:50:6c:92:
4e:89:4f:6b:e9:4f:3d:66:0d:12:c6:93:37:4f:33:
63:95:80:af:23:70:eb:d9:2b:73:d6:ac:49:46:cb:
82:1f:63:7e:e9:11:b2:f0:8a:0a:4c:dc:cc:0a:57:
db:10:7a:35:b4:c3:6c:25:74:46:48:53:a1:c7:b6:
ef:b7:b0:81:09:eb:f3:5c:86:c8:89:f7:53:96:d3:
a0:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:D0:F3:10:46:60:99:91:55:7E:EA:C8:0F:5E:B9:11:98:BE:D7:9C
X509v3 Authority Key Identifier:
keyid:D7:40:1E:02:49:41:8B:35:75:47:26:88:24:F6:24:49:25:D8:DB:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10AeAklBizV1RyaIJPYkSSXY2zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/10AeAklBizV1RyaIJPYkSSXY2zk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/10AeAklBizV1RyaIJPYkSSXY2zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:5b:a8:fe:11:cb:ab:9d:8a:52:a3:d7:c5:c3:08:53:c2:dc:
fe:6a:31:00:05:da:7b:8f:d7:a1:0b:bc:d2:df:c9:c7:07:3f:
b9:85:24:9e:70:c7:e4:3d:bf:aa:d0:ba:65:a0:94:ad:5c:b5:
b5:67:6f:65:5c:15:19:d5:ba:19:11:57:7a:f2:9a:d6:ac:65:
9d:c6:fe:5e:d7:8b:41:b8:6d:ed:0e:d8:32:ec:3d:2f:a0:c9:
e1:33:77:2c:2d:de:8b:69:60:01:84:d3:01:1c:04:0c:eb:18:
6a:95:07:d1:ab:d1:0f:99:9f:48:5c:41:37:c2:75:be:36:3b:
fe:10:96:41:20:b7:4f:e5:c2:78:1b:f4:5e:a0:fb:62:8d:c0:
7b:1b:75:ca:4c:53:ab:3f:cc:4d:d6:2b:14:f4:de:1d:fd:f7:
cf:55:79:01:4e:94:48:74:9c:37:d7:89:69:a3:d8:eb:d3:65:
e6:95:41:94:a3:6d:e7:b1:87:e5:d8:87:bd:a9:b0:d8:30:5c:
6a:93:f8:8b:45:df:c3:3f:1a:a5:c0:24:35:9d:15:a2:eb:b4:
ff:c6:5c:27:80:4f:08:e8:7e:c8:06:5e:c2:bd:50:f8:8e:43:
2c:e6:90:72:1a:88:f8:88:ee:2b:91:4f:44:68:23:d1:35:f2:
8c:db:6f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:37:11 2026 by rpki-client